rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-12657 
An issue was discovered in the Linux kernel before 5.6.5. There is a use-after-free in block/bfq-iosched.c related to bfq_idle_slice_timer_body.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-05T06:01:45.000Z
CVE-2020-12658 
gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in gp_workers.c. NOTE: An upstream comment states "We are already on a shutdown path when running the code in question, so a DoS there doesn't make any sense, and there has been no additional information provided us (as upstream) to indicate why this would be a problem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T00:17:50.000Z
CVE-2020-12659 
An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-05T06:13:15.000Z
CVE-2020-12662 
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-19T13:50:18.000Z
CVE-2020-12663 
Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-19T13:48:46.000Z
CVE-2020-12666 
macaron before 1.3.7 has an open redirect in the static handler, as demonstrated by the http://127.0.0.1:4000//example.com/ URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-05T21:06:59.000Z
CVE-2020-12667 
Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-19T00:00:00.000Z
CVE-2020-12668 
Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow for abuse of the application class loader, including Arbitrary File Disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-19T22:33:55.000Z
CVE-2020-12669 
core/get_menudiv.php in Dolibarr before 11.0.4 allows remote authenticated attackers to bypass intended access restrictions via a non-alphanumeric menu parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-06T18:30:41.000Z
CVE-2020-12670 
XSS exists in Webmin 1.941 and earlier affecting the Save function of the Read User Email Module / mailboxes Endpoint when attempting to save HTML emails. This module parses any output without sanitizing SCRIPT elements, as opposed to the View function, which sanitizes the input correctly. A malicious user can send any JavaScript payload into the message body and execute it if the user decides to save that email.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-12T15:56:28.000Z
CVE-2020-12672 
GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-06T02:47:51.000Z
CVE-2020-12673 
In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-12T15:18:13.000Z
CVE-2020-12674 
In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-12T15:20:29.000Z
CVE-2020-12675 
The mappress-google-maps-for-wordpress plugin before 2.54.6 for WordPress does not correctly implement capability checks for AJAX functions related to creation/retrieval/deletion of PHP template files, leading to Remote Code Execution. NOTE: this issue exists because of an incomplete fix for CVE-2020-12077.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-29T15:52:06.000Z
CVE-2020-12676 
FusionAuth fusionauth-samlv2 0.2.3 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-02T19:40:33.000Z
CVE-2020-12677 
An issue was discovered in Progress MOVEit Automation Web Admin. A Web Admin application endpoint failed to adequately sanitize malicious input, which could allow an unauthenticated attacker to execute arbitrary code in a victim's browser, aka XSS. This affects 2018 - 2018.0 prior to 2018.0.3, 2018 SP1 - 2018.2 prior to 2018.2.3, 2018 SP2 - 2018.3 prior to 2018.3.7, 2019 - 2019.0 prior to 2019.0.3, 2019.1 - 2019.1 prior to 2019.1.2, and 2019.2 - 2019.2 prior to 2019.2.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-14T17:34:03.000Z
CVE-2020-12679 
A reflected cross-site scripting (XSS) vulnerability in the Mitel ShoreTel Conference Web Application 19.50.1000.0 before MiVoice Connect 18.7 SP2 allows remote attackers to inject arbitrary JavaScript and HTML via the PATH_INFO to home.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-07T16:36:31.000Z
CVE-2020-12680 
Avira Free Antivirus through 15.0.2005.1866 allows local users to discover user credentials. The functions of the executable file Avira.PWM.NativeMessaging.exe are aimed at collecting credentials stored in Chrome, Firefox, Opera, and Edge. The executable does not verify the calling program and thus a request such as fetchChromePasswords or fetchCredentials will succeed. NOTE: some third parties have stated that this is "not a vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-08T12:02:43.000Z
CVE-2020-12681 
Missing TLS certificate validation on 3xLogic Infinias eIDC32 devices through 3.4.125 allows an attacker to intercept/control the channel by which door lock policies are applied.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-26T11:31:36.000Z
CVE-2020-12683 
Katyshop2 before 2.12 has multiple stored XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-07T15:59:59.000Z
CVE-2020-12684 
XXE injection can occur in i-net Clear Reports 2019 19.0.287 (Designer), as used in i-net HelpDesk and other products, when XML input containing a reference to an external entity is processed by a weakly configured XML parser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-15T19:09:41.000Z
CVE-2020-12685 
XSS in the admin help system admin/help.html and admin/quicklinks.html in Interchange 4.7.0 through 5.11.x allows remote attackers to steal credentials or data via browser JavaScript.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-15T16:53:55.000Z
CVE-2020-12687 
An issue was discovered in Serpico before 1.3.3. The /admin/attacments_backup endpoint can be requested by non-admin authenticated users. This means that an attacker with a user account can retrieve all of the attachments of all users (including administrators) from the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-07T15:15:36.000Z
CVE-2020-12689 
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. Any user authenticated within a limited scope (trust/oauth/application credential) can create an EC2 credential with an escalated permission, such as obtaining admin while the user is on a limited viewer role. This potentially allows a malicious user to act as the admin on a project another user has the admin role on, which can effectively grant that user global admin privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-06T23:43:20.000Z
