Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-15455 State: PUBLISHED Published: 2019-11-14T16:27:24 Last Updated: 2024-08-05T00:49:13.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Samsung J5 Android device with a build fingerprint of samsung/j5y17ltexx/j5y17lte:8.1.0/M1AJQ/J530FXXU3BRL1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000100, versionName=7.0.1.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps th
CVE ID: CVE-2019-15456 State: PUBLISHED Published: 2019-11-14T16:27:26 Last Updated: 2024-08-05T00:49:13.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Samsung J6 Android device with a build fingerprint of samsung/j6ltexx/j6lte:8.0.0/R16NW/J600FNXXU3ASC1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000000, versionName=7.0.0.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that ex
on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15457 State: PUBLISHED Published: 2019-11-14T16:27:27 Last Updated: 2024-08-05T00:49:13.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Samsung J6 Android device with a build fingerprint of samsung/j6ltexx/j6lte:8.0.0/R16NW/J600FNXXU3ASC1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000000, versionName=7.0.0.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that ex
CVE ID: CVE-2019-15458 State: PUBLISHED Published: 2019-11-14T16:27:29 Last Updated: 2024-08-05T00:49:13.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Samsung J7 Neo Android device with a build fingerprint of samsung/j7veltedx/j7velte:8.1.0/M1AJQ/J701FXXS6BSC1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000100, versionName=7.0.1.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps
ed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15459 State: PUBLISHED Published: 2019-11-14T16:27:30 Last Updated: 2024-08-05T00:49:13.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Samsung J7 Neo Android device with a build fingerprint of samsung/j7velteub/j7velte:8.1.0/M1AJQ/J701MUBS6BSB3:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000100, versionName=7.0.1.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps
CVE ID: CVE-2019-15460 State: PUBLISHED Published: 2019-11-14T16:27:32 Last Updated: 2024-08-05T00:49:13.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Samsung J7 Neo Android device with a build fingerprint of samsung/j7veltedx/j7velte:8.1.0/M1AJQ/J701FXVS6BSC1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000100, versionName=7.0.1.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps
CVE ID: CVE-2019-15461 State: PUBLISHED Published: 2019-11-14T16:27:33 Last Updated: 2024-08-05T00:49:13.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Samsung J7 Neo Android device with a build fingerprint of samsung/j7velteub/j7velte:8.1.0/M1AJQ/J701MUBS6BSB4:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000100, versionName=7.0.1.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps
CVE ID: CVE-2019-15462 State: PUBLISHED Published: 2019-11-14T16:27:34 Last Updated: 2024-08-05T00:49:13.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Samsung J7 Duo Android device with a build fingerprint of samsung/j7duolteub/j7duolte:8.0.0/R16NW/J720MUBS3ASB2:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000000, versionName=7.0.0.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed app
CVE ID: CVE-2019-15463 State: PUBLISHED Published: 2019-11-14T16:27:36 Last Updated: 2024-08-05T00:49:13.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Samsung j7popeltemtr Android device with a build fingerprint of samsung/j7popeltemtr/j7popeltemtr:8.1.0/M1AJQ/J727T1UVS5BSC2:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000100, versionName=7.0.1.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-
any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15464 State: PUBLISHED Published: 2019-11-14T16:27:37 Last Updated: 2024-08-05T00:49:13.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Samsung J7 Pro Android device with a build fingerprint of samsung/j7y17lteub/j7y17lte:8.1.0/M1AJQ/J730GUBS6BSC1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000100, versionName=7.0.1.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed app
CVE ID: CVE-2019-15465 State: PUBLISHED Published: 2019-11-14T16:27:39 Last Updated: 2024-08-05T00:49:13.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Samsung J7 Pro Android device with a build fingerprint of samsung/j7y17lteubm/j7y17lte:8.1.0/M1AJQ/J730GMUBS6BSC1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000100, versionName=7.0.1.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed a
talled app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15466 State: PUBLISHED Published: 2019-11-14T16:27:40 Last Updated: 2024-08-05T00:49:13.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakura_india/sakura_india:8.1.0/OPM1.171019.019/V10.2.6.0.ODMMIXM:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app (versionCode=1, versionName=QL1715_201812191721) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/and
o-located on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15467 State: PUBLISHED Published: 2019-11-14T16:27:41 Last Updated: 2024-08-05T00:49:13.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Xiaomi Mi Mix 2S Android device with a build fingerprint of Xiaomi/polaris/polaris:8.0.0/OPR1.170623.032/V9.5.19.0.ODGMIFA:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app (versionCode=1, versionName=A2060_201801032053) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware
