rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-12880 
An issue was discovered in Pulse Policy Secure (PPS) and Pulse Connect Secure (PCS) Virtual Appliance before 9.1R8. By manipulating a certain kernel boot parameter, it can be tricked into dropping into a root shell in a pre-install phase where the entire source code of the appliance is available and can be retrieved. (The source code is otherwise inaccessible because the appliance has its hard disks encrypted, and no root shell is available during normal operation.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-27T22:10:12.000Z
CVE-2020-12882 
Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-15T04:55:07.000Z
CVE-2020-12883 
Buffer over-reads were discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sn_coap_parser_options_parse() parses CoAP input linearly using a while loop. Once an option is parsed in a loop, the current point (*packet_data_pptr) is increased correspondingly. The pointer is restricted by the size of the received buffer, as well as by the option delta and option length bytes. The actual input packet length is not verified against the number of bytes read when processing the option extended delta and the option extended length. Moreover, the calculation of the message_left variable, in the case of non-extended option deltas, is incorrect and indicates more data left for processing than provided in the function input. All of these lead to heap-based or stack-based memory location read access that is outside of the intended boundary of the buffer. Depending on the platform-specific memory management mechanisms, it can lead to processing of unintended inputs or system memory access violation errors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-18T18:24:59.000Z
CVE-2020-12884 
A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sn_coap_parser_options_parse_multiple_options() parses CoAP options that may occur multiple consecutive times in a single packet. While processing the options, packet_data_pptr is accessed after being incremented by option_len without a prior out-of-bounds memory check. The temp_parsed_uri_query_ptr is validated for a correct range, but the range valid for temp_parsed_uri_query_ptr is derived from the amount of allocated heap memory, not the actual input size. Therefore the check of temp_parsed_uri_query_ptr may be insufficient for safe access to the area pointed to by packet_data_pptr. As a result, access to a memory area outside of the intended boundary of the packet buffer is made.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-18T18:24:56.000Z
CVE-2020-12885 
An infinite loop was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sn_coap_parser_options_parse_multiple_options() parses CoAP options in a while loop. This loop's exit condition is computed using the previously allocated heap memory required for storing the result of parsing multiple options. If the input heap memory calculation results in zero bytes, the loop exit condition is never met and the loop is not terminated. As a result, the packet parsing function never exits, leading to resource consumption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-18T18:24:53.000Z
CVE-2020-12886 
A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sn_coap_parser_options_parse() parses the CoAP packet header starting from the message token. The length of the token in the received message is provided in the first byte parsed by the sn_coap_parser_options_parse() function. The length encoded in the message is not validated against the actual input buffer length before accessing the token. As a result, memory access outside of the intended boundary of the buffer may occur.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-18T18:24:51.000Z
CVE-2020-12887 
Memory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed-coap library 5.1.5. The CoAP parser is responsible for parsing received CoAP packets. The function sn_coap_parser_options_parse() parses the CoAP option number field of all options present in the input packet. Each option number is calculated as a sum of the previous option number and a delta of the current option. The delta and the previous option number are expressed as unsigned 16-bit integers. Due to lack of overflow detection, it is possible to craft a packet that wraps the option number around and results in the same option number being processed again in a single packet. Certain options allocate memory by calling a memory allocation function. In the cases of COAP_OPTION_URI_QUERY, COAP_OPTION_URI_PATH, COAP_OPTION_LOCATION_QUERY, and COAP_OPTION_ETAG, there is no check on whether memory has already been allocated, which in conjunction with the option number integer overflow may lead to multiple assignments of allocated memory to a single pointer. This has been demonstrated to lead to memory leak by buffer orphaning. As a result, the memory is never freed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-18T18:24:47.000Z
CVE-2020-12888 
The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-15T17:02:20.000Z
CVE-2020-12889 
MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-15T17:53:39.000Z
CVE-2020-12890 
Improper handling of pointers in the System Management Mode (SMM) handling code may allow for a privileged attacker with physical or administrative access to potentially manipulate the AMD Generic Encapsulated Software Architecture (AGESA) to execute arbitrary code undetected by the operating system.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Processors
Published: 2021-12-10T21:56:55.155Z
CVE-2020-12891 
AMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged user may be able to drop its malicious DLL file in any location which is in path environment variable.