CVE-2020-12690 
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The list of roles provided for an OAuth1 access token is silently ignored. Thus, when an access token is used to request a keystone token, the keystone token contains every role assignment the creator had for the project. This results in the provided keystone token having more role assignments than the creator intended, possibly giving unintended escalated access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-06T23:43:10.000Z
CVE-2020-12691 
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. Any authenticated user can create an EC2 credential for themselves for a project that they have a specified role on, and then perform an update to the credential user and project, allowing them to masquerade as another user. This potentially allows a malicious user to act as the admin on a project another user has the admin role on, which can effectively grant that user global admin privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-06T23:43:01.000Z
CVE-2020-12692 
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The EC2 API doesn't have a signature TTL check for AWS Signature V4. An attacker can sniff the Authorization header, and then use it to reissue an OpenStack token an unlimited number of times.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-06T23:42:42.000Z
CVE-2020-12693 
Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows Authentication Bypass via an Alternate Path or Channel. A race condition allows a user to launch a process as an arbitrary user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-21T22:27:05.000Z
CVE-2020-12695 
The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-08T16:45:04.000Z
CVE-2020-12696 
The iframe plugin before 4.5 for WordPress does not sanitize a URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-07T04:39:15.000Z
CVE-2020-12697 
The direct_mail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-13T12:40:55.000Z
CVE-2020-12698 
The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-13T12:41:58.000Z
CVE-2020-12699 
The direct_mail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-13T12:42:29.000Z
CVE-2020-12700 
The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-13T12:43:23.000Z
CVE-2020-12702 
Weak encryption in the Quick Pairing mode in the eWeLink mobile application (Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier) allows physically proximate attackers to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during the pairing process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-24T13:58:28.000Z
CVE-2020-12703 
UliCMS before 2020.2 has XSS during PackageController uninstall.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-07T19:10:05.000Z
CVE-2020-12704 
UliCMS before 2020.2 has PageController stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-07T19:09:51.000Z
CVE-2020-12705 
Multiple cross-site scripting (XSS) vulnerabilities exist in LeptonCMS before 4.6.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-07T19:09:37.000Z
CVE-2020-12706 
Multiple Cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to inject arbitrary web script or HTML via the go parameter to faq/faq_admin.php or shoutbox_panel/shoutbox_admin.php
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-07T19:09:20.000Z
CVE-2020-12707 
An XSS vulnerability exists in modules/wysiwyg/save.php of LeptonCMS 4.5.0. This can be exploited because the only security measure used against XSS is the stripping of SCRIPT elements. A malicious actor can use HTML event handlers to run JavaScript instead of using SCRIPT elements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-07T19:09:00.000Z
CVE-2020-12708 
Multiple cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to inject arbitrary web script or HTML via the cat_id parameter to downloads/downloads.php or article.php. NOTE: this might overlap CVE-2012-6043.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-07T19:07:58.000Z
CVE-2020-12712 
A vulnerability based on insecure user/password encryption in the JOE (job editor) component of SOS JobScheduler 1.12 and 1.13 allows attackers to decrypt the user/password that is optionally stored with a user's profile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-11T13:18:17.000Z
CVE-2020-12713 
An issue was discovered in CipherMail Community Gateway and Professional/Enterprise Gateway 1.0.1 through 4.7.1-0 and CipherMail Webmail Messenger 1.1.1 through 3.1.1-0. Attackers with administrative access to the web interface have multiple options to escalate their privileges to the Unix root account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-11T01:33:53.000Z
CVE-2020-12714 
An issue was discovered in CipherMail Community Gateway Virtual Appliances and Professional/Enterprise Gateway Virtual Appliances versions 1.0.1 through 4.7.1-0 and CipherMail Webmail Messenger Virtual Appliances 1.1.1 through 3.1.1-0. A Diffie-Hellman parameter of insufficient size could allow man-in-the-middle compromise of communications between CipherMail products and external SMTP clients.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-11T01:46:15.000Z
CVE-2020-12715 
RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-30T20:44:15.000Z
CVE-2020-12717 
The COVIDSafe (Australia) app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere with COVID-19 contact tracing, via a Bluetooth advertisement containing manufacturer data that is too short. This occurs because of an erroneous OpenTrace manuData.subdata call. The ABTraceTogether (Alberta), ProteGO (Poland), and TraceTogether (Singapore) apps were also affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-14T04:36:11.000Z
CVE-2020-12718 
In administration/comments.php in PHP-Fusion 9.03.50, an authenticated attacker can take advantage of a stored XSS vulnerability in the Preview Comment feature. The protection mechanism can be bypassed by using HTML event handlers such as ontoggle.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-07T23:29:26.000Z