the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15468 State: PUBLISHED Published: 2019-11-14T16:27:43 Last Updated: 2024-08-05T00:49:13.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/daisy/daisy_sprout:9/PKQ1.180917.001/V10.0.3.0.PDLMIXM:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app (versionCode=1, versionName=QL1715_201812071953) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmwar
CVE ID: CVE-2019-15469 State: PUBLISHED Published: 2019-11-14T16:27:44 Last Updated: 2024-08-05T00:49:13.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Xiaomi Mi Pad 4 Android device with a build fingerprint of Xiaomi/clover/clover:8.1.0/OPM1.171019.019/V9.6.26.0.ODJCNFD:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=27, versionName=8.1.0) that allows other pre-installed apps to perform microphone audio recording via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-i
ny pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that export their capabilities to other pre-installed app. This app allows a third-party app to use its open interface to record telephone calls to external storage. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15470 State: PUBLISHED Published: 2019-11-14T16:27:46 Last Updated: 2024-08-05T00:49:13.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Xiaomi Redmi Note 6 Pro Android device with a build fingerprint of xiaomi/tulip/tulip:8.1.0/OPM1.171019.011/V10.2.2.0.OEKMIXM:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=27, versionName=8.1.0) that allows other pre-installed apps to perform microphone audio recording via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other
d by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that export their capabilities to other pre-installed app. This app allows a third-party app to use its open interface to record telephone calls to external storage. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15471 State: PUBLISHED Published: 2019-11-14T16:27:47 Last Updated: 2024-08-05T00:49:13.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Xiaomi Mi Mix 2S Android device with a build fingerprint of Xiaomi/polaris/polaris:8.0.0/OPR1.170623.032/V9.5.19.0.ODGMIFA:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=27, versionName=8.1.0) that allows other pre-installed apps to perform microphone audio recording via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pr
y any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that export their capabilities to other pre-installed app. This app allows a third-party app to use its open interface to record telephone calls to external storage. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15472 State: PUBLISHED Published: 2019-11-14T16:27:48 Last Updated: 2024-08-05T00:49:13.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/daisy/daisy_sprout:9/PKQ1.180917.001/V10.0.3.0.PDLMIXM:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=28, versionName=9) that allows unauthorized microphone audio recording via a confused deputy attack. This capability can be accessed by any app co-located on the device. This app allows a third-party app to use its open interface to record telephone calls to external storage. Additio
vice. This app allows a third-party app to use its open interface to record telephone calls to external storage. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15473 State: PUBLISHED Published: 2019-11-14T16:27:50 Last Updated: 2024-08-05T00:49:13.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/jasmine/jasmine_sprout:9/PKQ1.180904.001/V10.0.2.0.PDIMIFJ:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=28, versionName=9) that allows unauthorized microphone audio recording via a confused deputy attack. This capability can be accessed by any app co-located on the device. This app allows a third-party app to use its open interface to record telephone calls to external storage. Add
e device. This app allows a third-party app to use its open interface to record telephone calls to external storage. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15474 State: PUBLISHED Published: 2019-11-14T16:27:51 Last Updated: 2024-08-05T00:49:13.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Xiaomi Cepheus Android device with a build fingerprint of Xiaomi/cepheus/cepheus:9/PKQ1.181121.001/V10.2.6.0.PFAMIXM:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=28, versionName=9) that allows unauthorized microphone audio recording via a confused deputy attack. This capability can be accessed by any app co-located on the device. This app allows a third-party app to use its open interface to record telephone calls to external storage. Additional An
This app allows a third-party app to use its open interface to record telephone calls to external storage. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15475 State: PUBLISHED Published: 2019-11-14T16:27:53 Last Updated: 2024-08-05T00:49:13.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Xiaomi Mi A3 Android device with a build fingerprint of xiaomi/onc_eea/onc:9/PKQ1.181021.001/V10.2.8.0.PFLEUXM:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=28, versionName=9) that allows unauthorized microphone audio recording via a confused deputy attack. This capability can be accessed by any app co-located on the device. This app allows a third-party app to use its open interface to record telephone calls to external storage. Additional Analyst
