rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-5953 
A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM (escalating privilege from ring 0 to ring -2).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-03T01:00:57.000Z
CVE-2020-5955 
An issue was discovered in Int15MicrocodeSmm in Insyde InsydeH2O before 2021-10-14 on Intel client chipsets. A caller may be able to escalate privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-03T00:19:13.000Z
CVE-2020-5956 
An issue was discovered in SdLegacySmm in Insyde InsydeH2O with kernel 5.1 before 05.15.11, 5.2 before 05.25.11, 5.3 before 05.34.11, and 5.4 before 05.42.11. The software SMI handler allows untrusted external input because it does not verify CommBuffer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-05T22:55:57.000Z
CVE-2020-5957 
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges.
Problem types: description: denial of service or escalation of privileges.
Affected products: vendor: NVIDIA
product: NVIDIA GPU Display Driver
Published: 2020-03-05T19:55:26.000Z
CVE-2020-5958 
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can plant a malicious DLL file, which may lead to code execution, denial of service, or information disclosure.
Problem types: description: code execution, denial of service or escalation of privileges.
Affected products: vendor: NVIDIA
product: NVIDIA GPU Display Driver
Published: 2020-03-11T21:14:18.000Z
CVE-2020-5959 
NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin in which an input index value is incorrectly validated which may lead to denial of service.
Problem types: description: denial of service
Affected products: vendor: NVIDIA
product: NVIDIA GPU Display Driver
Published: 2020-03-12T20:00:21.000Z
CVE-2020-5960 
NVIDIA Virtual GPU Manager contains a vulnerability in the kernel module (nvidia.ko), where a null pointer dereference may occur, which may lead to denial of service.
Problem types: description: denial of service
Affected products: vendor: NVIDIA
product: NVIDIA GPU Display Driver
Published: 2020-03-12T20:00:21.000Z
CVE-2020-5961 
NVIDIA vGPU graphics driver for guest OS contains a vulnerability in which an incorrect resource clean up on a failure path can impact the guest VM, leading to denial of service.
Problem types: description: denial of service
Affected products: vendor: NVIDIA
product: NVIDIA GPU Display Driver
Published: 2020-03-12T20:00:22.000Z
CVE-2020-5962 
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component, in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges.
Problem types: description: denial of service or escalation of privileges
Affected products: vendor: NVIDIA
product: NVIDIA GPU Display Driver
Published: 2020-06-24T20:10:11.000Z
CVE-2020-5963 
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure.
Problem types: description: code execution or denial of service or escalation of privileges
Affected products: vendor: NVIDIA
product: NVIDIA GPU Display Driver
Published: 2020-06-25T00:00:17.000Z
CVE-2020-5964 
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed. Such an attack may lead to code execution, denial of service or information disclosure.
Problem types: description: code execution or denial of service or information disclosure
Affected products: vendor: NVIDIA
product: NVIDIA GPU Display Driver
Published: 2020-06-25T00:00:18.000Z
CVE-2020-5965 
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver (nvwgf2um/x.dll), in which a specially crafted shader can cause an out of bounds access, leading to denial of service.
Problem types: description: denial of service
Affected products: vendor: NVIDIA
product: NVIDIA GPU Display Driver
Published: 2020-06-25T00:00:18.000Z
CVE-2020-5966 
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, in which a NULL pointer is dereferenced, leading to denial of service or potential escalation of privileges.
Problem types: description: denial of service or escalation of privileges
Affected products: vendor: NVIDIA
product: NVIDIA GPU Display Driver
Published: 2020-06-25T21:55:12.000Z
CVE-2020-5967 
NVIDIA Linux GPU Display Driver, all versions, contains a vulnerability in the UVM driver, in which a race condition may lead to a denial of service.
Problem types: description: denial of service
Affected products: vendor: NVIDIA
product: NVIDIA GPU Display Driver
Published: 2020-06-25T21:55:12.000Z
CVE-2020-5968 
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which the software does not restrict or incorrectly restricts operations within the boundaries of a resource that is accessed by using an index or pointer, such as memory or files, which may lead to code execution, denial of service, escalation of privileges, or information disclosure. This affects vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4) and version 10.x (prior to 10.3).
