Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-29627 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-06T21:12:44.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Pizza Ordering v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file uploaded to the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portswigger.net/web-security/file-upload - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Online-Pizza-Ordering-1.0
CVE ID: CVE-2023-29629 State: PUBLISHED Published: 2023-06-05T00:00:00.000Z Last Updated: 2025-01-31T14:03:59.519Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: PrestaShop jmsthemelayout 2.5.5 is vulnerable to SQL Injection via ajax_jmsvermegamenu.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://friends-of-presta.github.io/security-advisories/modules/2023/03/13/jmsthemelayout.html
CVE ID: CVE-2023-29630 State: PUBLISHED Published: 2023-06-05T00:00:00.000Z Last Updated: 2025-01-31T14:01:29.735Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: PrestaShop jmsmegamenu 1.1.x and 2.0.x is vulnerable to SQL Injection via ajax_jmsmegamenu.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://friends-of-presta.github.io/security-advisories/modules/2023/03/13/jmsvermegamenu.html
CVE ID: CVE-2023-29631 State: PUBLISHED Published: 2023-06-05T00:00:00.000Z Last Updated: 2025-01-31T14:02:09.441Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: PrestaShop jmsslider 1.6.0 is vulnerable to Incorrect Access Control via ajax_jmsslider.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://friends-of-presta.github.io/security-advisories/modules/2023/03/13/jmsslider.html
CVE ID: CVE-2023-29632 State: PUBLISHED Published: 2023-06-06T00:00:00 Last Updated: 2025-01-08T15:45:09.714Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: PrestaShop jmspagebuilder 3.x is vulnerable to SQL Injection via ajax_jmspagebuilder.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://friends-of-presta.github.io/security-advisories/modules/2023/03/13/jmspagebuilder.html
CVE ID: CVE-2023-29635 State: PUBLISHED Published: 2023-05-01T00:00:00.000Z Last Updated: 2025-01-30T16:15:13.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: File upload vulnerability in Antabot White-Jotter v0.2.2, allows remote attackers to execute malicious code via the file parameter to function coversUpload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Antabot/White-Jotter/issues/157 - https://github.com/Antabot/White-Jotter/blob/c1c5d66fda090b986b8f46a7132d403e3b038c5d/wj/src/main/java/com/gm/wj/controller/LibraryController.java#L63
CVE ID: CVE-2023-29636 State: PUBLISHED Published: 2023-05-01T00:00:00.000Z Last Updated: 2025-01-30T16:09:33.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via the "title" field in the "blog management" page due to the the default configuration not using MyBlogUtils.cleanString. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ZHENFENG13/My-Blog/issues/131
CVE ID: CVE-2023-29637 State: PUBLISHED Published: 2023-05-01T00:00:00.000Z Last Updated: 2025-01-30T16:08:46.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Qbian61 forum-java, allows attackers to inject arbitrary web script or HTML via editing the article content in the "article editor" page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Qbian61/forum-java/issues/13
CVE ID: CVE-2023-29638 State: PUBLISHED Published: 2023-05-01T00:00:00.000Z Last Updated: 2025-01-30T16:06:31.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in WinterChenS my-site before commit 3f0423da6d5200c7a46e200da145c1f54ee18548, allows attackers to inject arbitrary web script or HTML via editing blog articles. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WinterChenS/my-site/issues/74
CVE ID: CVE-2023-29639 State: PUBLISHED Published: 2023-05-01T00:00:00.000Z Last Updated: 2025-01-30T18:48:40.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via editing an article in the "blog article" page due to the default configuration not utilizing MyBlogUtils.cleanString. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ZHENFENG13/My-Blog/issues/131
CVE ID: CVE-2023-29641 State: PUBLISHED Published: 2023-05-01T00:00:00.000Z Last Updated: 2025-01-30T18:48:08.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in pandao editor.md thru 1.5.0 allows attackers to inject arbitrary web script or HTML via crafted markdown text. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pandao/editor.md/issues/985
CVE ID: CVE-2023-29643 State: PUBLISHED Published: 2023-05-01T00:00:00.000Z Last Updated: 2025-01-30T18:46:40.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in PerfreeBlog 3.1.2 allows attackers to execute arbitrary code via the Post function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/perfree/PerfreeBlog/issues/14
