rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-14300 
The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 (https://access.redhat.com/errata/RHBA-2020:0053) included an incorrect version of runc that was missing multiple bug and security fixes. One of the fixes regressed in that update was the fix for CVE-2016-9962, that was previously corrected in the docker packages in Red Hat Enterprise Linux 7 Extras via RHSA-2017:0116 (https://access.redhat.com/errata/RHSA-2017:0116). The CVE-2020-14300 was assigned to this security regression and it is specific to the docker packages produced by Red Hat. The original issue - CVE-2016-9962 - could possibly allow a process inside container to compromise a process entering container namespace and execute arbitrary code outside of the container. This could lead to compromise of the container host or other containers running on the same container host. This issue only affects a single version of Docker, 1.13.1-108.git4ef4b30, shipped in Red Hat Enterprise Linux 7. Both earlier and later versions are not affected.
Problem types: description: Regression
Affected products: vendor: n/a
product: Docker
Published: 2020-07-13T21:02:24.000Z
CVE-2020-14301 
An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access network-based disks were saved in the XML dump of the guest domain. This flaw allows an attacker to access potentially sensitive information in the domain configuration via the `dumpxml` command.
Problem types: cwe_id: CWE-212
description: CWE-212
Affected products: vendor: n/a
product: libvirt
Published: 2021-05-27T19:44:34.000Z
CVE-2020-14302 
A flaw was found in Keycloak before 13.0.0 where an external identity provider, after successful authentication, redirects to a Keycloak endpoint that accepts multiple invocations with the use of the same "state" parameter. This flaw allows a malicious user to perform replay attacks.
Problem types: cwe_id: CWE-294
description: CWE-294
Affected products: vendor: n/a
product: keycloak
Published: 2020-12-15T19:06:15.000Z
CVE-2020-14303 
A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an empty UDP packet to cause the samba server to crash.
Problem types: description: Uncontrolled Resource Consumption
Affected products: vendor: n/a
product: Samba
Published: 2020-07-06T17:12:08.000Z
CVE-2020-14304 
A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read data from the EEPROM of the device. This flaw allows a local user to read uninitialized values from the kernel memory. The highest threat from this vulnerability is to confidentiality.
Problem types: cwe_id: CWE-460
description: CWE-460
Affected products: vendor: Linux Kernel
product: kernel
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 4.4
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2020-09-15T19:40:44.000Z
CVE-2020-14305 
An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port 1720. This flaw allows an unauthenticated remote user to crash the system, causing a denial of service. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: n/a
product: kernel
Published: 2020-12-02T00:48:25.000Z
CVE-2020-14306 
An incorrect access control flaw was found in the operator, openshift-service-mesh/istio-rhel8-operator all versions through 1.1.3. This flaw allows an attacker with a basic level of access to the cluster to deploy a custom gateway/pod to any namespace, potentially gaining access to privileged service account tokens. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Problem types: cwe_id: CWE-862
description: CWE-862
Affected products: vendor: n/a
product: openshift-service-mesh/istio-rhel8-operator
Published: 2020-09-16T00:00:00.000Z
CVE-2020-14307 
A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat JBoss EAP 7, where SessionOpenInvocations are never removed from the remote InvocationTracker after a response is received in the EJB Client, as well as the server. This flaw allows an attacker to craft a denial of service attack to make the service unavailable.
Problem types: cwe_id: CWE-404
description: CWE-404
Affected products: vendor: Red Hat
product: wildfly
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
Published: 2020-07-24T00:00:00.000Z
CVE-2020-14308 
In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This leads the function to return invalid memory allocations which can be further used to cause possible integrity, confidentiality and availability impacts during the boot process.
Problem types: description: Integer Overflow or Wraparound leading to Heap-based Buffer Overflow
Affected products: vendor: n/a
product: Grub
Published: 2020-07-29T19:03:41.000Z
CVE-2020-14309 
There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size. The name size leads to an arithmetic overflow leading to a zero-size allocation further causing a heap-based buffer overflow with attacker controlled data.
Problem types: description: Integer Overflow or Wraparound leading to Heap-based Buffer Overflow
Affected products: vendor: n/a
product: Grub
Published: 2020-07-30T12:49:31.000Z
CVE-2020-14310 
There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at max UINT32_MAX - 1 length in bytes but it doesn't verify it before proceed with buffer allocation to read the value from the font value. An attacker may leverage that by crafting a malicious font file which has a name with UINT32_MAX, leading to read_section_as_string() to an arithmetic overflow, zero-sized allocation and further heap-based buffer overflow.
Problem types: cwe_id: CWE-190
description: CWE-190
cwe_id: CWE-122
description: CWE-122
Affected products: vendor: The Grub2 Project
product: grub2
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 5.7
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H
version: 3.1
Published: 2020-07-31T20:55:55.000Z
CVE-2020-14311 
There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32_MAX causes an arithmetic overflow leading to a zero-sized memory allocation with subsequent heap-based buffer overflow.