Problem types: description: TBD
Affected products: vendor: AMD
product: Radeon Software
vendor: AMD
product: Radeon Pro Software for Enterprise
Published: 2022-02-04T22:29:12.020Z
CVE-2020-12892 
An untrusted search path in AMD Radeon settings Installer may lead to a privilege escalation or unauthorized code execution.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-11-15T18:39:47.290Z
CVE-2020-12893 
Stack Buffer Overflow in AMD Graphics Driver for Windows 10 in Escape 0x15002a may lead to escalation of privilege or denial of service.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-11-15T19:45:36.942Z
CVE-2020-12894 
Arbitrary Write in AMD Graphics Driver for Windows 10 in Escape 0x40010d may lead to arbitrary write to kernel memory or denial of service.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-11-15T19:48:37.220Z
CVE-2020-12895 
Pool/Heap Overflow in AMD Graphics Driver for Windows 10 in Escape 0x110037 may lead to escalation of privilege, information disclosure or denial of service.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-11-15T15:56:00.755Z
CVE-2020-12897 
Kernel Pool Address disclosure in AMD Graphics Driver for Windows 10 may lead to KASLR bypass.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-11-15T15:44:11.456Z
CVE-2020-12898 
Stack Buffer Overflow in AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-11-15T18:58:30.225Z
CVE-2020-12899 
Arbitrary Read in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or denial of service.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-11-15T15:29:56.401Z
CVE-2020-12900 
An arbitrary write vulnerability in the AMD Radeon Graphics Driver for Windows 10 potentially allows unprivileged users to gain Escalation of Privileges and cause Denial of Service.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-11-15T15:27:51.589Z
CVE-2020-12901 
Arbitrary Free After Use in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or information disclosure.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-11-15T19:20:07.896Z
CVE-2020-12902 
Arbitrary Decrement Privilege Escalation in AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-11-15T15:48:41.148Z
CVE-2020-12903 
Out of Bounds Write and Read in AMD Graphics Driver for Windows 10 in Escape 0x6002d03 may lead to escalation of privilege or denial of service.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-11-15T19:44:12.722Z
CVE-2020-12904 
Out of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004203 may lead to arbitrary information disclosure.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-11-15T15:12:44.714Z
CVE-2020-12905 
Out of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004403 may lead to arbitrary information disclosure.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-11-15T19:40:02.588Z
CVE-2020-12911 
A denial of service vulnerability exists in the D3DKMTCreateAllocation handler functionality of AMD ATIKMDAG.SYS (e.g. version 26.20.15029.27017). A specially crafted D3DKMTCreateAllocation API request can cause an out-of-bounds read and denial of service (BSOD). This vulnerability can be triggered from a non-privileged account.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: n/a
product: AMD Graphics Driver for Windows
Published: 2020-10-13T21:13:14.000Z
CVE-2020-12912 
A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.
Problem types: cwe_id: CWE-749
description: CWE-749: Exposed Dangerous Method or Function
Affected products: vendor: n/a
product: AMD extension to Linux "hwmon" for Zen1 platforms
Published: 2020-11-12T19:08:57.000Z
CVE-2020-12920 
A potential denial of service issue exists in the AMD Display driver Escape 0x130007 Call handler. An attacker with low privilege could potentially induce a Windows BugCheck.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-11-15T15:50:34.930Z
CVE-2020-12926 
The Trusted Platform Modules (TPM) reference software may not properly track the number of times a failed shutdown happens. This can leave the TPM in a state where confidential key material in the TPM may be able to be compromised. AMD believes that the attack requires physical access of the device because the power must be repeatedly turned on and off. This potential attack may be used to change confidential information, alter executables signed by key material in the TPM, or create a denial of service of the device.
