rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-17140 Windows SMB Information Disclosure Vulnerability
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows 10 Version 20H2
vendor: Microsoft
product: Windows Server version 20H2
vendor: Microsoft
product: Windows 10 Version 1803
vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows Server 2019
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1909
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 2004
vendor: Microsoft
product: Windows Server version 2004
vendor: Microsoft
product: Windows 10 Version 1507
vendor: Microsoft
product: Windows 10 Version 1607
vendor: Microsoft
product: Windows Server 2016
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
vendor: Microsoft
product: Windows 7
vendor: Microsoft
product: Windows 7 Service Pack 1
vendor: Microsoft
product: Windows 8.1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012
vendor: Microsoft
product: Windows Server 2012 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012 R2
vendor: Microsoft
product: Windows Server 2012 R2 (Server Core installation)
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C
Published: 2020-12-09T23:36:54.000Z
CVE-2020-17141 Microsoft Exchange Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 6
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 17
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 7
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 18
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.4
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
Published: 2020-12-09T23:36:54.000Z
CVE-2020-17142 Microsoft Exchange Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Exchange Server 2013 Cumulative Update 23
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 6
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 17
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 7
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 18
CVSS v3.1: version: 3.1
baseSeverity: CRITICAL
baseScore: 9.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
Published: 2020-12-09T23:36:55.000Z
CVE-2020-17143 Microsoft Exchange Server Information Disclosure Vulnerability
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 6
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 17
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 7
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 18
vendor: Microsoft
product: Microsoft Exchange Server 2013 Cumulative Update 23
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Published: 2020-12-09T23:36:55.000Z
CVE-2020-17144 Microsoft Exchange Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.4
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
Published: 2020-12-09T23:36:55.000Z
CVE-2020-17145 Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Azure DevOps Server 2019.0.1
vendor: Microsoft
product: Team Foundation Server 2017 Update 3.1
vendor: Microsoft
product: Team Foundation Server 2018 Update 1.2
vendor: Microsoft
product: Team Foundation Server 2018 Update 3.2
vendor: Microsoft
product: Team Foundation Server 2015 Update 4.2
vendor: Microsoft
product: Azure DevOps Server 2019 Update 1.1
vendor: Microsoft
product: Azure DevOps Server 2020
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 5.4
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C
Published: 2020-12-09T23:36:56.000Z
CVE-2020-17147 Dynamics CRM Webclient Cross-site Scripting Vulnerability
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Microsoft Dynamics 365 (on-premises) version 8.2
vendor: Microsoft
product: Microsoft Dynamics 365 (on-premises) version 9.0
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.7
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C
Published: 2020-12-09T23:36:56.000Z
CVE-2020-17148 Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Visual Studio Code Remote - SSH Extension
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2020-12-09T23:36:57.000Z
CVE-2020-17150 Visual Studio Code Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Visual Studio Code TS-Lint Extension
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2020-12-09T23:36:57.000Z
CVE-2020-17152 Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Dynamics 365 for Finance and Operations
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2020-12-09T23:36:58.000Z
CVE-2020-17153 Microsoft Edge for Android Spoofing Vulnerability
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Microsoft Edge for Android
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 4.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
Published: 2020-12-09T23:36:58.000Z
CVE-2020-17156 Visual Studio Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.0
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.8
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2020-12-09T23:36:59.000Z
CVE-2020-17158 Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Dynamics 365 for Finance and Operations
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2020-12-09T23:36:59.000Z
CVE-2020-17159 Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Visual Studio Code Language Support for Java Extension
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2020-12-09T23:36:59.000Z
CVE-2020-17163 Visual Studio Code Python Extension Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Python extension for Visual Studio Code
cpes: cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:python:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2023-12-29T16:24:16.265Z
CVE-2020-17352 
Two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08-05 potentially allow an authenticated attacker to remotely execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-07T19:50:04.000Z
CVE-2020-17353 
scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when -dsafe is used, lacks restrictions on embedded-ps and embedded-svg, as demonstrated by including dangerous PostScript code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-05T12:55:02.000Z
CVE-2020-17354 
LilyPond before 2.24 allows attackers to bypass the -dsafe protection mechanism via output-def-lookup or output-def-scope, as demonstrated by dangerous Scheme code in a .ly file that causes arbitrary code execution during conversion to a different file format. NOTE: in 2.24 and later versions, safe mode is removed, and the product no longer tries to block code execution when external files are used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-15T00:00:00.000Z
CVE-2020-17355 
Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause a denial of service (restart of agents) by crafting a malformed DHCP packet which leads to an incorrect route being installed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-21T21:59:50.000Z
CVE-2020-17360 
An issue was discovered in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h contains multiple boundary checks that are performed to prevent out-of-bounds memory read/write. However, two of these boundary checks contain an integer overflow that leads to a bypass of these checks, and out-of-bounds read/write. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-12T17:30:53.000Z
CVE-2020-17361 
An issue was discovered in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h returns silently when a negative length is provided (instead of throwing an exception). This could result in data being lost during the copy, with varying consequences depending on the subsequent use of the destination buffer. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-12T17:31:40.000Z
CVE-2020-17362 
search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-12T21:16:33.000Z
CVE-2020-17363 
