Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-40603 State: PUBLISHED Published: 2024-06-12T09:51:54.422Z Last Updated: 2024-08-14T16:24:39.743Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Gangesh Matta Products: Simple Org Chart Problem Types: CWE-862 Description: Missing Authorization vulnerability in Gangesh Matta Simple Org Chart.This issue affects Simple Org Chart: from n/a through 2.3.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/simple-org-chart/wordpress-simple-org-chart-plugin-2-3-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-40604 State: PUBLISHED Published: 2023-09-27T05:18:30.166Z Last Updated: 2024-09-23T13:29:25.709Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Jes Madsen Products: Cookies by JM Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jes Madsen Cookies by JM plugin <= 1.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/cookies-by-jm/wordpress-cookies-by-jm-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-40605 State: PUBLISHED Published: 2023-09-27T05:31:37.272Z Last Updated: 2024-09-23T18:24:07.161Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: 93digital Products: Typing Effect Problem Types: CWE-79 Description: Auth. (contributor) Cross-Site Scripting (XSS) vulnerability in 93digital Typing Effect plugin <= 1.3.6 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/animated-typing-effect/wordpress-typing-effect-plugin-1-3-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-40606 State: PUBLISHED Published: 2023-12-29T08:59:57.593Z Last Updated: 2024-11-20T19:32:06.733Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Kanban for WordPress Products: Kanban Boards for WordPress Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Kanban for WordPress Kanban Boards for WordPress.This issue affects Kanban Boards for WordPress: from n/a through 2.5.21. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/kanban/wordpress-kanban-boards-for-wordpress-plugin-2-5-21-arbitrary-code-
https://patchstack.com/database/vulnerability/kanban/wordpress-kanban-boards-for-wordpress-plugin-2-5-21-arbitrary-code-execution-vulnerability?_s_id=cve
CVE ID: CVE-2023-40607 State: PUBLISHED Published: 2023-10-06T14:51:15.772Z Last Updated: 2024-09-19T15:22:34.167Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: CLUEVO Products: CLUEVO LMS, E-Learning Platform Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in CLUEVO CLUEVO LMS, E-Learning Platform plugin <= 1.10.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/cluevo-lms/wordpress-cluevo-lms-plugin-1-10-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-40608 State: PUBLISHED Published: 2024-06-19T11:51:46.618Z Last Updated: 2024-08-02T18:38:50.544Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: Paid Memberships Pro Products: Paid Memberships Pro CCBill Gateway Problem Types: CWE-862 Description: Missing Authorization vulnerability in Paid Memberships Pro Paid Memberships Pro CCBill Gateway.This issue affects Paid Memberships Pro CCBill Gateway: from n/a through 0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/pmpro-ccbill/wordpress-paid-memberships-pro-ccbill-gateway-plugin-0-3-unauthenticated-broken
.com/database/vulnerability/pmpro-ccbill/wordpress-paid-memberships-pro-ccbill-gateway-plugin-0-3-unauthenticated-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-40609 State: PUBLISHED Published: 2023-11-06T08:15:24.225Z Last Updated: 2024-09-05T14:01:00.333Z Vendors: Aiyaz, maheshpatel Products: Contact form 7 Custom validation Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aiyaz, maheshpatel Contact form 7 Custom validation allows SQL Injection.This issue affects Contact form 7 Custom validation: from n/a through 1.1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/cf7-field-validation/wordpress-contact-form-7-custom-validation-plugin-1-1-3-unauth-sql-inj
k.com/database/vulnerability/cf7-field-validation/wordpress-contact-form-7-custom-validation-plugin-1-1-3-unauth-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-40610 State: PUBLISHED Published: 2023-11-27T10:22:41.083Z Last Updated: 2025-06-03T13:59:39.739Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N) Vendors: Apache Software Foundation Products: Apache Superset Problem Types: CWE-863 Description: Improper authorization check and possible privilege escalation on Apache Superset up to but excluding 2.1.2. Using the default examples database connection that allows access to both the examples schema and Apache Superset's metadata database, an attacker using a specially crafted CTE SQL statement could change data on the metadata database. This weakness could result on tampering with the authentication/author
ement could change data on the metadata database. This weakness could result on tampering with the authentication/authorization data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/jvgxpk4dbxyqtsgtl4pdgbd520rc0rot - http://www.openwall.com/lists/oss-security/2023/11/27/2 - https://github.com/orangecertcc/security-research/security/advisories/GHSA-f678-j579-4xf5
CVE ID: CVE-2023-40611 State: PUBLISHED Published: 2023-09-12T11:05:22.841Z Last Updated: 2025-06-25T13:39:24.245Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: CWE-863 Description: Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could have them alter details such as configuration parameters, start date, etc. Users should upgrade to version 2.7.1 or later which has removed the vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/airflow/pull/334
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/airflow/pull/33413 - https://lists.apache.org/thread/8y9xk1s3j4qr36yzqn8ogbn9fl7pxrn0 - http://www.openwall.com/lists/oss-security/2023/11/12/1