CVE ID: CVE-2023-29656 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-19T19:10:31.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: An improper authorization vulnerability in Darktrace mobile app (Android) prior to version 6.0.15 allows disabled and low-privilege users to control "antigena" actions(block/unblock traffic) from the mobile application. This vulnerability could create a "shutdown", blocking all ingress or egress traffic in the entire infrastructure where darktrace agents are deployed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://darktrace.com - https://ramihub.github.io/
CVE ID: CVE-2023-29657 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T19:42:20.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: eXtplorer 2.1.15 is vulnerable to Insecure Permissions. File upload in file manager allows uploading zip file containing php pages with arbitrary code executions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://extplorer.net/ - http://blog.tristaomarinho.com/extplorer-2-1-15-arbitrary-file-upload/
CVE ID: CVE-2023-29659 State: PUBLISHED Published: 2023-05-05T00:00:00.000Z Last Updated: 2025-01-29T19:10:44.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Segmentation fault caused by a floating point exception exists in libheif 1.15.1 using crafted heif images via the heif::Fraction::round() function in box.cc, which causes a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libheif/issues/794 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LGKHDCS4HRZE3UGXYYDYPTIPNIBRLQ5L/ - https://lists.fedoraproject.org/archives/list/package-ann
.fedoraproject.org/message/LGKHDCS4HRZE3UGXYYDYPTIPNIBRLQ5L/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAE6NQBA3Q7GS6VTNDZRZZZVPPEFUEZ/
CVE ID: CVE-2023-29665 State: PUBLISHED Published: 2023-04-17T00:00:00.000Z Last Updated: 2025-02-06T16:43:45.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR823G_V1.0.2B05 was discovered to contain a stack overflow via the NewPassword parameters in SetPasswdSettings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/726232111/VulIoT/tree/main/D-Link/DIR823G%20V1.0.2B05/HNAP1/boSetPasswdSettings
CVE ID: CVE-2023-29680 State: PUBLISHED Published: 2023-05-01T00:00:00.000Z Last Updated: 2025-01-30T18:45:53.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cleartext Transmission in set-cookie:ecos_pw: Tenda N301 v6.0, Firmware v12.02.01.61_multi allows an authenticated attacker on the LAN or WLAN to intercept communications with the router and obtain the password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.youtube.com/watch?v=m7ZHfFcSKpU&ab_channel=0ta - https://medium.com/%400ta/tenda-n301-v6-cve-2023-29680-cve-2023-29681-a40f7ae6dc62
CVE ID: CVE-2023-29681 State: PUBLISHED Published: 2023-05-01T00:00:00.000Z Last Updated: 2025-01-30T18:44:58.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cleartext Transmission in cookie:ecos_pw: in Tenda N301 v6.0, firmware v12.03.01.06_pt allows an authenticated attacker on the LAN or WLAN to intercept communications with the router and obtain the password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.youtube.com/watch?v=Xy9_hmpvvA4&ab_channel=0ta - https://medium.com/%400ta/tenda-n301-v6-cve-2023-29680-cve-2023-29681-a40f7ae6dc62
CVE ID: CVE-2023-29689 State: PUBLISHED Published: 2023-08-04T00:00:00 Last Updated: 2024-10-17T15:41:17.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: PyroCMS 3.9 contains a remote code execution (RCE) vulnerability that can be exploited through a server-side template injection (SSTI) flaw. This vulnerability allows a malicious attacker to send customized commands to the server and execute arbitrary code on the affected system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cupc4k3.lol/ssti-leads-to-rce-on-pyrocms-7515be27c811 - http://packetstormsecurity.com/files/174088/Pyro-CMS-3.9-Server-Side-Template-Injection.html
CVE ID: CVE-2023-29693 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T18:49:52.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function set_tftp_upgrad. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Stevenbaga/fengsha/blob/main/H3C/GR-1200W/SetTftpUpgrad.md
CVE ID: CVE-2023-29696 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T18:49:16.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function version_set. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Stevenbaga/fengsha/blob/main/H3C/GR-1200W/aVersionSet.md