Problem types: cwe_id: CWE-367
description: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition
Affected products: vendor: n/a
product: AMD's fTPM implementation
Published: 2020-11-12T19:08:52.000Z
CVE-2020-12927 
A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated user to escalate privileges to NT authority system.
Problem types: cwe_id: CWE-749
description: CWE-749: Exposed Dangerous Method or Function
Affected products: vendor: n/a
product: AMD VBIOS Flash Tool SDK
Published: 2020-11-12T19:09:46.000Z
CVE-2020-12928 
A vulnerability in a dynamically loaded AMD driver in AMD Ryzen Master V15 may allow any authenticated user to escalate privileges to NT authority system.
Problem types: cwe_id: CWE-749
description: CWE-749: Exposed Dangerous Method or Function
Affected products: vendor: n/a
product: AMD Ryzen Master
Published: 2020-10-13T21:12:21.000Z
CVE-2020-12929 
Improper parameters validation in some trusted applications of the PSP contained in the AMD Graphics Driver may allow a local attacker to bypass security restrictions and achieve arbitrary code execution .
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-11-15T15:52:18.454Z
CVE-2020-12930 
Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity.
Affected products: vendor: AMD
product: AMD Radeon RX 5000 Series & PRO W5000 Series
default_status: unaffected
vendor: AMD
product: AMD Ryzen(TM) Embedded R1000
default_status: unaffected
vendor: AMD
product: AMD Ryzen(TM) Embedded R2000
default_status: unaffected
vendor: AMD
product: AMD Ryzen(TM) Embedded 5000
default_status: unaffected
vendor: AMD
product: AMD Ryzen(TM) Embedded V1000
default_status: unaffected
vendor: AMD
product: AMD Ryzen(TM) Embedded V2000
default_status: unaffected
Published: 2022-11-09T20:44:25.791Z
CVE-2020-12931 
Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity.
Affected products: vendor: AMD
product: AMD Radeon RX 5000 Series & PRO W5000 Series
default_status: unaffected
vendor: AMD
product: AMD Ryzen(TM) Embedded R1000
default_status: unaffected
vendor: AMD
product: AMD Ryzen(TM) Embedded R2000
default_status: unaffected
vendor: AMD
product: AMD Ryzen(TM) Embedded 5000
default_status: unaffected
vendor: AMD
product: AMD Ryzen(TM) Embedded V1000
default_status: unaffected
Published: 2022-11-09T20:44:24.974Z
CVE-2020-12933 
A denial of service vulnerability exists in the D3DKMTEscape handler functionality of AMD ATIKMDAG.SYS (e.g. version 26.20.15029.27017). A specially crafted D3DKMTEscape API request can cause an out-of-bounds read in Windows OS kernel memory area. This vulnerability can be triggered from a non-privileged account.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: n/a
product: AMD Graphics Driver for Windows
Published: 2020-10-13T21:11:26.000Z
CVE-2020-12944 
Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution.
Problem types: description: tbd
Affected products: vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2021-11-16T18:17:24.768Z
CVE-2020-12946 
Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service.
Problem types: description: tbd
Affected products: vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2021-11-16T18:01:28.187Z
CVE-2020-12951 
Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations.
Problem types: description: tbd
Affected products: vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2021-11-16T18:06:30.578Z
CVE-2020-12954 
A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification.
Problem types: cwe_id: CWE-693
description: CWE-693 Protection Mechanism Failure
Affected products: vendor: AMD
product: 1st Gen AMD EPYC™
vendor: AMD
product: 2nd Gen AMD EPYC™
vendor: AMD
product: 3rd Gen AMD EPYC™
Published: 2021-11-16T18:11:02.785Z
CVE-2020-12960 
AMD Graphics Driver for Windows 10, amdfender.sys may improperly handle input validation on InputBuffer which may result in a denial of service (DoS).
