rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-19419 
Incorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 allows remote attackers to obtain sensitive device information from the administrator console without authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-10T17:17:52.000Z
CVE-2020-19447 
SQL injection exists in the jdownloads 3.2.63 component for Joomla! com_jdownloads/models/send.php via the f_marked_files_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-24T18:02:34.000Z
CVE-2020-19450 
SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, getUserLimits function in the list parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T14:16:38.000Z
CVE-2020-19451 
SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, updateLog function via the X-forwarded-for Header parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T14:26:42.000Z
CVE-2020-19455 
SQL injection exists in the jdownloads 3.2.63 component for Joomla! via components/com_jdownloads/helpers/categories.php, order function via the filter_order parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T15:17:19.000Z
CVE-2020-19463 
An issue has been found in function vfprintf in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a stack overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T17:09:30.000Z
CVE-2020-19464 
An issue has been found in function XRef::fetch in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a stack overflow .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T17:09:39.000Z
CVE-2020-19465 
An issue has been found in function ObjectStream::getObject in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4 .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T17:09:49.000Z
CVE-2020-19466 
An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 1 .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T17:09:58.000Z
CVE-2020-19467 
An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Illegal Use After Free .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T17:10:08.000Z
CVE-2020-19468 
An issue has been found in function EmbedStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a null pointer derefenrece (invalid read of size 8) .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T17:10:17.000Z
CVE-2020-19469 
An issue has been found in function DCTStream::reset in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 8 .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T17:10:27.000Z
CVE-2020-19470 
An issue has been found in function DCTStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a NULL pointer dereference (invalid read of size 1) .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T17:10:36.000Z
CVE-2020-19471 
An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4 .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T17:10:46.000Z
CVE-2020-19472 
An issue has been found in function DCTStream::readHuffSym in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 2 .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T17:10:55.000Z
CVE-2020-19473 
An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an uncaught floating point exception.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T17:11:04.000Z
CVE-2020-19474 
An issue has been found in function Gfx::doShowText in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Use After Free .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T17:11:14.000Z
CVE-2020-19475 
An issue has been found in function CCITTFaxStream::lookChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 2 .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T17:11:23.000Z
CVE-2020-19481 
An issue was discovered in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid memory read in gf_m2ts_process_pmt in media_tools/mpegts.c that can cause a denial of service via a crafted MP4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T17:14:56.000Z
CVE-2020-19488 
An issue was discovered in box_code_apple.c:119 in Gpac MP4Box 0.8.0, allows attackers to cause a Denial of Service due to an invalid read on function ilst_item_Read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T17:15:06.000Z
CVE-2020-19490 
tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T17:15:15.000Z
CVE-2020-19491 
There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T17:17:01.000Z
CVE-2020-19492 
There is a floating point exception in ReadImage that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T17:18:33.000Z
CVE-2020-19497 
Integer overflow vulnerability in Mat_VarReadNextInfo5 in mat5.c in tbeu matio (aka MAT File I/O Library) 1.5.17, allows attackers to cause a Denial of Service or possibly other unspecified impacts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T17:19:57.000Z
CVE-2020-19498 
Floating point exception in function Fraction in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impacts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T17:20:10.000Z
CVE-2020-19499 
An issue was discovered in heif::Box_iref::get_references in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impact due to an invalid memory read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T17:21:50.000Z
CVE-2020-19510 
Textpattern 4.7.3 contains an aribtrary file load via the file_insert function in include/txp_file.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-21T18:04:08.000Z
CVE-2020-19511 
Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1) className and !2) Description fields in index.php/Admin/Classes,
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-21T18:12:47.000Z
CVE-2020-19513 
Buffer overflow in FinalWire Ltd AIDA64 Engineer 6.00.5100 allows attackers to execute arbitrary code by creating a crafted input that will overwrite the SEH handler.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-18T23:11:19.000Z
