Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-42561 State: PUBLISHED Published: 2023-12-05T02:44:19.237Z Last Updated: 2025-05-29T13:34:31.961Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787: Out-of-bounds Write Description: Heap out-of-bounds write vulnerability in bootloader prior to SMR Dec-2023 Release 1 allows a physical attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE ID: CVE-2023-42562 State: PUBLISHED Published: 2023-12-05T02:44:20.352Z Last Updated: 2024-08-02T19:23:39.952Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-680: Integer Overflow to Buffer Overflow Description: Integer overflow vulnerability in detectionFindFaceSupportMultiInstance of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE ID: CVE-2023-42563 State: PUBLISHED Published: 2023-12-05T02:49:02.241Z Last Updated: 2024-08-02T19:23:39.836Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-680: Integer Overflow to Buffer Overflow Description: Integer overflow vulnerability in landmarkCopyImageToNative of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE ID: CVE-2023-42564 State: PUBLISHED Published: 2023-12-05T02:44:21.326Z Last Updated: 2024-12-02T17:12:56.544Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284 Improper Access Control Description: Improper access control in knoxcustom service prior to SMR Dec-2023 Release 1 allows attacker to send broadcast with system privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE ID: CVE-2023-42565 State: PUBLISHED Published: 2023-12-05T02:44:22.255Z Last Updated: 2024-08-02T19:23:39.924Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Improper Input Validation Description: Improper input validation vulnerability in Smart Clip prior to SMR Dec-2023 Release 1 allows local attackers with shell privilege to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE ID: CVE-2023-42566 State: PUBLISHED Published: 2023-12-05T02:44:23.242Z Last Updated: 2024-08-02T19:23:39.666Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bound write vulnerability in libsavsvc prior to SMR Dec-2023 Release 1 allows local attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE ID: CVE-2023-42567 State: PUBLISHED Published: 2023-12-05T02:44:24.433Z Last Updated: 2024-08-02T19:23:40.112Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-120 Buffer Copy without Checking Size of Input (&#39;Classic Buffer Overflow&#39;) Description: Improper size check vulnerability in softsimd prior to SMR Dec-2023 Release 1 allows stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE ID: CVE-2023-42568 State: PUBLISHED Published: 2023-12-05T02:44:25.838Z Last Updated: 2024-08-02T19:23:39.645Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control vulnerability in SmartManagerCN prior to SMR Dec-2023 Release 1 allows local attackers to access arbitrary files with system privilege. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE ID: CVE-2023-42569 State: PUBLISHED Published: 2023-12-05T02:44:26.968Z Last Updated: 2024-10-11T17:54:18.714Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-863 Incorrect Authorization Description: Improper authorization verification vulnerability in AR Emoji prior to SMR Dec-2023 Release 1 allows attackers to read sandbox data of AR Emoji. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE ID: CVE-2023-42570 State: PUBLISHED Published: 2023-12-05T02:44:27.959Z Last Updated: 2024-08-02T19:23:39.939Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-280: Improper Handling of Insufficient Permissions or Privileges Description: Improper access control vulnerability in KnoxCustomManagerService prior to SMR Dec-2023 Release 1 allows attacker to access device SIM PIN. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE ID: CVE-2023-42571 State: PUBLISHED Published: 2023-12-05T02:44:28.948Z Last Updated: 2024-12-02T17:12:01.956Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Find My Mobile Problem Types: CWE-287: Improper Authentication Description: Abuse of remote unlock in Find My Mobile prior to version 7.3.13.4 allows physical attacker to unlock the device remotely by resetting the Samsung Account password with SMS verification when user lost the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12
CVE ID: CVE-2023-42572 State: PUBLISHED Published: 2023-12-05T02:44:29.925Z Last Updated: 2024-08-02T19:23:39.640Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Account Web SDK Problem Types: CWE-927 : Use of Implicit Intent for Sensitive Communication Description: Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12