USVN (aka User-friendly SVN) before 1.0.9 allows remote code execution via shell metacharacters in the number_start or number_end parameter to LastHundredRequest (aka lasthundredrequestAction) in the Timeline module. NOTE: this may overlap CVE-2020-25069.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-31T01:16:06.000Z
CVE-2020-17364 
USVN (aka User-friendly SVN) before 1.0.9 allows XSS via SVN logs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-05T14:37:50.000Z
CVE-2020-17365 
Improper directory permissions in the Hotspot Shield VPN client software for Windows 10.3.0 and earlier may allow an authorized user to potentially enable escalation of privilege via local access. The vulnerability allows a local user to corrupt system files: a local user can create a specially crafted symbolic link to a critical file on the system and overwrite it with privileges of the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-24T22:25:50.000Z
CVE-2020-17366 
An issue was discovered in NLnet Labs Routinator 0.1.0 through 0.7.1. It allows remote attackers to bypass intended access restrictions or to cause a denial of service on dependent routing systems by strategically withholding RPKI Route Origin Authorisation ".roa" files or X509 Certificate Revocation List files from the RPKI relying party's view.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-05T21:07:33.000Z
CVE-2020-17367 
Firejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option, which may lead to command injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-11T15:58:50.000Z
CVE-2020-17368 
Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may lead to command injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-11T15:59:48.000Z
CVE-2020-17372 
SugarCRM before 10.1.0 (Q3 2020) allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-12T12:24:57.000Z
CVE-2020-17373 
SugarCRM before 10.1.0 (Q3 2020) allows SQL Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-12T12:28:00.000Z
CVE-2020-17376 
An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a soft reboot of an instance that has previously undergone live migration, a user may gain access to destination host devices that share the same paths as host devices previously referenced by the virtual machine on the source host. This can include block devices that map to different Cinder volumes at the destination than at the source. Only deployments allowing host-based connections (for instance, root and ephemeral devices) are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-26T18:45:28.000Z
CVE-2020-17380 
A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It could occur while doing a multi block SDMA transfer via the sdhci_sdma_transfer_multi_blocks() routine in hw/sd/sdhci.c. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition, or potentially execute arbitrary code with privileges of the QEMU process on the host.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-30T05:38:01.000Z
CVE-2020-17381 
An issue was discovered in Ghisler Total Commander 9.51. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the %SYSTEMDRIVE%\totalcmd\TOTALCMD64.EXE binary.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-21T00:00:00.000Z
CVE-2020-17382 
The MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x80102044, 0x80102050,and 0x80102054).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-02T08:20:11.000Z
CVE-2020-17383 
A directory traversal vulnerability on Telos Z/IP One devices through 4.0.0r grants an unauthenticated individual root level access to the device's file system. This can be used to identify configuration settings, password hashes for built-in accounts, and the cleartext password for remote configuration of the device through the WebUI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-24T19:08:43.000Z
CVE-2020-17384 Cellopoint CelloOS - Remote Command Execution (RCE)
Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly. With the cookie of the system administrator, attackers can inject and remotely execute arbitrary command to manipulate the system.
Problem types: description: Remote Command Execution (RCE)
Affected products: vendor: Cellopoint
product: CelloOS
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2020-08-25T07:35:18.103Z
CVE-2020-17385 Cellopoint CelloOS - Unauthenticated Arbitrary File Disclosure
Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly, which allows unauthorized user to launch Path Traversal attack and access arbitrate file on the system.
Problem types: description: Unauthenticated Arbitrary File Disclosure
Affected products: vendor: Cellopoint
product: CelloOS
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2020-08-25T07:35:18.510Z
CVE-2020-17386 Cellopoint CelloOS - Server-Side Request Forgery (SSRF)
Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly. With cookie of an authenticated user, attackers can temper with the URL parameter and access arbitrary file on system.
Problem types: cwe_id: CWE-918
description: CWE-918 Server-Side Request Forgery (SSRF)
Affected products: vendor: Cellopoint
product: CelloOS
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2020-08-25T07:35:18.925Z
CVE-2020-17387 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the writeObjectToConfigFile method of the GWTTestServiceImpl class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-10565.
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Marvell
product: QConvergeConsole
Credits: lang: en
value: rgod
Published: 2020-08-25T20:21:28.000Z
CVE-2020-17388 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the Tomcat configuration file. The issue results from the lack of proper restriction to the Tomcat admin console. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-10799.
Problem types: cwe_id: CWE-749
description: CWE-749: Exposed Dangerous Method or Function
Affected products: vendor: Marvell
product: QConvergeConsole
Credits: lang: en
value: Sivathmican Sivakumaran of Trend Micro Zero Day Initiative
Published: 2020-08-25T20:21:28.000Z
CVE-2020-17389 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the decryptFile method of the GWTTestServiceImpl class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-10502.
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Marvell
product: QConvergeConsole
Credits: lang: en
value: rgod
Published: 2020-08-25T20:21:29.000Z
CVE-2020-17390 
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the hypervisor kernel extension. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the hypervisor. Was ZDI-CAN-10030.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Parallels
product: Desktop
Credits: lang: en
value: grigoritchy
Published: 2020-08-25T20:20:49.000Z
CVE-2020-17391 
This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-47255. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handler for HOST_IOCTL_INIT_HYPERVISOR in the prl_hypervisor kext. The issue results from the exposure of dangerous method or function to the unprivileged user. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the kernel. Was ZDI-CAN-10518.
Problem types: cwe_id: CWE-749
description: CWE-749: Exposed Dangerous Method or Function
Affected products: vendor: Parallels
product: Desktop
Credits: lang: en
value: Reno Robert
Published: 2020-08-25T20:20:50.000Z
CVE-2020-17392 
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.3-47255. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handler for HOST_IOCTL_SET_KERNEL_SYMBOLS in the prl_hypervisor kext. The issue results from the lack of proper validation of a user-supplied value prior to dereferencing it as a pointer. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the kernel. Was ZDI-CAN-10519.
Problem types: cwe_id: CWE-822
description: CWE-822: Untrusted Pointer Dereference
Affected products: vendor: Parallels
product: Desktop
Credits: lang: en
value: Reno Robert
Published: 2020-08-25T20:20:50.000Z