CVE ID: CVE-2023-40612 State: PUBLISHED Published: 2023-08-23T18:22:49.025Z Last Updated: 2024-10-01T15:52:57.777Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L) Vendors: The OpenNMS Group Products: Horizon, Meridian Problem Types: CWE-91 Description: In OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2, the file editor which is accessible to any user with ROLE_FILESYSTEM_EDITOR privileges is vulnerable to XXE injection attacks. The solution is to upgrade to Meridian 2023.1.5 or Horizon 32.0.2 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be direct
uctions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet. OpenNMS thanks Erik Wynter for reporting this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OpenNMS/opennms/pull/6288 - https://docs.opennms.com/meridian/2023/releasenotes/changelog.html#releasenotes-changelog-Meridian-2023.1.5
CVE ID: CVE-2023-40617 State: PUBLISHED Published: 2023-09-13T00:00:00 Last Updated: 2024-09-26T13:27:26.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in OpenKnowledgeMaps Head Start 7 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'file' parameter in 'displayPDF.php'. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dub-flow/vulnerability-research/tree/main/CVE-2023-40617
CVE ID: CVE-2023-40618 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-25T14:19:09.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in OpenKnowledgeMaps Head Start versions 4, 5, 6, 7 as well as Visual Project Explorer 1.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'service' parameter in 'headstart_snapshot.php'. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dub-flow/vulnerability-research/tree/main/CVE-2023-40618
CVE ID: CVE-2023-40619 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-25T14:18:05.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untrusted data which may lead to remote code execution because user-controlled data is directly passed to the PHP 'unserialize()' function in multiple places. An example is the functionality to manage tables in 'tables.php' where the 'ma[]' POST parameter is deserialized. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dub-flow/vulnerability-research/tree/main/CVE-2023-40619 - https://lists.debian.org
nt: References: - https://github.com/dub-flow/vulnerability-research/tree/main/CVE-2023-40619 - https://lists.debian.org/debian-lts-announce/2023/11/msg00000.html
CVE ID: CVE-2023-40621 State: PUBLISHED Published: 2023-09-12T02:10:22.051Z Last Updated: 2024-09-25T15:25:02.097Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: SAP_SE Products: SAP PowerDesigner Client Problem Types: CWE-94 Description: SAP PowerDesigner Client - version 16.7, allows an unauthenticated attacker to inject VBScript code in a document and have it opened by an unsuspecting user, to have it executed by the application on behalf of the user. The application has a security option to disable or prompt users before untrusted scripts are executed, but this is not set as default. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrich
pts are executed, but this is not set as default. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://me.sap.com/notes/3357163
CVE ID: CVE-2023-40622 State: PUBLISHED Published: 2023-09-12T02:03:05.907Z Last Updated: 2024-09-28T22:11:29.586Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: SAP_SE Products: SAP BusinessObjects Business Intelligence Platform (Promotion Management) Problem Types: CWE-732 Description: SAP BusinessObjects Business Intelligence Platform (Promotion Management) - versions 420, 430, under certain condition allows an authenticated attacker to view sensitive information which is otherwise restricted. On successful exploitation, the attacker can completely compromise the application causing high impact on confidentiality, integrity, and availability. Additiona
can completely compromise the application causing high impact on confidentiality, integrity, and availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3320355 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-40623 State: PUBLISHED Published: 2023-09-12T02:02:38.194Z Last Updated: 2024-09-25T15:28:05.273Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:H) Vendors: SAP_SE Products: SAP BusinessObjects Suite (Installer) Problem Types: CWE-1386 Description: SAP BusinessObjects Suite Installer - version 420, 430, allows an attacker within the network to create a directory under temporary directory and link it to a directory with operating system files. On successful exploitation the attacker can delete all the operating system files causing a limited impact on integrity and completely compromising the availability of the system. Additional Analyst Notes: - CVE P
imited impact on integrity and completely compromising the availability of the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3317702 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-40624 State: PUBLISHED Published: 2023-09-12T02:00:30.824Z Last Updated: 2024-09-25T20:15:00.246Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: SAP_SE Products: SAP NetWeaver AS ABAP (applications based on Unified Rendering) Problem Types: CWE-79 Description: SAP NetWeaver AS ABAP (applications based on Unified Rendering) - versions SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, SAP_UI 758, SAP_BASIS 702, SAP_BASIS 731, allows an attacker to inject JavaScript code that can be executed in the web-application. An attacker could thereby control the behavior of this web-application. Additional Analyst Notes: - CVE Program Container: - CISA AD
