rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-3799 
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have a stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Stack-based buffer overflow
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2020-03-25T16:00:22.000Z
CVE-2020-3800 
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have a memory address leak vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Memory address leak
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2020-03-25T17:15:47.000Z
CVE-2020-3801 
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have a use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Use-after-free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2020-03-25T17:15:58.000Z
CVE-2020-3802 
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have a use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Use-after-free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2020-03-25T17:28:07.000Z
CVE-2020-3803 
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.
Problem types: description: Insecure library loading (DLL hijacking)
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2020-03-25T17:28:44.000Z
CVE-2020-3804 
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-bounds read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2020-03-25T17:28:24.000Z
CVE-2020-3805 
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have a use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Use-after-free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2020-03-25T17:27:59.000Z
CVE-2020-3806 
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-bounds read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2020-03-25T17:28:15.000Z
CVE-2020-3807 
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have a buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Buffer overflow
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2020-03-25T17:28:32.000Z
CVE-2020-3808 
Creative Cloud Desktop Application versions 5.0 and earlier have a time-of-check to time-of-use (toctou) race condition vulnerability. Successful exploitation could lead to arbitrary file deletion.
Problem types: description: Time-of-check to time-of-use (TOCTOU) race condition
Affected products: vendor: Adobe
product: Creative Cloud Desktop Application
Published: 2020-03-25T19:12:54.000Z
CVE-2020-3809 
Adobe After Effects versions 17.0.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe After Effects
Published: 2020-06-26T20:21:08.000Z
CVE-2020-3810 
Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing specially crafted deb files.
Problem types: description: apt out-of-bounds read in .ar/.tar implemations
Affected products: vendor: Debian
product: apt
Published: 2020-05-15T13:42:05.044Z
CVE-2020-3811 
qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability.
Problem types: description: mail-address verification bypass
Affected products: vendor: Debian
product: netqmail
Published: 2020-05-26T13:04:41.753Z
CVE-2020-3812 
qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A local attacker can test for the existence of files and directories anywhere in the filesystem because qmail-verify runs as root and tests for the existence of files in the attacker's home directory, without dropping its privileges first.
Problem types: description: information disclosure
Affected products: vendor: Debian
product: netqmail
Published: 2020-05-26T13:04:14.769Z
CVE-2020-3825 
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-02-27T20:45:04.000Z
CVE-2020-3826 
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing a maliciously crafted image may lead to arbitrary code execution.
Problem types: description: Processing a maliciously crafted image may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-02-27T20:45:04.000Z
CVE-2020-3827 
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. Viewing a maliciously crafted JPEG file may lead to arbitrary code execution.
Problem types: description: Viewing a maliciously crafted JPEG file may lead to arbitrary code execution
Affected products: vendor: Apple
product: macOS
Published: 2020-02-27T20:45:04.000Z
CVE-2020-3828 
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen.
Problem types: description: A person with physical access to an iOS device may be able to access contacts from the lock screen
Affected products: vendor: Apple
product: iOS
Published: 2020-02-27T20:45:04.000Z
CVE-2020-3829 
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to gain elevated privileges.
Problem types: description: An application may be able to gain elevated privileges
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-02-27T20:45:04.000Z
CVE-2020-3830 
A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Catalina 10.15.3. A malicious application may be able to overwrite arbitrary files.
Problem types: description: A malicious application may be able to overwrite arbitrary files
Affected products: vendor: Apple
product: macOS
Published: 2020-02-27T20:45:04.000Z
CVE-2020-3831 
A race condition was addressed with improved locking. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: iOS
Published: 2020-02-27T20:45:04.000Z
CVE-2020-3833 
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.5. Visiting a malicious website may lead to address bar spoofing.
Problem types: description: Visiting a malicious website may lead to address bar spoofing
Affected products: vendor: Apple
product: Safari
Published: 2020-02-27T20:45:04.000Z
CVE-2020-3834 
A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: watchOS
Published: 2020-02-27T20:45:04.000Z
CVE-2020-3835 
A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Catalina 10.15.3. A malicious application may be able to access restricted files.
Problem types: description: A malicious application may be able to access restricted files
Affected products: vendor: Apple
product: macOS
Published: 2020-02-27T20:45:04.000Z
CVE-2020-3836 
An access issue was addressed with improved memory management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. A malicious application may be able to determine kernel memory layout.
Problem types: description: A malicious application may be able to determine kernel memory layout
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-02-27T20:45:04.000Z
CVE-2020-3837 
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-02-27T20:45:04.000Z
CVE-2020-3838 
The issue was addressed with improved permissions logic. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with system privileges.
Problem types: description: An application may be able to execute arbitrary code with system privileges
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-02-27T20:45:04.000Z
CVE-2020-3839 
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Catalina 10.15.3. An application may be able to read restricted memory.
Problem types: description: An application may be able to read restricted memory
Affected products: vendor: Apple
product: macOS
Published: 2020-02-27T20:45:04.000Z
CVE-2020-3840 
An off by one issue existed in the handling of racoon configuration files. This issue was addressed through improved bounds checking. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1. Loading a maliciously crafted racoon configuration file may lead to arbitrary code execution.
