rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-27792 Ghostscript: heap buffer over write vulnerability in ghostscript's lp8000_print_page() in gdevlp8k.c
A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service.
Problem types: cwe_id: CWE-119
description: Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/a:redhat:enterprise_linux:8::appstream
cpe:/a:redhat:enterprise_linux:8::crb
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 6
cpes: cpe:/o:redhat:enterprise_linux:6
default_status: unknown
vendor: Red Hat
product: Red Hat Enterprise Linux 7
cpes: cpe:/o:redhat:enterprise_linux:7
default_status: unknown
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
version: 3.1
Published: 2022-08-19T22:46:08.000Z
CVE-2020-27793 
An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c. This could allow an attacker to cause a crash, and perform a denail of service attack.
Problem types: cwe_id: CWE-193
description: CWE-193 - Off-by-one Error
Affected products: vendor: n/a
product: radare2
Published: 2022-08-19T22:43:00.000Z
CVE-2020-27794 
A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation could lead to modification of unexpected memory locations and potentially causing a crash.
Problem types: cwe_id: CWE-415
description: CWE-415 - Double Free
Affected products: vendor: n/a
product: radare2
Published: 2022-08-19T22:44:29.000Z
CVE-2020-27795 
A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when command "adf" has no or wrong argument, anal_fcn_data (core, input + 1) --> RAnalFunction *fcn = r_anal_get_fcn_in (core->anal, core->offset, -1); returns null pointer for fcn causing segmentation fault later in ensure_fcn_range (fcn).
Problem types: cwe_id: CWE-908
description: CWE-908 - Use of Uninitialized Resource
Affected products: vendor: n/a
product: radare2
Published: 2022-08-19T22:36:00.000Z
CVE-2020-27796 
A heap-based buffer over-read was discovered in the invert_pt_dynamic function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: upx
Published: 2022-08-25T19:37:04.000Z
CVE-2020-27797 
An invalid memory address reference was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: upx
Published: 2022-08-25T19:37:18.000Z
CVE-2020-27798 
An invalid memory address reference was discovered in the adjABS function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: upx
Published: 2022-08-25T19:37:32.000Z
CVE-2020-27799 
A heap-based buffer over-read was discovered in the acc_ua_get_be32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: upx
Published: 2022-08-25T19:37:43.000Z
CVE-2020-27800 
A heap-based buffer over-read was discovered in the get_le32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: upx
Published: 2022-08-25T19:37:54.000Z
CVE-2020-27801 
A heap-based buffer over-read was discovered in the get_le64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: upx
Published: 2022-08-25T19:38:10.000Z
CVE-2020-27802 
An floating point exception was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: upx
Published: 2022-08-25T19:38:23.000Z
CVE-2020-27813 
An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this flaw to cause a denial of service attack on an HTTP Server allowing websocket connections.
Problem types: cwe_id: CWE-190
description: CWE-190->CWE-400
Affected products: vendor: n/a
product: golang-github-gorilla-websocket
Published: 2020-12-02T00:00:00.000Z
CVE-2020-27814 
A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbitrary code with the permission of the user running such an application.
Problem types: cwe_id: CWE-122
description: CWE-122
Affected products: vendor: n/a
product: openjpeg
Published: 2021-01-25T18:38:36.000Z
CVE-2020-27815 
A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: Linux Kernel
Published: 2021-05-26T12:18:11.000Z
CVE-2020-27816 
The elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it is possible to replace the original openshift-logging console link (kibana console) to different one, created based on the new CR for the new kibana resource. This could lead to an arbitrary URL redirection or the openshift-logging console link damage. This flaw affects elasticsearch-operator-container versions before 4.7.
Problem types: cwe_id: CWE-601
description: CWE-601
Affected products: vendor: n/a
product: openshift-logging/console
Published: 2020-12-02T00:54:03.000Z
CVE-2020-27818 
A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be processed by pngcheck could cause a temporary denial of service, posing a low risk to application availability.
Problem types: cwe_id: CWE-120
description: CWE-120->CWE-125
Affected products: vendor: n/a
product: pngcheck
Published: 2020-12-08T00:04:55.000Z
CVE-2020-27819 
An issue was discovered in libxls before and including 1.6.1 when reading Microsoft Excel files. A NULL pointer dereference vulnerability exists when parsing XLS cells in libxls/xls2csv.c:199. It could allow a remote attacker to cause a denial of service via crafted XLS file.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: n/a
product: libxls
Published: 2021-02-23T03:40:01.000Z
CVE-2020-27820 
A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose() handler could happen if removing device (that is not common to remove video card physically without power-off, but same happens if "unbind" the driver).
