rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-12375 
Heap overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: escalation of privilege
Affected products: vendor: n/a
product: Intel(R) Server Boards, Server Systems and Compute Modules
Published: 2021-02-17T13:56:01.000Z
CVE-2020-12376 
Use of hard-coded key in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow authenticated user to potentially enable information disclosure via local access.
Problem types: description: information disclosure
Affected products: vendor: n/a
product: Intel(R) Server Boards, Server Systems and Compute Modules
Published: 2021-02-17T13:56:08.000Z
CVE-2020-12377 
Insufficient input validation in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: escalation of privilege
Affected products: vendor: n/a
product: Intel(R) Server Boards, Server Systems and Compute Modules
Published: 2021-02-17T13:55:37.000Z
CVE-2020-12380 
Out of bounds read in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: escalation of privilege
Affected products: vendor: n/a
product: Intel(R) Server Boards, Server Systems and Compute Modules
Published: 2021-02-17T13:55:53.000Z
CVE-2020-12384 
Improper access control in some Intel(R) Graphics Drivers before version 26.20.100.8476 may allow an authenticated user to potentially enable an escalation of privilege via local access.
Problem types: description: escalation of privilege
Affected products: vendor: n/a
product: Intel(R) Graphics Drivers
Published: 2021-02-17T13:52:31.000Z
CVE-2020-12385 
Improper input validation in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable escalation of privilege via local access.
Problem types: description: escalation of privilege
Affected products: vendor: n/a
product: Intel(R) Graphics Drivers
Published: 2021-02-17T13:50:39.000Z
CVE-2020-12386 
Out-of-bounds write in some Intel(R) Graphics Drivers before version 15.36.39.5143 may allow an authenticated user to potentially enable denial of service via local access.
Problem types: description: denial of service
Affected products: vendor: n/a
product: Intel(R) Graphics Drivers
Published: 2021-02-17T13:52:14.000Z
CVE-2020-12387 
A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunderbird < 68.8.0.
Problem types: description: Use-after-free during worker shutdown
Affected products: vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Thunderbird
Published: 2020-05-26T17:04:56.000Z
CVE-2020-12388 
The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this issue only affects Firefox on Windows operating systems.*. This vulnerability affects Firefox ESR < 68.8 and Firefox < 76.
Problem types: description: Sandbox escape with improperly guarded Access Tokens
Affected products: vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2020-05-26T17:04:19.000Z
CVE-2020-12389 
The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this issue only affects Firefox on Windows operating systems.*. This vulnerability affects Firefox ESR < 68.8 and Firefox < 76.
Problem types: description: Sandbox escape with improperly separated process types
Affected products: vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2020-05-26T17:03:50.000Z
CVE-2020-12390 
Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks. This vulnerability affects Firefox < 76.
Problem types: description: Incorrect serialization of nsIPrincipal.origin for IPv6 addresses
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-05-26T17:03:09.000Z
CVE-2020-12391 
Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating context. This allowed the execution of scripts that should have been blocked, albeit with a unique opaque origin. This vulnerability affects Firefox < 76.
Problem types: description: Content-Security-Policy bypass using object elements
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-05-26T17:02:35.000Z
CVE-2020-12392 
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can be controlled by the website. If a user used the 'Copy as cURL' feature and pasted the command into a terminal, it could have resulted in the disclosure of local files. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunderbird < 68.8.0.
Problem types: description: Arbitrary local file access with 'Copy as cURL'
Affected products: vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Thunderbird
Published: 2020-05-26T17:01:54.000Z
CVE-2020-12393 
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user used the 'Copy as cURL' feature and pasted the command into a terminal, it could have resulted in command injection and arbitrary command execution. *Note: this issue only affects Firefox on Windows operating systems.*. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunderbird < 68.8.0.
Problem types: description: Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection
Affected products: vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Thunderbird
Published: 2020-05-26T17:01:15.000Z
CVE-2020-12394 
A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current location by selecting a different origin and removing focus from the input element. This vulnerability affects Firefox < 76.
Problem types: description: URL spoofing in location bar when unfocussed
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-05-26T17:00:25.000Z
CVE-2020-12395 
Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunderbird < 68.8.0.
Problem types: description: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8
Affected products: vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Thunderbird
Published: 2020-05-26T16:58:58.000Z
CVE-2020-12396 
Mozilla developers and community members reported memory safety bugs present in Firefox 75. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 76.