could thereby control the behavior of this web-application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3323163 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-40625 State: PUBLISHED Published: 2023-09-12T02:00:13.727Z Last Updated: 2024-09-25T15:28:24.390Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: SAP_SE Products: SAP Manage Purchase Contracts App Problem Types: CWE-862 Description: S4CORE (Manage Purchase Contracts App) - versions 102, 103, 104, 105, 106, 107, does not perform necessary authorization checks for an authenticated user. This could allow an attacker to perform unintended actions resulting in escalation of privileges which has low impact on confidentiality and integrity with no impact on availibility of the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vu
integrity with no impact on availibility of the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3326361 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-40626 State: PUBLISHED Published: 2023-11-29T12:28:47.787Z Last Updated: 2024-12-04T16:10:05.927Z Vendors: Joomla! Project Products: Joomla! CMS Problem Types: Information Disclosure Description: The language file parsing process could be manipulated to expose environment variables. Environment variables might contain sensible information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developer.joomla.org/security-centre/919-20231101-core-exposure-of-environment-variables.html
CVE ID: CVE-2023-40627 State: PUBLISHED Published: 2023-12-14T08:52:05.011Z Last Updated: 2024-08-04T08:42:17.204Z Vendors: https://github.com/MLWebTechnologies Products: LivingWord component for Joomla Problem Types: CWE-79 Description: A reflected XSS vulnerability was discovered in the LivingWord component for Joomla. Additional Analyst Notes: - CVE Program Container: References: - https://extensions.joomla.org/extension/livingword/
CVE ID: CVE-2023-40628 State: PUBLISHED Published: 2023-12-14T08:52:00.887Z Last Updated: 2024-08-04T08:43:01.212Z Vendors: Extplorer.net Products: Extplorer component for Joomla Problem Types: CWE-79 Description: A reflected XSS vulnerability was discovered in the Extplorer component for Joomla. Additional Analyst Notes: - CVE Program Container: References: - https://extensions.joomla.org/extension/extplorer/
CVE ID: CVE-2023-40629 State: PUBLISHED Published: 2023-12-14T08:52:00.533Z Last Updated: 2024-08-04T08:43:18.167Z Vendors: king-products.net Products: LMS Lite component for Joomla Problem Types: CWE-89 Description: SQLi vulnerability in LMS Lite component for Joomla. Additional Analyst Notes: - CVE Program Container: References: - https://extensions.joomla.org/extension/lms-lite/
CVE ID: CVE-2023-40630 State: PUBLISHED Published: 2023-12-14T08:51:55.669Z Last Updated: 2024-10-20T04:33:26.779Z Vendors: joomcode.com Products: JCDashboards component for Joomla Problem Types: CWE-918 Description: Unauthenticated LFI/SSRF in JCDashboards component for Joomla. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://extensions.joomla.org/extension/jcdashboards/
CVE ID: CVE-2023-40631 State: PUBLISHED Published: 2023-10-08T03:35:57.807Z Last Updated: 2024-09-19T18:41:03.130Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In Dialer, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40632 State: PUBLISHED Published: 2023-10-08T03:35:58.116Z Last Updated: 2024-09-19T18:40:15.360Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: T606/T612/T616 Description: In jpg driver, there is a possible use after free due to a logic error. This could lead to remote information disclosure no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40633 State: PUBLISHED Published: 2023-10-08T03:35:58.412Z Last Updated: 2024-09-19T18:24:55.794Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In phasecheckserver, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40634 State: PUBLISHED Published: 2023-10-08T03:35:58.711Z Last Updated: 2024-09-19T15:41:06.243Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In phasechecksercer, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40635 State: PUBLISHED Published: 2023-10-08T03:35:59.024Z Last Updated: 2024-09-19T15:26:51.868Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In linkturbo, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40636 State: PUBLISHED Published: 2023-10-08T03:35:59.325Z Last Updated: 2024-09-19T15:12:21.452Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: T760/T770/T820/S8000 Description: In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with System execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40637 State: PUBLISHED Published: 2023-10-08T03:35:59.619Z Last Updated: 2024-09-19T15:11:02.651Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40638 State: PUBLISHED Published: 2023-10-08T03:35:59.919Z Last Updated: 2024-09-19T15:07:24.415Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: T760/T770/T820/S8000 Description: In Telecom service, there is a possible missing permission check. This could lead to local denial of service with System execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40639 State: PUBLISHED Published: 2023-10-08T03:36:00.240Z Last Updated: 2024-09-19T15:05:42.958Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In SoundRecorder service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40640 State: PUBLISHED Published: 2023-10-08T03:36:00.549Z Last Updated: 2024-09-19T15:03:20.794Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In SoundRecorder service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40641 State: PUBLISHED Published: 2023-10-08T03:36:00.842Z Last Updated: 2024-09-19T15:01:21.554Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A Description: In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074