CVE-2020-19515 
qdPM V9.1 is vulnerable to Cross Site Scripting (XSS) via qdPM\install\modules\database_config.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T14:37:35.000Z
CVE-2020-19527 
iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DB_NAME parameter to install/install.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-10T21:06:25.000Z
CVE-2020-19547 
Directory Traversal vulnerability exists in PopojiCMS 2.0.1 via the id parameter in admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-25T19:18:28.000Z
CVE-2020-19551 
Blacklist bypass issue exists in WUZHI CMS up to and including 4.1.0 in common.func.php, which when uploaded can cause remote code executiong.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-21T18:31:29.000Z
CVE-2020-19553 
Cross Site Scripting (XSS) vlnerability exists in WUZHI CMS up to and including 4.1.0 in the config function in coreframe/app/attachment/libs/class/ckditor.class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-21T18:51:02.000Z
CVE-2020-19554 
Cross Site Scripting (XSS) vulnerability exists in ManageEngine OPManager <=12.5.174 when the API key contains an XML-based XSS payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-21T19:07:47.000Z
CVE-2020-19559 
An issue in Diebold Aglis XFS for Opteva v.4.1.61.1 allows a remote attacker to execute arbitrary code via a crafted payload to the ResolveMethod() parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-09-11T00:00:00.000Z
CVE-2020-19586 
Incorrect Access Control issue in Yellowfin Business Intelligence 7.3 allows remote attackers to escalate privilege via MIAdminStyles.i4 Admin UI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-14T02:48:10.000Z
CVE-2020-19587 
Cross Site Scripting (XSS) vulnerability in configMap parameters in Yellowfin Business Intelligence 7.3 allows remote attackers to run arbitrary code via MIAdminStyles.i4 Admin UI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-14T02:54:44.000Z
CVE-2020-19595 
Buffer overflow vulnerability in Core FTP Server v2 Build 697, via a crafted username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-05T20:37:03.000Z
CVE-2020-19596 
Buffer overflow vulnerability in Core FTP Server v1.2 Build 583, via a crafted username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-05T20:33:51.000Z
CVE-2020-19609 
Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiff_expand_colormap() function when parsing TIFF files allowing attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T14:10:23.000Z
CVE-2020-19611 
Cross Site Scripting (XSS) in redirect module of Racktables version 0.21.2, allows an attacker to inject arbitrary web script or HTML via the op parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-07T15:49:48.000Z
CVE-2020-19613 
Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-01T18:51:03.000Z
CVE-2020-19616 
Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post header field to /post/editing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-01T18:56:08.000Z
CVE-2020-19617 
Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the nickname field to /settings/profile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-01T18:59:07.000Z
CVE-2020-19618 
Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post content field to /post/editing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-01T19:01:44.000Z
CVE-2020-19619 
Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the signature field to /settings/profile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-01T19:03:08.000Z
CVE-2020-19625 
Remote Code Execution Vulnerability in tests/support/stores/test_grid_filter.php in oria gridx 1.3, allows remote attackers to execute arbitrary code, via crafted value to the $query parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-26T14:31:21.000Z
CVE-2020-19626 
Cross Site Scripting (XSS) vulnerability in craftcms 3.1.31, allows remote attackers to inject arbitrary web script or HTML, via /admin/settings/sites/new.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-26T14:31:18.000Z
CVE-2020-19639 
Cross Site Request Forgery (CSRF) vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B, via all fields to WebUI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-30T02:24:01.000Z
CVE-2020-19640 
An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. An unauthenticated attacker can reboot the device causing a Denial of Service, via a hidden reboot command to '/media/?action=cmd'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-30T02:25:16.000Z
CVE-2020-19641 
An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. Authenticated attackers with the "Operator" Privilege can gain admin privileges via a crafted request to '/goform/formUserMng'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-30T02:27:33.000Z
CVE-2020-19642 
An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the 'recdata.db' file to call a specially crafted GoAhead ASP-file on the SD card.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-30T02:31:42.000Z
CVE-2020-19643 
Cross Site Scripting (XSS) vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B via all fields in the FTP settings page to the "goform/formSetFtpCfg" settings page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-30T02:33:34.000Z
CVE-2020-19660 
Cross Site Scripting (XSS) pandao editor.md 1.5.0 allows attackers to execute arbitrary code via crafted linked url values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-05-08T00:00:00.000Z
CVE-2020-19664 
DrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters in a toLogin2FA action to mainfunction.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T01:23:10.000Z
CVE-2020-19667 
Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-20T00:00:00.000Z
CVE-2020-19668 