CVE-2020-12719 
XXE during an EventPublisher update can occur in Management Console in WSO2 API Manager 3.0.0 and earlier, API Manager Analytics 2.5.0 and earlier, API Microgateway 2.2.0, Enterprise Integrator 6.4.0 and earlier, IS as Key Manager 5.9.0 and earlier, Identity Server 5.9.0 and earlier, and Identity Server Analytics 5.6.0 and earlier.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-07T23:40:14.000Z
CVE-2020-12720 
vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-07T23:52:32.000Z
CVE-2020-12723 
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-05T14:20:50.000Z
CVE-2020-12725 
Havoc Research discovered an authenticated Server-Side Request Forgery (SSRF) via the "JSON" data source of Redash open-source 8.0.0 and prior. Possibly, other connectors are affected. The SSRF is potent and provides a lot of flexibility in terms of being able to craft HTTP requests e.g., by adding headers, selecting any HTTP verb, etc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-11T18:50:28.000Z
CVE-2020-12729 
MagicMotion Flamingo 2 has a lack of access control for reading from device descriptors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-15T14:55:58.000Z
CVE-2020-12730 
MagicMotion Flamingo 2 lacks BLE encryption, enabling data sniffing and packet forgery.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-15T14:55:53.000Z
CVE-2020-12731 
The MagicMotion Flamingo 2 application for Android stores data on an sdcard under com.vt.magicmotion/files/Pictures, whence it can be read by other applications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-15T14:55:48.000Z
CVE-2020-12732 
DEPSTECH WiFi Digital Microscope 3 has a default SSID of Jetion_xxxxxxxx with a password of 12345678.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-15T15:04:11.000Z
CVE-2020-12733 
Certain Shenzhen PENGLIXIN components on DEPSTECH WiFi Digital Microscope 3, as used by Shekar Endoscope, allow a TELNET connection with the molinkadmin password for the molink account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-15T15:04:04.000Z
CVE-2020-12734 
DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and demand a ransom payment from the rightful device owner, because there is no way to reset to Factory Default settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-15T15:03:56.000Z
CVE-2020-12735 
reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-08T04:27:10.000Z
CVE-2020-12736 
Code42 environments with on-premises server versions 7.0.4 and earlier allow for possible remote code execution. When an administrator creates a local (non-SSO) user via a Code42-generated email, the administrator has the option to modify content for the email invitation. If the administrator entered template language code in the subject line, that code could be interpreted by the email generation services, potentially resulting in server-side code injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T19:33:40.000Z
CVE-2020-12737 
An issue was discovered in Maxum Rumpus before 8.2.12 on macOS. Authenticated users can perform a path traversal using double escaped characters, enabling read access to arbitrary files on the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-08T15:49:58.000Z
CVE-2020-12739 
A denial-of-service vulnerability in the Fanuc i Series CNC (0i-MD and 0i Mate-MD) could allow an unauthenticated, remote attacker to cause an affected CNC to become inaccessible to other devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-03T16:35:24.000Z
CVE-2020-12740 
tcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a get_c operation. The issue is being triggered in the function get_ipv6_next() at common/get.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-08T17:03:56.000Z
CVE-2020-12742 
The iubenda-cookie-law-solution plugin before 2.3.5 for WordPress does not restrict URL sanitization to http protocols.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-13T12:45:45.000Z
CVE-2020-12743 
An issue was discovered in Gazie 7.32. A successful installation does not remove or block (or in any other way prevent use of) its own file /setup/install/setup.php, meaning that anyone can request it without authentication. This file allows arbitrary PHP file inclusion via a hidden_req POST parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-11T12:32:59.000Z
CVE-2020-12744 
The MSI installer in Verint Desktop Resources 15.2 allows an unprivileged local user to elevate their privileges during install or repair.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-20T00:00:00.000Z
CVE-2020-12745 
An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can bypass the locked-state protection mechanism and access clipboard content via USSD. The Samsung ID is SVE-2019-16556 (May 2020).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-11T15:05:17.000Z
CVE-2020-12746 
An issue was discovered on Samsung mobile devices with O(8.X), P(9.0), and Q(10.0) (Exynos chipsets) software. Attackers can bypass the Secure Bootloader protection mechanism via a heap-based buffer overflow to execute arbitrary code. The Samsung ID is SVE-2020-16712 (May 2020).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-11T15:12:22.000Z
CVE-2020-12747 
An issue was discovered on Samsung mobile devices with Q(10.0) (Exynos980 9630 and Exynos990 9830 chipsets) software. The Bootloader has a heap-based buffer overflow because of the mishandling of specific commands. The Samsung IDs are SVE-2020-16981, SVE-2020-16991 (May 2020).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-11T15:15:57.000Z
CVE-2020-12748 
An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can bypass the locked-state protection mechanism and designate a different preferred SIM card. The Samsung ID is SVE-2020-16594 (May 2020).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-11T15:25:45.000Z
CVE-2020-12749 
An issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software. The S.LSI Wi-Fi drivers have a buffer overflow. The Samsung ID is SVE-2020-16906 (May 2020).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-11T15:30:44.000Z