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-11-15T19:47:19.313Z
CVE-2020-12961 
A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: AMD
product: 2nd Gen AMD EPYC™
vendor: AMD
product: 3rd Gen AMD EPYC™
Published: 2021-11-16T18:13:39.959Z
CVE-2020-12962 
Escape call interface in the AMD Graphics Driver for Windows may cause privilege escalation.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-11-15T19:42:43.185Z
CVE-2020-12963 
An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows may allow unprivileged users to compromise the system.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-11-15T15:58:06.272Z
CVE-2020-12964 
A potential privilege escalation/denial of service issue exists in the AMD Radeon Kernel Mode driver Escape 0x2000c00 Call handler. An attacker with low privilege could potentially induce a Windows BugCheck or write to leak information.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-11-15T14:51:15.631Z
CVE-2020-12965 
When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially resulting in data leakage.
Problem types: description: TBD
Affected products: vendor: AMD
product: All supported processors
Published: 2022-02-04T22:29:13.634Z
CVE-2020-12966 
AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State (SEV-ES) and Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP). A local authenticated attacker could potentially exploit this vulnerability leading to leaking guest data by the malicious hypervisor.
Problem types: description: TBD
Affected products: vendor: AMD
product: 1st/2nd/3rd Gen AMD EPYC™ Processors
Published: 2022-02-04T22:29:12.748Z
CVE-2020-12967 AMD Secure Encrypted Virtualization
The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor.
Problem types: description: Arbitrary Code Execution
Affected products: vendor: AMD
product: SEV/SEV-ES
Published: 2021-05-13T11:06:11.058Z
CVE-2020-12980 
An out of bounds write and read vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-06-11T21:49:38.162Z
CVE-2020-12981 
An insufficient input validation in the AMD Graphics Driver for Windows 10 may allow unprivileged users to unload the driver, potentially causing memory corruptions in high privileged processes, which can lead to escalation of privileges or denial of service.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-06-11T21:49:43.864Z
CVE-2020-12982 
An invalid object pointer free vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-06-11T21:49:49.547Z
CVE-2020-12983 
An out of bounds write vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privileges or denial of service.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-06-11T21:49:54.656Z
CVE-2020-12985 
An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-06-11T21:50:05.196Z
CVE-2020-12986 
An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may cause arbitrary code execution in the kernel, leading to escalation of privilege or denial of service.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-06-11T21:50:10.654Z
CVE-2020-12987 
A heap information leak/kernel pool address disclosure vulnerability in the AMD Graphics Driver for Windows 10 may lead to KASLR bypass.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Radeon Software
Published: 2021-06-11T21:50:16.210Z
CVE-2020-12988 
A potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system when it is rebooted.
Problem types: description: TBD
Affected products: vendor: AMD
product: 1st/2nd/3rd Gen AMD EPYC™ Processors
Published: 2021-06-11T21:50:22.301Z
CVE-2020-13091 
pandas through 1.0.3 can unserialize and execute commands from an untrusted file that is passed to the read_pickle() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the read_pickle() function is documented as unsafe and it is the user's responsibility to use the function in a secure manner
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-15T18:41:48.000Z
CVE-2020-13092 
scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the joblib.load() function is documented as unsafe and it is the user's responsibility to use the function in a secure manner
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-15T18:41:33.000Z
CVE-2020-13093 
iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-15T18:51:16.000Z
CVE-2020-13094 
Dolibarr before 11.0.4 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-18T21:02:13.000Z
CVE-2020-13095 
Little Snitch version 4.5.1 and older changed ownership of a directory path controlled by the user. This allowed the user to escalate to root by linking the path to a directory containing code executed by root.
Problem types: cwe_id: CWE-59
description: CWE-59: Improper Link Resolution Before File Access ('Link Following')
Affected products: vendor: n/a
product: Little Snitch
Published: 2020-06-30T16:33:54.000Z