Problem types: cwe_id: CWE-190
description: CWE-190
cwe_id: CWE-122
description: CWE-122
Affected products: vendor: The Grub2 Project
product: grub2
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 5.7
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H
version: 3.1
Published: 2020-07-31T20:56:30.000Z
CVE-2020-14312 
A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprise Linux, where it listens on any interface and accepts queries from addresses outside of its local subnet. In particular, the option `local-service` is not enabled. Running dnsmasq in this manner may inadvertently make it an open resolver accessible from any address on the internet. This flaw allows an attacker to conduct a Distributed Denial of Service (DDoS) against other systems.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: n/a
product: dnsmasq
Published: 2021-02-05T23:16:33.000Z
CVE-2020-14313 
An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1. This flaw allows an attacker who can create a build trigger in a repository, to disclose the names of robot accounts and the existence of private repositories within any namespace.
Problem types: description: Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: n/a
product: Quay
Published: 2020-08-11T13:42:26.000Z
CVE-2020-14314 
A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the way it accesses a directory with broken indexing. This flaw allows a local user to crash the system if the directory exists. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-125
description: CWE-125
Affected products: vendor: Linux Kernel
product: kernel
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
baseScore: 5.5
baseSeverity: MEDIUM
Published: 2020-09-15T00:00:00.000Z
CVE-2020-14315 
A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: n/a
product: bsdiff
Published: 2020-09-16T13:31:19.000Z
CVE-2020-14316 
A flaw was found in kubevirt 0.29 and earlier. Virtual Machine Instances (VMIs) can be used to gain access to the host's filesystem. Successful exploitation allows an attacker to assume the privileges of the VM process on the host system. In worst-case scenarios an attacker can read and modify any file on the system where the VMI is running. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Problem types: description: Improper Access Control
Affected products: vendor: n/a
product: kubevirt
Published: 2020-07-29T18:48:23.000Z
CVE-2020-14317 
It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Application Platform - Continuous Delivery (EAP-CD) introducing regression. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script to terminate any process as root.
Problem types: cwe_id: CWE-364
description: CWE-364
Affected products: vendor: n/a
product: Wildfly
Published: 2021-06-02T11:27:39.000Z
CVE-2020-14318 
A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certain file and directory information which otherwise would be unavailable to the attacker.
Problem types: cwe_id: CWE-266
description: CWE-266
Affected products: vendor: n/a
product: samba
Published: 2020-12-03T00:00:00.000Z
CVE-2020-14319 
It was found that the AMQ Online console is vulnerable to a Cross-Site Request Forgery (CSRF) which is exploitable in cases where preflight checks are not instigated or bypassed. For example authorised users using an older browser with Adobe Flash are vulnerable when targeted by an attacker. This flaw affects all versions of AMQ-Online prior to 1.5.2 and Enmasse versions 0.31.0-rc1 up until but not including 0.32.2.
Problem types: description: Cross-Site Request Forgery (CSRF)
Affected products: vendor: n/a
product: AMQ-Online and EnMasse
Published: 2020-08-03T16:50:39.000Z
CVE-2020-14320 
In Moodle before 3.9.1, 3.8.4 and 3.7.7, the filter in the admin task log required extra sanitizing to prevent a reflected XSS risk.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: n/a
product: Moodle
Published: 2022-08-16T19:37:25.000Z
CVE-2020-14321 
In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course.
Problem types: cwe_id: CWE-863
description: CWE-863
Affected products: vendor: n/a
product: Moodle
Published: 2022-08-16T00:00:00.000Z
CVE-2020-14322 
In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yui_combo needed to limit the amount of files it can load to help mitigate the risk of denial of service.
Problem types: cwe_id: CWE-770
description: CWE-770
Affected products: vendor: n/a
product: Moodle
Published: 2022-08-16T00:00:00.000Z
CVE-2020-14323 
A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and before 4.13.1. A local user could use this flaw to crash the winbind service causing denial of service.
Problem types: cwe_id: CWE-170
description: CWE-170
Affected products: vendor: n/a
product: Samba
Published: 2020-10-29T00:00:00.000Z
CVE-2020-14324 
A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out of band OS command injection vulnerability can be exploited by authenticated attacker while setuping conversion host through Infrastructure Migration Solution. This flaw allows attacker to execute arbitrary commands on CloudForms server.
Problem types: description: OS Command Injection
Affected products: vendor: n/a
product: CloudForms
Published: 2020-08-11T13:19:47.000Z
CVE-2020-14325 
Red Hat CloudForms before 5.11.7.0 was vulnerable to the User Impersonation authorization flaw which allows malicious attacker to create existent and non-existent role-based access control user, with groups and roles. With a selected group of EvmGroup-super_administrator, an attacker can perform any API request as a super administrator.
Problem types: description: Improper Authorization
Affected products: vendor: n/a
product: CloudForms
Published: 2020-08-11T12:49:44.000Z
CVE-2020-14326 
A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requests with higher CPU time spent searching and adding the entry. This flaw allows an attacker to cause a denial of service.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: n/a
product: RESTEasy
Published: 2021-06-02T11:23:23.000Z
CVE-2020-14327 
A Server-side request forgery (SSRF) flaw was found in Ansible Tower in versions before 3.6.5 and before 3.7.2. Functionality on the Tower server is abused by supplying a URL that could lead to the server processing it. This flaw leads to the connection to internal services or the exposure of additional internal services by abusing the test feature of lookup credentials to forge HTTP/HTTPS requests from the server and retrieving the results of the response.