pp allows a third-party app to use its open interface to record telephone calls to external storage. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15476 State: PUBLISHED Published: 2019-08-23T12:17:24 Last Updated: 2024-08-05T00:49:12.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Former before 4.2.1 has XSS via a checkbox value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/formers/former/pull/584 - https://github.com/formers/former/releases/tag/4.2.1
CVE ID: CVE-2019-15477 State: PUBLISHED Published: 2019-08-23T12:19:16 Last Updated: 2024-08-05T00:49:13.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jooby before 1.6.4 has XSS via the default error handler. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jooby-project/jooby/pull/1368
CVE ID: CVE-2019-15478 State: PUBLISHED Published: 2019-08-26T11:42:52 Last Updated: 2024-08-05T00:49:13.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Status Board 1.1.81 has reflected XSS via logic.ts. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jameswlane/status-board/pull/949
CVE ID: CVE-2019-15479 State: PUBLISHED Published: 2019-08-26T13:49:16 Last Updated: 2024-08-05T00:49:13.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Status Board 1.1.81 has reflected XSS via dashboard.ts. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jameswlane/status-board/pull/948
CVE ID: CVE-2019-15480 State: PUBLISHED Published: 2019-08-23T12:24:03 Last Updated: 2024-08-05T00:49:13.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Domoticz 4.10717 has XSS via item.Name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/domoticz/domoticz/pull/3368 - https://github.com/domoticz/domoticz/issues/3367
CVE ID: CVE-2019-15481 State: PUBLISHED Published: 2019-08-23T12:25:49 Last Updated: 2024-08-05T00:49:13.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kimai v2 before 1.1 has XSS via a timesheet description. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kevinpapst/kimai2/releases/tag/1.1 - https://github.com/kevinpapst/kimai2/pull/962
CVE ID: CVE-2019-15482 State: PUBLISHED Published: 2019-08-23T12:51:09 Last Updated: 2024-08-05T00:49:13.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: selectize-plugin-a11y before 1.1.0 has XSS via the msg field. Additional Analyst Notes: - CVE Program Container: References: - https://www.npmjs.com/package/selectize-plugin-a11y/v/1.1.0 - https://github.com/SLMNBJ/selectize-plugin-a11y/pull/9
CVE ID: CVE-2019-15483 State: PUBLISHED Published: 2019-08-23T12:29:17 Last Updated: 2024-08-05T00:49:13.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bolt before 3.6.10 has XSS via a title that is mishandled in the system log. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bolt/bolt/releases/tag/v3.6.10 - https://github.com/bolt/bolt/pull/7802
CVE ID: CVE-2019-15484 State: PUBLISHED Published: 2019-08-23T12:30:05 Last Updated: 2024-08-05T00:49:13.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bolt before 3.6.10 has XSS via an image's alt or title field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bolt/bolt/releases/tag/v3.6.10 - https://github.com/bolt/bolt/pull/7801
CVE ID: CVE-2019-15485 State: PUBLISHED Published: 2019-08-23T12:30:42 Last Updated: 2024-08-05T00:49:13.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bolt/bolt/releases/tag/v3.6.10 - https://github.com/bolt/bolt/pull/7800
CVE ID: CVE-2019-15486 State: PUBLISHED Published: 2019-08-23T12:31:58 Last Updated: 2024-08-05T00:49:13.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: django-js-reverse (aka Django JS Reverse) before 0.9.1 has XSS via js_reverse_inline. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ierror/django-js-reverse/compare/v0.9.0...v0.9.1 - https://github.com/ierror/django-js-reverse/pull/81
CVE ID: CVE-2019-15487 State: PUBLISHED Published: 2019-08-23T12:34:41 Last Updated: 2024-08-05T00:49:13.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: DfE School Experience before v16333-GA has XSS via a teacher training URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DFE-Digital/schools-experience/pull/769 - https://github.com/DFE-Digital/schools-experience/releases/tag/v16333-GA
CVE ID: CVE-2019-15488 State: PUBLISHED Published: 2019-08-23T12:37:31 Last Updated: 2024-08-05T00:49:13.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/igniterealtime/Openfire/compare/cd0a573...5e5d9e5 - https://github.com/igniterealtime/Openfire/pull/1441
CVE ID: CVE-2019-15489 State: PUBLISHED Published: 2019-08-26T11:57:41 Last Updated: 2024-08-05T00:49:13.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: laracom (aka Laravel FREE E-Commerce Software) 1.4.11 has search?q= XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Laracommerce/laracom/pull/211
CVE ID: CVE-2019-15490 State: PUBLISHED Published: 2019-08-23T12:41:08 Last Updated: 2024-08-05T00:49:13.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: openITCOCKPIT before 3.7.1 allows code injection, aka RVID 1-445b21. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/it-novum/openITCOCKPIT/releases/tag/openITCOCKPIT-3.7.1