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: n/a
product: kernel
Published: 2021-11-02T23:26:20.000Z
CVE-2020-27821 
A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting in a denial of service. This flaw affects QEMU versions prior to 5.2.0.
Problem types: cwe_id: CWE-787
description: CWE-787->CWE-122
Affected products: vendor: n/a
product: QEMU
Published: 2020-12-08T21:33:02.000Z
CVE-2020-27822 
A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-401
description: CWE-401
Affected products: vendor: n/a
product: wildfly
Published: 2020-12-08T00:07:18.000Z
CVE-2020-27823 
A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Problem types: cwe_id: CWE-20
description: CWE-20->CWE-120->CWE-787
Affected products: vendor: n/a
product: openjpeg
Published: 2021-05-13T14:03:50.000Z
CVE-2020-27824 
A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker who can supply crafted input to decomposition levels to cause a buffer overflow. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-20
description: CWE-20->CWE-120->CWE-125
Affected products: vendor: n/a
product: openjpeg
Published: 2021-05-13T13:56:17.000Z
CVE-2020-27825 
A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (before 5.10-rc1). There was a race problem in trace_open and resize of cpu buffer running parallely on different cpus, may cause a denial of service problem (DOS). This flaw could even allow a local attacker with special user privilege to a kernel information leak threat.
Problem types: cwe_id: CWE-362
description: CWE-362->CWE-416
Affected products: vendor: n/a
product: kernel
Published: 2020-12-11T17:13:31.000Z
CVE-2020-27826 
A flaw was found in Keycloak before version 12.0.0 where it is possible to update the user's metadata attributes using Account REST API. This flaw allows an attacker to change its own NameID attribute to impersonate the admin user for any particular application.
Problem types: cwe_id: CWE-250
description: CWE-250
Affected products: vendor: n/a
product: keycloak
Published: 2021-05-28T10:20:30.000Z
CVE-2020-27827 
A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: n/a
product: lldp/openvswitch
Published: 2021-03-18T00:00:00.000Z
CVE-2020-27828 
There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability.
Problem types: cwe_id: CWE-20
description: CWE-20->CWE-122->CWE-787
Affected products: vendor: n/a
product: jasper
Published: 2020-12-11T03:07:09.000Z
CVE-2020-27829 
A heap based buffer overflow in coders/tiff.c may result in program crash and denial of service in ImageMagick before 7.0.10-45.
Problem types: cwe_id: CWE-122
description: CWE-122
Affected products: vendor: n/a
product: ImageMagick
Published: 2021-03-26T16:49:00.000Z
CVE-2020-27830 
A vulnerability was found in Linux Kernel where in the spk_ttyio_receive_buf2() function, it would dereference spk_ttyio_synth without checking whether it is NULL or not, and may lead to a NULL-ptr deref crash.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: n/a
product: kernel
Published: 2021-05-13T14:15:34.000Z
CVE-2020-27831 
A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addresses for repository email notifications. This flaw allows an attacker to add email addresses they do not own to repository notifications.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: n/a
product: quay
Published: 2021-05-26T23:46:57.000Z
CVE-2020-27832 
A flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting (XSS) vulnerability when displaying a repository's notification. This flaw allows an attacker to trick a user into performing a malicious action to impersonate the target user. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: n/a
product: quay
Published: 2021-05-27T13:50:39.000Z
CVE-2020-27833 
A Zip Slip vulnerability was found in the oc binary in openshift-clients where an arbitrary file write is achieved by using a specially crafted raw container image (.tar file) which contains symbolic links. The vulnerability is limited to the command `oc image extract`. If a symbolic link is first created pointing within the tarball, this allows further symbolic links to bypass the existing path check. This flaw allows the tarball to create links outside the tarball's parent directory, allowing for executables or configuration files to be overwritten, resulting in arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Versions up to and including openshift-clients-4.7.0-202104250659.p0.git.95881af are affected.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: n/a
product: openshift/oc
Published: 2021-05-14T20:20:45.000Z
CVE-2020-27835 
A use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was found in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: n/a
product: kernel
Published: 2021-01-07T17:24:30.000Z
CVE-2020-27836 
A flaw was found in cluster-ingress-operator. A change to how the router-default service allows only certain IP source ranges could allow an attacker to access resources that would otherwise be restricted to specified IP ranges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability..
Problem types: cwe_id: CWE-732
description: CWE-732 - Incorrect Permission Assignment for Critical Resource
Affected products: vendor: n/a
product: cluster-ingress-operator
Published: 2022-08-22T14:43:37.000Z
CVE-2020-27837 
A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is similar to CVE-2017-12164, but requires more difficult conditions to exploit.