Problem types: description: denial of service, escalation of privileges, code execution, or information disclosure
Affected products: vendor: NVIDIA
product: NVIDIA vGPU Software
Published: 2020-06-30T22:25:24.000Z
CVE-2020-5969 
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which it validates a shared resource before using it, creating a race condition which may lead to denial of service or information disclosure. This affects vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4) and version 10.x (prior to 10.3).
Problem types: description: denial of service or information disclosure
Affected products: vendor: NVIDIA
product: NVIDIA vGPU Software
Published: 2020-06-30T22:25:24.000Z
CVE-2020-5970 
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data size is not validated, which may lead to tampering or denial of service. This affects vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4) and version 10.x (prior to 10.3).
Problem types: description: denial of service
Affected products: vendor: NVIDIA
product: NVIDIA vGPU Software
Published: 2020-06-30T22:25:25.000Z
CVE-2020-5971 
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which the software reads from a buffer by using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer, which may lead to code execution, denial of service, escalation of privileges, or information disclosure. This affects vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4) and version 10.x (prior to 10.3).
Problem types: description: denial of service, code execution, escalation of privileges or information disclosure
Affected products: vendor: NVIDIA
product: NVIDIA vGPU Software
Published: 2020-06-30T22:25:25.000Z
CVE-2020-5972 
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which local pointer variables are not initialized and may be freed later, which may lead to tampering or denial of service. This affects vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4) and version 10.x (prior to 10.3).
Problem types: description: denial of service
Affected products: vendor: NVIDIA
product: NVIDIA vGPU Software
Published: 2020-06-30T22:25:25.000Z
CVE-2020-5973 
NVIDIA Virtual GPU Manager and the guest drivers contain a vulnerability in vGPU plugin, in which there is the potential to execute privileged operations, which may lead to denial of service. This affects vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4) and version 10.x (prior to 10.3).
Problem types: description: denial of service
Affected products: vendor: NVIDIA
product: NVIDIA vGPU Software
Published: 2020-06-30T22:25:26.000Z
CVE-2020-5974 
NVIDIA JetPack SDK, version 4.2 and 4.3, contains a vulnerability in its installation scripts in which permissions are incorrectly set on certain directories, which can lead to escalation of privileges.
Problem types: description: escalation of privileges
Affected products: vendor: NVIDIA
product: NVIDIA Jetson AGX Xavier, TX1, TX2, and Nano L4T
Published: 2020-07-08T22:55:12.000Z
CVE-2020-5975 
NVIDIA GeForce NOW, versions prior to 2.0.23 on Windows and macOS, contains a vulnerability in the desktop application software that includes sensitive information as part of a URL, which may lead to information disclosure.
Problem types: description: information disclosure
Affected products: vendor: NVIDIA
product: NVIDIA GeForce NOW Application
Published: 2020-09-18T14:50:13.000Z
CVE-2020-5976 
NVIDIA GeForce NOW, versions prior to 2.0.23 (Windows, macOS) and versions prior to 5.31 (Android, Shield TV), contains a vulnerability in the application software where the network test component transmits sensitive information insecurely, which may lead to information disclosure.
Problem types: description: information disclosure
Affected products: vendor: NVIDIA
product: NVIDIA GeForce NOW Application
Published: 2020-09-18T15:10:15.000Z
CVE-2020-5977 
NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Server in which an uncontrolled search path is used to load a node module, which may lead to code execution, denial of service, escalation of privileges, and information disclosure.
Problem types: description: code execution, denial of service, escalation of privileges, and information disclosure
Affected products: vendor: NVIDIA
product: NVIDIA GeForce Experience Software
Published: 2020-10-23T17:35:15.000Z
CVE-2020-5978 
NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in its services in which a folder is created by nvcontainer.exe under normal user login with LOCAL_SYSTEM privileges which may lead to a denial of service or escalation of privileges.
Problem types: description: denial of service, escalation of privileges
Affected products: vendor: NVIDIA
product: NVIDIA GeForce Experience Software
Published: 2020-10-23T17:35:16.000Z
CVE-2020-5979 
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which a user is presented with a dialog box for input by a high-privilege process, which may lead to escalation of privileges.
Problem types: description: escalation of privileges
Affected products: vendor: NVIDIA
product: NVIDIA GPU Display Driver
Published: 2020-10-02T18:15:18.000Z
CVE-2020-5980 
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in multiple components in which a securely loaded system DLL will load its dependencies in an insecure fashion, which may lead to code execution or denial of service.