CVE ID: CVE-2023-42573 State: PUBLISHED Published: 2023-12-05T02:44:30.928Z Last Updated: 2024-08-02T19:23:39.926Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Search Widget Problem Types: CWE-284: Improper Access Control Description: PendingIntent hijacking vulnerability in Search Widget prior to version 3.4 in China models allows local attackers to access data. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12
CVE ID: CVE-2023-42574 State: PUBLISHED Published: 2023-12-05T02:44:31.873Z Last Updated: 2024-08-02T19:23:39.636Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: GameHomeCN Problem Types: CWE-284: Improper Access Control Description: Improper access control vulnerablility in GameHomeCN prior to version 4.2.60.2 allows local attackers to launch arbitrary activity in GameHomeCN. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12
CVE ID: CVE-2023-42575 State: PUBLISHED Published: 2023-12-05T02:44:32.854Z Last Updated: 2024-10-15T17:37:51.348Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Pass Problem Types: CWE-287: Improper Authentication Description: Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid flag setting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12
CVE ID: CVE-2023-42576 State: PUBLISHED Published: 2023-12-05T02:44:33.979Z Last Updated: 2025-06-05T13:17:57.470Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Pass Problem Types: CWE-287: Improper Authentication Description: Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid exception handler. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12
CVE ID: CVE-2023-42577 State: PUBLISHED Published: 2023-12-05T02:44:35.045Z Last Updated: 2024-08-02T19:23:39.767Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Voice Recorder Problem Types: CWE-284: Improper Access Control Description: Improper Access Control in Samsung Voice Recorder prior to versions 21.4.15.01 in Android 12 and Android 13, 21.4.50.17 in Android 14 allows physical attackers to access Voice Recorder information on the lock screen. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12
CVE ID: CVE-2023-42578 State: PUBLISHED Published: 2023-12-05T02:44:36.039Z Last Updated: 2024-08-02T19:23:40.156Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Data Store Problem Types: CWE-280: Improper Handling of Insufficient Permissions or Privileges Description: Improper handling of insufficient permissions or privileges vulnerability in Samsung Data Store prior to version 5.2.00.7 allows remote attackers to access location information without permission. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12
CVE ID: CVE-2023-42579 State: PUBLISHED Published: 2023-12-05T02:44:36.992Z Last Updated: 2024-08-02T19:23:40.156Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Keyboard Problem Types: CWE-319: Cleartext Transmission of Sensitive Information Description: Improper usage of insecure protocol (i.e. HTTP) in SogouSDK of Chinese Samsung Keyboard prior to versions 5.3.70.1 in Android 11, 5.4.60.49, 5.4.85.5, 5.5.00.58 in Android 12, and 5.6.00.52, 5.6.10.42, 5.7.00.45 in Android 13 allows adjacent attackers to access keystroke data using Man-in-the-Middle attack. Additional Analyst Notes: - CVE Program Container: References: - ht
ccess keystroke data using Man-in-the-Middle attack. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12
CVE ID: CVE-2023-42580 State: PUBLISHED Published: 2023-12-05T02:44:38.048Z Last Updated: 2024-08-02T19:23:39.771Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Galaxy Store Problem Types: CWE-20: Improper Input Validation Description: Improper URL validation from MCSLaunch deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to install APK from Galaxy Store. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12
CVE ID: CVE-2023-42581 State: PUBLISHED Published: 2023-12-05T02:44:39.034Z Last Updated: 2024-08-28T18:22:36.655Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Galaxy Store Problem Types: CWE-20: Improper Input Validation Description: Improper URL validation from InstantPlay deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to access data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12