CVE ID: CVE-2023-29707 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-06T19:55:53.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in GBCOM LAC WEB Control Center version lac-1.3.x, allows attackers to create an arbitrary device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://holistic-height-e6d.notion.site/GBCOM-LAC-WEB-Control-Center-cross-site-scripting-vulnerability-and-device-permanent-account-creatio-a4f128d7fb8b40e5b6130c6f97e71eaf - https://github.com/shellpei/GBCOM-XSS/blob/main/CVE-2023-29707
CVE ID: CVE-2023-29708 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-06T19:54:57.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in /cgi-bin/adm.cgi in WavLink WavRouter version RPT70HA1.x, allows attackers to force a factory reset via crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://holistic-height-e6d.notion.site/WAVLINK-Wi-Fi-APP-Arbitrary-factory-reset-vulnerability-b2d747693a7442aaa8b045e57bbd8297 - https://github.com/shellpei/WAVLINK-Reset/blob/main/CVE-2023-29708
CVE ID: CVE-2023-29709 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-06T16:44:21.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in /cgi-bin/login_rj.cgi in Wildix WSG24POE version 103SP7D190822, allows attackers to bypass authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://holistic-height-e6d.notion.site/Wildix-WSG24POE-Logical-vulnerability-7780c24cc25b40dd9d2830f7b21f04a3 - https://github.com/shellpei/Wildix-Logical/blob/main/CVE-2023-29709
CVE ID: CVE-2023-29711 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-12T18:54:10.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: An incorrect access control issue was discovered in Interlink PSG-5124 version 1.0.4, allows attackers to execute arbitrary code via crafted GET request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://holistic-height-e6d.notion.site/LINK-PSG-5124-Switch-remote-command-vulnerability-da4fd8fb450d42879b07ef3a953a2366 - https://github.com/shellpei/LINK-Unauthorized/blob/main/CVE-2023-29711
CVE ID: CVE-2023-29712 State: PUBLISHED Published: 2023-06-09T00:00:00 Last Updated: 2025-01-06T18:03:31.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to execute arbitrary code via a crafted payload to the X-Rewrite-URL parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vadesecure.com/en/ - https://info.vadesecure.com/hubfs/Ressource%20Marketing%20Website/Datasheet/EN/Vade_Secure_DS_Gateway_EN.pdf - https://labs.yarix.com/2023/05/vade-secure-gateway-multiple-xss-cve-2023-29712-cve-2023-29713-cve-2023-29714/
CVE ID: CVE-2023-29713 State: PUBLISHED Published: 2023-06-09T00:00:00 Last Updated: 2025-01-06T18:02:56.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to execute arbitrary code via a crafted payload to the GET request after the /css/ directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vadesecure.com/en/ - https://info.vadesecure.com/hubfs/Ressource%20Marketing%20Website/Datasheet/EN/Vade_Secure_DS_Gateway_EN.pdf - https://labs.yarix.com/advisories/cve-2023-29713-reflected-xss-in-vade-secure-gateway/
CVE ID: CVE-2023-29714 State: PUBLISHED Published: 2023-06-09T00:00:00 Last Updated: 2025-01-06T18:02:13.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to execute arbitrary code via the username, password, and language cookies parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vadesecure.com/en/ - https://info.vadesecure.com/hubfs/Ressource%20Marketing%20Website/Datasheet/EN/Vade_Secure_DS_Gateway_EN.pdf - https://labs.yarix.com/advisories/cve-2023-29714-dom-based-xss-in-vade-secure-gateway/
CVE ID: CVE-2023-29720 State: PUBLISHED Published: 2023-05-18T00:00:00 Last Updated: 2025-01-21T19:48:05.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: SofaWiki <=3.8.9 is vulnerable to Cross Site Scripting (XSS) via index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bellenuit/sofawiki/issues/26 - https://github.com/xul18/Showcase/issues/1
CVE ID: CVE-2023-29721 State: PUBLISHED Published: 2023-05-24T00:00:00.000Z Last Updated: 2025-01-31T14:51:25.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: SofaWiki <= 3.8.9 has a file upload vulnerability that leads to command execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bellenuit/sofawiki/issues/27 - https://github.com/xul18/Showcase/issues/2
CVE ID: CVE-2023-29722 State: PUBLISHED Published: 2023-06-01T00:00:00 Last Updated: 2025-01-09T17:51:33.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized apps to actively request permission to modify data in the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the app is opened. An attacker could tamper with this data to cause an escalation of privilege attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29722/CVE%20deta