Problem types: description: denial of service or code execution
Affected products: vendor: NVIDIA
product: NVIDIA GPU Display Driver
Published: 2020-10-02T18:15:18.000Z
CVE-2020-5981 
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), in which a specially crafted shader can cause an out of bounds access, which may lead to denial of service or code execution.
Problem types: description: code execution or denial of service
Affected products: vendor: NVIDIA
product: NVIDIA GPU Display Driver
Published: 2020-10-02T18:15:19.000Z
CVE-2020-5982 
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) scheduler, in which the software does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests, which may lead to denial of service.
Problem types: description: denial of service
Affected products: vendor: NVIDIA
product: NVIDIA GPU Display Driver
Published: 2020-10-02T18:15:19.000Z
CVE-2020-5983 
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin and the host driver kernel module, in which the potential exists to write to a memory location that is outside the intended boundary of the frame buffer memory allocated to guest operating systems, which may lead to denial of service or information disclosure. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.
Problem types: description: denial of service or information disclosure
Affected products: vendor: NVIDIA
product: NVIDIA vGPU Software
Published: 2020-10-02T21:10:21.000Z
CVE-2020-5984 
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which it may have the use-after-free vulnerability while freeing some resources, which may lead to denial of service, code execution, and information disclosure. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.
Problem types: description: denial of service, code execution, and information disclosure
Affected products: vendor: NVIDIA
product: NVIDIA vGPU Software
Published: 2020-10-02T21:10:21.000Z
CVE-2020-5985 
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data length is not validated, which may lead to tampering or denial of service. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.
Problem types: description: denial of service
Affected products: vendor: NVIDIA
product: NVIDIA vGPU Software
Published: 2020-10-02T21:10:22.000Z
CVE-2020-5986 
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data size is not validated, which may lead to tampering or denial of service. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.
Problem types: description: denial of service
Affected products: vendor: NVIDIA
product: NVIDIA vGPU Software
Published: 2020-10-02T21:10:22.000Z
CVE-2020-5987 
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which guest-supplied parameters remain writable by the guest after the plugin has validated them, which may lead to the guest being able to pass invalid parameters to plugin handlers, which may lead to denial of service or escalation of privileges. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.
Problem types: description: denial of service or escalation of privileges
Affected products: vendor: NVIDIA
product: NVIDIA vGPU Software
Published: 2020-10-02T21:10:22.000Z
CVE-2020-5988 
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which allocated memory can be freed twice, which may lead to information disclosure or denial of service. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.
Problem types: description: denial of service or information disclosure
Affected products: vendor: NVIDIA
product: NVIDIA vGPU Software
Published: 2020-10-02T21:10:23.000Z
CVE-2020-5989 
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which it can dereference a NULL pointer, which may lead to denial of service. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.
Problem types: description: denial of service
Affected products: vendor: NVIDIA
product: NVIDIA vGPU Software
Published: 2020-10-02T21:10:23.000Z
CVE-2020-5990 
NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in the ShadowPlay component which may lead to local privilege escalation, code execution, denial of service or information disclosure.
Problem types: description: code execution, denial of service, escalation of privileges, and information disclosure
Affected products: vendor: NVIDIA
product: NVIDIA GeForce Experience Software
Published: 2020-10-23T17:35:16.000Z
CVE-2020-5991 
NVIDIA CUDA Toolkit, all versions prior to 11.1.1, contains a vulnerability in the NVJPEG library in which an out-of-bounds read or write operation may lead to code execution, denial of service, or information disclosure.
Problem types: description: code execution, denial of service, information disclosure
Affected products: vendor: NVIDIA
product: NVIDIA CUDA Toolkit
Published: 2020-10-30T20:40:16.000Z
CVE-2020-5992 
NVIDIA GeForce NOW application software on Windows, all versions prior to 2.0.25.119, contains a vulnerability in its open-source software dependency in which the OpenSSL library is vulnerable to binary planting attacks by a local user, which may lead to code execution or escalation of privileges.
Problem types: description: code execution, escalation of privileges
Affected products: vendor: NVIDIA
product: NVIDIA GeForce NOW Application
Published: 2020-11-11T22:25:11.000Z
CVE-2020-6007 
Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL string during the commissioning phase, resulting in a remote code execution.