Problem types: description: Memory safety bugs fixed in Firefox 76
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-05-26T16:58:24.000Z
CVE-2020-12397 
By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address that Thunderbird displays. This vulnerability affects Thunderbird < 68.8.0.
Problem types: description: Sender Email Address Spoofing using encoded Unicode characters
Affected products: vendor: Mozilla
product: Thunderbird
Published: 2020-05-22T18:57:12.000Z
CVE-2020-12398 
If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbird will continue with an unencrypted connection, causing email data to be sent without protection. This vulnerability affects Thunderbird < 68.9.0.
Problem types: description: Security downgrade with IMAP STARTTLS leads to information leakage
Affected products: vendor: Mozilla
product: Thunderbird
Published: 2020-07-09T14:45:35.000Z
CVE-2020-12399 
NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9.
Problem types: description: Timing attack on DSA signatures in NSS library
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Firefox ESR
Published: 2020-07-09T14:52:16.000Z
CVE-2020-12400 
When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack. This vulnerability affects Firefox < 80 and Firefox for Android < 80.
Problem types: description: P-384 and P-521 vulnerable to a side channel attack on modular inversion
Affected products: vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Firefox for Android
Published: 2020-10-08T00:00:00.000Z
CVE-2020-12401 
During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data. This vulnerability affects Firefox < 80 and Firefox for Android < 80.
Problem types: description: Timing-attack on ECDSA signature generation
Affected products: vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Firefox for Android
Published: 2020-10-08T00:00:00.000Z
CVE-2020-12402 
During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow. This allowed an attacker able to perform electromagnetic-based side channel attacks to record traces leading to the recovery of the secret primes. *Note:* An unmodified Firefox browser does not generate RSA keys in normal operation and is not affected, but products built on top of it might. This vulnerability affects Firefox < 78.
Problem types: description: RSA Key Generation vulnerable to side-channel attack
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-07-09T14:53:22.000Z
CVE-2020-12403 
A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.
Problem types: cwe_id: CWE-125
description: CWE-125
Affected products: vendor: n/a
product: nss
Published: 2021-05-27T00:00:00.000Z
CVE-2020-12404 
For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token could leak when used for downloading files. This vulnerability affects Firefox for iOS < 26.
Problem types: description: Native-to-JS bridging security token exploit
Affected products: vendor: Mozilla
product: Firefox for iOS
Published: 2020-07-09T14:44:16.000Z
CVE-2020-12405 
When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9.
Problem types: description: Use-after-free in SharedWorkerService
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Firefox ESR
Published: 2020-07-09T14:45:23.000Z
CVE-2020-12406 
Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We presume that with enough effort that it could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9.
Problem types: description: JavaScript type confusion with NativeTypes
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Firefox ESR
Published: 2020-07-09T14:45:21.000Z
CVE-2020-12407 
Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions leak arbitrary GPU memory to the visible screen. The leaked memory content was visible to the user, but not observable from web content. This vulnerability affects Firefox < 77.
Problem types: description: WebRender leaking GPU memory when using border-image CSS directive
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-07-09T14:54:46.000Z
CVE-2020-12408 
When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path information in the address bar. This vulnerability affects Firefox < 77.
Problem types: description: URL spoofing when using IP addresses
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-07-09T14:46:53.000Z
CVE-2020-12409 
When using certain blank characters in a URL, they where incorrectly rendered as spaces instead of an encoded URL. This vulnerability affects Firefox < 77.
Problem types: description: URL spoofing with unicode characters
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-07-09T14:46:12.000Z
CVE-2020-12410 
Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9.
Problem types: description: Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Firefox ESR
Published: 2020-07-09T14:45:30.000Z
CVE-2020-12411 
Mozilla developers reported memory safety bugs present in Firefox 76. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 77.
Problem types: description: Memory safety bugs fixed in Firefox 77
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-07-09T14:46:14.000Z
CVE-2020-12412 
By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain (with the https:// scheme, a blocked port number such as '1', and without a lock icon) while controlling the page contents. This vulnerability affects Firefox < 70.
Problem types: description: Address bar spoof using history navigation and blocked ports
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-07-09T14:47:46.000Z
CVE-2020-12413 
The Raccoon attack is a timing attack on DHE ciphersuites inherit in the TLS specification. To mitigate this vulnerability, Firefox disabled support for DHE ciphersuites.