Problem types: cwe_id: CWE-918
description: CWE-918
Affected products: vendor: n/a
product: Tower
Published: 2021-05-27T19:44:38.000Z
CVE-2020-14328 
A flaw was found in Ansible Tower in versions before 3.7.2. A Server Side Request Forgery flaw can be abused by supplying a URL which could lead to the server processing it connecting to internal services or exposing additional internal services and more particularly retrieving full details in case of error. The highest threat from this vulnerability is to data confidentiality.
Problem types: cwe_id: CWE-918
description: CWE-918
Affected products: vendor: n/a
product: Tower
Published: 2021-05-27T19:44:43.000Z
CVE-2020-14329 
A data exposure flaw was found in Ansible Tower in versions before 3.7.2, where sensitive data can be exposed from the /api/v2/labels/ endpoint. This flaw allows users from other organizations in the system to retrieve any label from the organization and also disclose organization names. The highest threat from this vulnerability is to confidentiality.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: n/a
product: Tower
Published: 2021-05-27T19:44:48.000Z
CVE-2020-14330 
An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri module. The highest threat from this vulnerability is to data confidentiality.
Problem types: cwe_id: CWE-532
description: CWE-532
Affected products: vendor: Red Hat
product: Ansible
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 5
baseSeverity: MEDIUM
Published: 2020-09-11T00:00:00.000Z
CVE-2020-14331 
A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VT_RESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA console to crash the system, potentially escalating their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: n/a
product: Linux Kernel
Published: 2020-09-15T18:51:10.000Z
CVE-2020-14332 
A flaw was found in the Ansible Engine when using module_args. Tasks executed with check mode (--check-mode) do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality.
Problem types: cwe_id: CWE-117
description: CWE-117
Affected products: vendor: Red Hat
product: Ansible
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2020-09-11T17:59:30.000Z
CVE-2020-14333 
A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not filter user-controllable parameters completely, resulting in a reflected cross-site scripting attack. This flaw allows an attacker to leverage a phishing attack, steal an unsuspecting user's cookies or other confidential information, or impersonate them within the application's context.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: The ovirt Project
product: ovirt-engine
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
version: 3.1
Published: 2020-08-18T13:13:26.000Z
CVE-2020-14334 
A flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files. These cache credentials could help attacker to gain complete control of the Satellite instance.
Problem types: cwe_id: CWE-522
description: Improper access control CWE-522
Affected products: vendor: n/a
product: Red Hat Satellite
Published: 2020-07-31T12:41:16.000Z
CVE-2020-14335 
A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets through the ISC DHCP of Smart-Proxy. This flaw allows an attacker to gain control of DHCP records from the network. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: n/a
product: Red Hat Satellite
Published: 2021-06-02T11:52:56.000Z
CVE-2020-14336 
A flaw was found in the Restricted Security Context Constraints (SCC), where it allows pods to craft custom network packets. This flaw allows an attacker to cause a denial of service attack on an OpenShift Container Platform cluster if they can deploy pods. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-770
description: CWE-770
Affected products: vendor: n/a
product: Openshift
Published: 2021-06-02T11:48:44.000Z
CVE-2020-14337 
A data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return error codes. This flaw allows an unauthenticated, remote attacker to retrieve pages from the default organization and verify existing usernames. The highest threat from this vulnerability is to data confidentiality.
Problem types: cwe_id: CWE-209
description: Generation of Error Message Containing Sensitive Information CWE-209
Affected products: vendor: n/a
product: Ansible Tower
Published: 2020-07-31T12:42:55.000Z
CVE-2020-14338 
A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature. This flaw allows a specially-crafted XML file to manipulate the validation process in certain cases. This issue is the same flaw as CVE-2020-14621, which affected OpenJDK, and uses a similar code. This flaw affects all Xerces JBoss versions before 2.12.0.SP3.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: n/a
product: Wildfly
Published: 2020-09-17T14:06:25.000Z
CVE-2020-14339 
A flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the QEMU process. This file descriptor allows for privileged operations to happen against the device-mapper on the host. This flaw allows a malicious guest user or process to perform operations outside of their standard permissions, potentially causing serious damage to the host operating system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Problem types: cwe_id: CWE-772
description: CWE-772
Affected products: vendor: n/a
product: libvirt
Published: 2020-12-03T00:00:00.000Z
CVE-2020-14340 
A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: n/a
product: XNIO
Published: 2021-06-02T12:04:28.000Z
CVE-2020-14341 
The "Test Connection" available in v7.x of the Red Hat Single Sign On application console can permit an authorized user to cause SMTP connections to be attempted to arbitrary hosts and ports of the user's choosing, and originating from the RHSSO installation. By observing differences in the timings of these scans, an attacker may glean information about hosts and ports which they do not have access to scan directly.
Problem types: cwe_id: CWE-385
description: CWE-385
Affected products: vendor: Red Hat
product: Red Hat Single Sign-On
Published: 2021-01-12T14:23:31.000Z