CVE ID: CVE-2023-42627 State: PUBLISHED Published: 2023-10-17T12:08:22.684Z Last Updated: 2025-06-12T15:09:49.651Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Liferay Products: DXP, Portal Problem Types: CWE-79 Description: Multiple stored cross-site scripting (XSS) vulnerabilities in the Commerce module in Liferay Portal 7.3.5 through 7.4.3.91, and Liferay DXP 7.3 update 33 and earlier, and 7.4 before update 92 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a (1) Shipping Name, (2) Shipping Phone Number, (3) Shipping Address, (4) Shipping Address 2, (5) Shipping Address 3, (6) Shipping Zip, (7) Shippi
hipping Phone Number, (3) Shipping Address, (4) Shipping Address 2, (5) Shipping Address 3, (6) Shipping Zip, (7) Shipping City, (8) Shipping Region (9), Shipping Country, (10) Billing Name, (11) Billing Phone Number, (12) Billing Address, (13) Billing Address 2, (14) Billing Address 3, (15) Billing Zip, (16) Billing City, (17) Billing Region, (18) Billing Country, or (19) Region Code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-42627 - https://www.pentagrid.ch/en/blog/stored-cross-site-scripting-vulnerabilities-in-liferay-portal/
CVE ID: CVE-2023-42628 State: PUBLISHED Published: 2023-10-17T11:52:45.867Z Last Updated: 2024-08-02T19:23:40.284Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Liferay Products: DXP, Portal Problem Types: CWE-79 Description: Stored cross-site scripting (XSS) vulnerability in the Wiki widget in Liferay Portal 7.1.0 through 7.4.3.87, and Liferay DXP 7.0 fix pack 83 through 102, 7.1 fix pack 28 and earlier, 7.2 fix pack 20 and earlier, 7.3 update 33 and earlier, and 7.4 before update 88 allows remote attackers to inject arbitrary web script or HTML into a parent wiki page via a crafted payload injected into a wiki page's ‘Content’ text field. Additional Anal
or HTML into a parent wiki page via a crafted payload injected into a wiki page's ‘Content’ text field. Additional Analyst Notes: - CVE Program Container: References: - https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-42628 - https://www.pentagrid.ch/en/blog/stored-cross-site-scripting-vulnerabilities-in-liferay-portal/
CVE ID: CVE-2023-42629 State: PUBLISHED Published: 2023-10-17T08:13:31.830Z Last Updated: 2024-08-02T19:23:40.057Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Liferay Products: DXP, Portal Problem Types: CWE-79 Description: Stored cross-site scripting (XSS) vulnerability in the manage vocabulary page in Liferay Portal 7.4.2 through 7.4.3.87, and Liferay DXP 7.4 before update 88 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a Vocabulary's 'description' text field. Additional Analyst Notes: - CVE Program Container: References: - https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/
tes: - CVE Program Container: References: - https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-42629 - https://www.pentagrid.ch/en/blog/stored-cross-site-scripting-vulnerabilities-in-liferay-portal/
CVE ID: CVE-2023-42631 State: PUBLISHED Published: 2023-11-01T09:08:08.684Z Last Updated: 2024-09-05T19:55:05.161Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42632 State: PUBLISHED Published: 2023-11-01T09:08:08.975Z Last Updated: 2024-09-06T19:09:17.454Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42633 State: PUBLISHED Published: 2023-11-01T09:08:09.278Z Last Updated: 2024-09-06T18:59:40.544Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42634 State: PUBLISHED Published: 2023-11-01T09:08:09.558Z Last Updated: 2024-09-06T18:01:45.880Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42635 State: PUBLISHED Published: 2023-11-01T09:08:09.835Z Last Updated: 2024-09-06T18:01:06.264Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42636 State: PUBLISHED Published: 2023-11-01T09:08:10.122Z Last Updated: 2024-09-06T19:07:16.456Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42637 State: PUBLISHED Published: 2023-11-01T09:08:10.406Z Last Updated: 2024-09-06T19:08:16.311Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42638 State: PUBLISHED Published: 2023-11-01T09:08:10.701Z Last Updated: 2024-09-06T19:05:49.444Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42639 State: PUBLISHED Published: 2023-11-01T09:08:10.991Z Last Updated: 2024-09-06T16:45:56.075Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42640 State: PUBLISHED Published: 2023-11-01T09:08:11.311Z Last Updated: 2024-09-06T16:40:41.225Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42641 State: PUBLISHED Published: 2023-11-01T09:08:11.592Z Last Updated: 2024-09-05T19:54:34.422Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42642 State: PUBLISHED Published: 2023-11-01T09:08:11.877Z Last Updated: 2024-09-05T19:53:07.374Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857