Problem types: description: Timing Attack on DHE Ciphersuites
Affected products: vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Firefox ESR
Published: 2023-02-16T00:00:00.000Z
CVE-2020-12414 
IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was being used incorrectly and requires the private instance of this object be deleted when leaving private mode. This vulnerability affects Firefox for iOS < 27.
Problem types: description: IndexedDB persists in private browsing mode
Affected products: vendor: Mozilla
product: Firefox for iOS
Published: 2020-07-09T14:56:06.000Z
CVE-2020-12415 
When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to service requests for the top level directory. This vulnerability affects Firefox < 78.
Problem types: description: AppCache manifest poisoning due to url encoded character processing
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-07-09T14:39:37.000Z
CVE-2020-12416 
A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 78.
Problem types: description: Use-after-free in WebRTC VideoBroadcaster
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-07-09T14:40:59.000Z
CVE-2020-12417 
Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially exploitable crash. *Note: this issue only affects Firefox on ARM64 platforms.* This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.
Problem types: description: Memory corruption due to missing sign-extension for ValueTags on ARM64
Affected products: vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Thunderbird
Published: 2020-07-09T14:39:37.000Z
CVE-2020-12418 
Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malicious JavaScript. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.
Problem types: description: Information disclosure due to manipulated URL object
Affected products: vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Thunderbird
Published: 2020-07-09T14:19:50.000Z
CVE-2020-12419 
When processing callbacks that occurred during window flushing in the parent process, the associated window may die; causing a use-after-free condition. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.
Problem types: description: Use-after-free in nsGlobalWindowInner
Affected products: vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Thunderbird
Published: 2020-07-09T14:39:37.000Z
CVE-2020-12420 
When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.
Problem types: description: Use-After-Free when trying to connect to a STUN server
Affected products: vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Thunderbird
Published: 2020-07-09T14:39:37.000Z
CVE-2020-12421 
When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were legitimately added by an administrator.) This could have caused add-ons to become out-of-date silently without notification to the user. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.
Problem types: description: Add-On updates did not respect the same certificate trust rules as software updates
Affected products: vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Thunderbird
Published: 2020-07-09T14:39:37.000Z
CVE-2020-12422 
In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bounds write, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 78.
Problem types: description: Integer overflow in nsJPEGEncoder::emptyOutputBuffer
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-07-09T14:39:37.000Z
CVE-2020-12423 
When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in the user's %PATH%, Firefox may have loaded the DLL, leading to arbitrary code execution. *Note: This issue only affects the Windows operating system; other operating systems are unaffected.* This vulnerability affects Firefox < 78.
Problem types: description: DLL Hijacking due to searching %PATH% for a library
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-07-09T14:39:37.000Z
CVE-2020-12424 
When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission; bypassing the prompt. This vulnerability affects Firefox < 78.
Problem types: description: WebRTC permission prompt could have been bypassed by a compromised content process
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-07-09T13:55:56.000Z
CVE-2020-12425 
Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred, leading to potential information disclosure. This vulnerability affects Firefox < 78.
Problem types: description: Out of bound read in Date.parse()
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-07-09T14:39:37.000Z
CVE-2020-12426 
Mozilla developers and community members reported memory safety bugs present in Firefox 77. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 78.
Problem types: description: Memory safety bugs fixed in Firefox 78
Affected products: vendor: Mozilla
product: Firefox
Published: 2020-07-09T14:39:36.000Z
CVE-2020-12427 
The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-13T14:28:31.000Z
CVE-2020-12429 
Online Course Registration 2.0 has multiple SQL injections that would can lead to a complete database compromise and authentication bypass in the login pages: admin/change-password.php, admin/check_availability.php, admin/index.php, change-password.php, check_availability.php, includes/header.php, index.php, and pincode-verification.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-28T19:02:46.000Z
CVE-2020-12430 
An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomainListGetStats libvirt API that is responsible for retrieving domain statistics when managing QEMU guests. This flaw allows unprivileged users with a read-only connection to cause a memory leak in the domstats command, resulting in a potential denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-28T00:00:00.000Z
CVE-2020-12431 
A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on the configuration file and named pipe allow for local privilege escalation to NT AUTHORITY/SYSTEM, by forcing a permission change to any Splashtop files and directories, with resultant DLL hijacking. This product is bundled with Splashtop Streamer (before 3.3.8.0) and Splashtop Business (before 3.3.8.0).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-21T16:16:21.000Z