Unverified indexs into the array lead to out of bound access in the gif_out_code function in fromgif.c in libsixel 1.8.6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-20T15:39:12.000Z
CVE-2020-19669 
Cross Site Request Forgery (CSRF) vulnerability exists in Eyoucms 1.3.6 that can add an admin account via /login.php?m=admin&c=Admin&a=admin_add&lang=cn.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-18T18:23:58.000Z
CVE-2020-19670 
In Niushop B2B2C Multi-Business Basic Edition V1.11, authentication can be bypassed, causing administrators to reset any passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-30T17:20:50.000Z
CVE-2020-19672 
Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain the background upload interface, through parameter upload, bypass the getimagesize function, upload php file, getshell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-30T17:34:15.000Z
CVE-2020-19676 
Nacos 1.1.4 is affected by: Incorrect Access Control. An environment can be set up locally to get the service details interface. Then other Nacos service names can be accessed through the service list interface. Service details can then be accessed when not logged in. (detail:https://github.com/alibaba/nacos/issues/2284)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-30T17:52:39.000Z
CVE-2020-19678 
Directory Traversal vulnerability found in Pfsense v.2.1.3 and Pfsense Suricata v.1.4.6 pkg v.1.0.1 allows a remote attacker to obtain sensitive information via the file parameter to suricata/suricata_logs_browser.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-06T00:00:00.000Z
CVE-2020-19682 
A Cross Site Request Forgery (CSRF) vulnerability exits in ZZZCMS V1.7.1 via the save_user funciton in save.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-09T17:08:06.000Z
CVE-2020-19683 
A Cross Site Scripting (XSS) exists in ZZZCMS V1.7.1 via an editfile action in save.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-09T17:18:58.000Z
CVE-2020-19692 
Buffer Overflow vulnerabilty found in Nginx NJS v.0feca92 allows a remote attacker to execute arbitrary code via the njs_module_read in the njs_module.c file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-04T00:00:00.000Z
CVE-2020-19693 
An issue found in Espruino Espruino 6ea4c0a allows an attacker to execute arbitrrary code via oldFunc parameter of the jswrap_object.c:jswrap_function_replacewith endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-04T00:00:00.000Z
CVE-2020-19695 
Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the njs_object_property parameter of the njs/njs_vm.c function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-04T00:00:00.000Z
CVE-2020-19697 
Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script in the <iframe>src parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-04T00:00:00.000Z
CVE-2020-19698 
Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the editor parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-04T00:00:00.000Z
CVE-2020-19699 
Cross Site Scripting vulnerability found in KOHGYLW Kiftd v.1.0.18 allows a remote attacker to execute arbitrary code via the <ifram> tag in the upload file page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-04T00:00:00.000Z
CVE-2020-19703 
A cross-site scripting (XSS) vulnerability in the referer parameter of Dzzoffice 2.02 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-26T02:22:53.000Z
CVE-2020-19704 
A stored cross-site scripting (XSS) vulnerability via ResourceController.java in spring-boot-admin as of 20190710 allows attackers to execute arbitrary web scripts or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-26T02:22:54.000Z
CVE-2020-19705 
thinkphp-zcms as of 20190715 allows SQL injection via index.php?m=home&c=message&a=add.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-26T02:23:33.000Z
CVE-2020-19709 
Insufficient filtering of the tag parameters in feehicms 0.1.3 allows attackers to execute arbitrary web or HTML via a crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-26T02:22:56.000Z
CVE-2020-19716 
A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a denial of service (DOS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-13T00:00:00.000Z
CVE-2020-19717 
An unhandled memory allocation failure in Core/Ap48bdlAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-13T21:33:07.000Z
CVE-2020-19718 
An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-13T21:33:08.000Z
CVE-2020-19719 
A buffer overflow vulnerability in Ap4ElstAtom.cpp of Bento 1.5.1-628 leads to a denial of service (DOS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-13T21:33:09.000Z
CVE-2020-19720 
An unhandled memory allocation failure in Core/AP4IkmsAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-13T21:33:10.000Z
CVE-2020-19721 
A heap buffer overflow vulnerability in Ap4TrunAtom.cpp of Bento 1.5.1-628 may lead to an out-of-bounds write while running mp42aac, leading to system crashes and a denial of service (DOS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-13T21:33:11.000Z
CVE-2020-19722 
An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct copy to NULL pointer dereference, leading to a denial of service (DOS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-13T21:33:12.000Z
CVE-2020-19724 
A memory consumption issue in get_data function in binutils/nm.c in GNU nm before 2.34 allows attackers to cause a denial of service via crafted command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-19725 
There is a use-after-free vulnerability in file pdd_simplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-19726 
An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-19750 
An issue was discovered in gpac 0.8.0. The strdup function in box_code_base.c has a heap-based buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T19:42:05.000Z