Problem types: description: Loading a maliciously crafted racoon configuration file may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
Published: 2020-02-27T20:45:04.000Z
CVE-2020-3841 
The issue was addressed with improved UI handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, Safari 13.0.5. A local user may unknowingly send a password unencrypted over the network.
Problem types: description: A local user may unknowingly send a password unencrypted over the network
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: Safari
Published: 2020-02-27T20:45:04.000Z
CVE-2020-3842 
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-02-27T20:45:04.000Z
CVE-2020-3843 
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4.7, watchOS 5.3.7. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.
Problem types: description: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory
Affected products: vendor: Apple
product: iOS-1
vendor: Apple
product: watchOS-1
Published: 2020-02-27T20:45:04.000Z
CVE-2020-3844 
This issue was addressed with improved checks. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Users removed from an iMessage conversation may still be able to alter state.
Problem types: description: Users removed from an iMessage conversation may still be able to alter state
Affected products: vendor: Apple
product: iOS
Published: 2020-02-27T20:45:04.000Z
CVE-2020-3845 
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.3. An application may be able to execute arbitrary code with system privileges.
Problem types: description: An application may be able to execute arbitrary code with system privileges
Affected products: vendor: Apple
product: macOS
Published: 2020-02-27T20:45:04.000Z
CVE-2020-3846 
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution.
Problem types: description: Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-02-27T20:45:05.000Z
CVE-2020-3847 
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to leak memory.
Problem types: description: A remote attacker may be able to leak memory
Affected products: vendor: Apple
product: macOS
Published: 2020-04-01T18:09:13.000Z
CVE-2020-3848 
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
Problem types: description: A remote attacker may be able to cause unexpected application termination or arbitrary code execution
Affected products: vendor: Apple
product: macOS
Published: 2020-04-01T18:09:00.000Z
CVE-2020-3849 
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
Problem types: description: A remote attacker may be able to cause unexpected application termination or arbitrary code execution
Affected products: vendor: Apple
product: macOS
Published: 2020-04-01T18:09:06.000Z
CVE-2020-3850 
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
Problem types: description: A remote attacker may be able to cause unexpected application termination or arbitrary code execution
Affected products: vendor: Apple
product: macOS
Published: 2020-04-01T18:08:52.000Z
CVE-2020-3851 
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security Update 2020-002 High Sierra, macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra. An application may be able to gain elevated privileges.
Problem types: description: An application may be able to gain elevated privileges
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2020-10-27T20:30:03.000Z
CVE-2020-3852 
A logic issue was addressed with improved validation. This issue is fixed in Safari 13.0.5. A URL scheme may be incorrectly ignored when determining multimedia permission for a website.
Problem types: description: A URL scheme may be incorrectly ignored when determining multimedia permission for a website
Affected products: vendor: Apple
product: Safari
Published: 2020-10-27T20:09:27.000Z
CVE-2020-3853 
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. A malicious application may be able to execute arbitrary code with system privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with system privileges
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-02-27T20:45:05.000Z
CVE-2020-3854 
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.3. An application may be able to execute arbitrary code with system privileges.
Problem types: description: An application may be able to execute arbitrary code with system privileges
Affected products: vendor: Apple
product: macOS
Published: 2020-02-27T20:45:05.000Z
CVE-2020-3855 
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra. A malicious application may be able to overwrite arbitrary files.
Problem types: description: A malicious application may be able to overwrite arbitrary files
Affected products: vendor: Apple
product: macOS
Published: 2020-10-27T20:12:16.000Z
CVE-2020-3856 
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. Processing a maliciously crafted string may lead to heap corruption.
Problem types: description: Processing a maliciously crafted string may lead to heap corruption
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-02-27T20:45:05.000Z
CVE-2020-3857 
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with system privileges.
Problem types: description: An application may be able to execute arbitrary code with system privileges
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-02-27T20:45:05.000Z
CVE-2020-3858 
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: iOS
Published: 2020-02-27T20:45:05.000Z
CVE-2020-3859 
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen.
Problem types: description: A person with physical access to an iOS device may be able to access contacts from the lock screen
Affected products: vendor: Apple
product: iOS
Published: 2020-02-27T20:45:04.000Z
CVE-2020-3860 
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: watchOS
Published: 2020-02-27T20:45:05.000Z
CVE-2020-3861 
The issue was addressed with improved permissions logic. This issue is fixed in iTunes for Windows 12.10.4. A user may gain access to protected parts of the file system.
Problem types: description: A user may gain access to protected parts of the file system
Affected products: vendor: Apple
product: iTunes for Windows
Published: 2020-02-27T20:45:05.000Z
CVE-2020-3862 
A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. A malicious website may be able to cause a denial of service.
Problem types: description: A malicious website may be able to cause a denial of service
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-02-27T20:45:05.000Z
CVE-2020-3863 
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra. An application may be able to execute arbitrary code with system privileges.
Problem types: description: An application may be able to execute arbitrary code with system privileges
Affected products: vendor: Apple
product: macOS
Published: 2020-10-27T20:42:25.000Z