Problem types: cwe_id: CWE-362
description: CWE-362
Affected products: vendor: n/a
product: gdm
Published: 2020-12-28T18:34:04.000Z
CVE-2020-27838 
A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients (like client secret) without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this vulnerability is to data confidentiality.
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: n/a
product: keycloak
Published: 2021-03-08T21:41:27.000Z
CVE-2020-27839 
A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is stored by the frontend application in the browser’s localStorage which is potentially vulnerable to attackers via XSS attacks. The highest threat from this vulnerability is to data confidentiality and integrity.
Problem types: cwe_id: CWE-522
description: CWE-522
Affected products: vendor: n/a
product: ceph-dashboard
Published: 2021-05-26T21:25:44.000Z
CVE-2020-27840 
A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-125
description: CWE-125
Affected products: vendor: n/a
product: samba
Published: 2021-05-12T14:06:16.000Z
CVE-2020-27841 
There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability.
Problem types: cwe_id: CWE-122
description: CWE-122
Affected products: vendor: n/a
product: openjpeg
Published: 2021-01-05T17:18:51.000Z
CVE-2020-27842 
There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer dereference. The highest impact of this flaw is to application availability.
Problem types: cwe_id: CWE-125
description: CWE-125
Affected products: vendor: n/a
product: openjpeg
Published: 2021-01-05T17:21:40.000Z
CVE-2020-27843 
A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability.
Problem types: cwe_id: CWE-125
description: CWE-125
Affected products: vendor: n/a
product: openjpeg
Published: 2021-01-05T17:22:06.000Z
CVE-2020-27844 
A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Problem types: cwe_id: CWE-20
description: CWE-20->CWE-122->CWE-787
Affected products: vendor: n/a
product: openjpeg
Published: 2021-01-05T17:43:49.000Z
CVE-2020-27845 
There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability.
Problem types: cwe_id: CWE-125
description: CWE-125
Affected products: vendor: n/a
product: openjpeg
Published: 2021-01-05T17:44:30.000Z
CVE-2020-27846 
A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Problem types: cwe_id: CWE-115
description: CWE-115
Affected products: vendor: n/a
product: crewjam/saml
Published: 2020-12-21T15:16:14.000Z
CVE-2020-27847 
A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validation. This flaw allows an attacker to bypass SAML authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. This flaw affects dex versions before 2.27.0.
Problem types: cwe_id: CWE-228
description: CWE-228->CWE-290
Affected products: vendor: n/a
product: dexidp/dex
Published: 2021-05-28T10:20:35.000Z
CVE-2020-27848 
dotCMS before 20.10.1 allows SQL injection, as demonstrated by the /api/v1/containers orderby parameter. The PaginatorOrdered classes that are used to paginate results of a REST endpoints do not sanitize the orderBy parameter and in some cases it is vulnerable to SQL injection attacks. A user must be an authenticated manager in the dotCMS system to exploit this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-30T18:24:20.000Z
CVE-2020-27850 
A stored Cross-Site Scripting (XSS) vulnerability in forms import feature in Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary web script or HTML via the import of a GF form. This code is interpreted by users in a privileged role (Administrator, Editor, etc.).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-20T03:08:51.000Z
CVE-2020-27851 
Multiple stored HTML injection vulnerabilities in the "poll" and "quiz" features in an additional paid add-on of Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary HTML code via poll or quiz answers. This code is interpreted by users in a privileged role (Administrator, Editor, etc.).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-20T03:14:39.000Z
CVE-2020-27852 
A stored Cross-Site Scripting (XSS) vulnerability in the survey feature in Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary web script or HTML via a textarea field. This code is interpreted by users in a privileged role (Administrator, Editor, etc.).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-20T03:11:16.000Z
CVE-2020-27853 
Wire before 2020-10-16 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a format string. This affects Wire AVS (Audio, Video, and Signaling) 5.3 through 6.x before 6.4, the Wire Secure Messenger application before 3.49.918 for Android, and the Wire Secure Messenger application before 3.61 for iOS. This occurs via the value parameter to sdp_media_set_lattr in peerflow/sdp.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-27T17:53:51.000Z
CVE-2020-27855 
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SR2 files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-11433.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Foxit
product: Studio Photo
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2021-02-09T15:46:10.000Z
CVE-2020-27856 
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CR2 files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-11434.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Foxit
product: Studio Photo
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2021-02-09T15:46:10.000Z