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: n/a
product: Philips Hue Bridge 2.X
Published: 2020-01-23T21:20:17.000Z
CVE-2020-6008 
LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution
Problem types: cwe_id: CWE-434
description: CWE-434: Unrestricted Upload of File with Dangerous Type
Affected products: vendor: n/a
product: LifterLMS Wordpress Plugin
Published: 2020-03-31T14:10:19.000Z
CVE-2020-6009 
LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection.
Problem types: cwe_id: CWE-89
description: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: n/a
product: LearnDash Wordpress Plugin
Published: 2020-04-01T21:02:49.000Z
CVE-2020-6010 
LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL Injection
Problem types: description: n/a
Affected products: vendor: n/a
product: LearnPress Wordpress Plugin
Published: 2020-04-30T14:38:22.000Z
CVE-2020-6012 
ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sophisticated timed attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links. This allows an unprivileged user to enable escalation of privilege via local access.
Problem types: cwe_id: CWE-59
description: CWE-59: Improper Link Resolution Before File Access ('Link Following')
Affected products: vendor: n/a
product: ZoneAlarm Anti-Ransomware
Published: 2020-08-04T13:35:42.000Z
CVE-2020-6013 
ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who already has access to the system to execute code at elevated privileges through a combination of file permission manipulation and exploitation of Windows CVE-2020-00896 on unpatched systems.
Problem types: cwe_id: CWE-65
description: CWE-65: Windows Hard Link
Affected products: vendor: n/a
product: Check Point ZoneAlarm
Published: 2020-07-06T17:54:48.000Z
CVE-2020-6014 
Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-existent DLL during a query for the Domain Name. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate.
Problem types: cwe_id: CWE-114
description: CWE-114: Process Control
Affected products: vendor: n/a
product: Check Point Endpoint Security Client for Windows
Published: 2020-10-30T14:22:05.000Z
CVE-2020-6015 
Check Point Endpoint Security for Windows before E84.10 can reach denial of service during clean install of the client which will prevent the storage of service log files in non-standard locations.
Problem types: cwe_id: CWE-59
description: CWE-59: Improper Link Resolution Before File Access ('Link Following')
Affected products: vendor: n/a
product: Check Point Endpoint Security for Windows
Published: 2020-11-05T19:37:06.000Z
CVE-2020-6016 
Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNP_ReceiveUnreliableSegment(), leading to a Heap-Based Buffer Underflow and a free() of memory not from the heap, resulting in a memory corruption and probably even a remote code execution.
Problem types: cwe_id: CWE-590
description: CWE-590: Free of Memory not on the Heap
Affected products: vendor: n/a
product: Game Networking Sockets
Published: 2020-11-18T14:11:49.000Z
CVE-2020-6017 
Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNP_ReceiveUnreliableSegment() when configured to support plain-text messages, leading to a Heap-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code execution.
Problem types: cwe_id: CWE-120
description: CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products: vendor: n/a
product: Game Networking Sockets
Published: 2020-12-03T13:34:00.000Z
CVE-2020-6018 
Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long encrypted messages in function AES_GCM_DecryptContext::Decrypt() when compiled using libsodium, leading to a Stack-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code execution.
Problem types: cwe_id: CWE-120
description: CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products: vendor: n/a
product: Game Networking Sockets
Published: 2020-12-02T01:01:38.000Z
CVE-2020-6019 
Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::Received_Data(), leading to an exception thrown from libprotobuf and resulting in a crash.
Problem types: cwe_id: CWE-248
description: CWE-248: Uncaught Exception
Affected products: vendor: n/a
product: Game Networking Sockets
Published: 2020-11-13T15:03:31.000Z
CVE-2020-6020 
Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38, can be manipulated to run commands as a high privileged user or crash, due to weak input validation on inputs by a trusted management administrator.
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: n/a
product: ICA Management Portal
Published: 2020-09-24T13:25:32.000Z
CVE-2020-6021 
Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which the installation repair takes place. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted DLL in the repair folder which will run with the Endpoint client’s privileges.
Problem types: cwe_id: CWE-427
description: CWE-427: Uncontrolled Search Path Element
Affected products: vendor: n/a
product: Check Point Endpoint Security Client for Windows
Published: 2020-12-03T13:31:22.000Z