iner: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29722/CVE%20detail.md
CVE ID: CVE-2023-29723 State: PUBLISHED Published: 2023-06-01T00:00:00 Last Updated: 2025-01-09T17:50:13.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized applications to actively request permission to insert data into the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the application is opened. By injecting data, the attacker can force the application to load malicious image URLs and display them in the UI. As the amount of data increases, it will eventually cause the application to trigger an OOM error and crash, resulti
UI. As the amount of data increases, it will eventually cause the application to trigger an OOM error and crash, resulting in a persistent denial of service attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29723/CVE%20detail.md
CVE ID: CVE-2023-29724 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-08T20:47:31.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BT21 x BTS Wallpaper app 12 for Android allows unauthorized apps to actively request permission to modify data in the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the app is opened. An attacker could tamper with this data to cause an escalation of privilege attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://bungaakpstudio007.com - https://apkpure.com/cn/bt21-x-bts-wallpaper-hd-4k/com.bunga
P Vulnrichment: References: - http://bungaakpstudio007.com - https://apkpure.com/cn/bt21-x-bts-wallpaper-hd-4k/com.bungaakp007.bt21wallpaperoffline130920/download/12-APK - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29724/CVE%20detail.md
CVE ID: CVE-2023-29725 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-08T20:44:44.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BT21 x BTS Wallpaper app 12 for Android allows unauthorized applications to actively request permission to insert data into the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the application is opened. By injecting data, the attacker can force the application to load malicious image URLs and display them in the UI. As the amount of data increases, it will eventually cause the application to trigger an OOM error and crash, resulting in a persist
nt of data increases, it will eventually cause the application to trigger an OOM error and crash, resulting in a persistent denial of service attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://bungaakpstudio007.com - https://apkpure.com/cn/bt21-x-bts-wallpaper-hd-4k/com.bungaakp007.bt21wallpaperoffline130920/download/12-APK - https://play.google.com/store/apps/details?id=com.cuiet.blockCalls - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29725/CVE%20detail.md
CVE ID: CVE-2023-29726 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-13T20:23:04.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Call Blocker application 6.6.3 for Android incorrectly opens a key component that an attacker can use to inject large amounts of dirty data into the application's database. When the application starts, it loads the data from the database into memory. Once the attacker injects too much data, the application triggers an OOM error and crashes, resulting in a persistent denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://play.google.com/store/apps/details?id=com
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://play.google.com/store/apps/details?id=com.cuiet.blockCalls - https://www.call-blocker.info/ - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29726/CVE%20detail.md
CVE ID: CVE-2023-29727 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-13T17:36:43.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Call Blocker application 6.6.3 for Android allows unauthorized applications to use exposed components to delete data stored in its database that is related to user privacy settings and affects the implementation of the normal functionality of the application. An attacker can use this to cause an escalation of privilege attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://play.google.com/store/apps/details?id=com.cuiet.blockCalls - https://www.call-blocker.info/ - https:
ferences: - https://play.google.com/store/apps/details?id=com.cuiet.blockCalls - https://www.call-blocker.info/ - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29727/CVE%20detail.md
CVE ID: CVE-2023-29728 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-13T21:16:21.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Call Blocker application 6.6.3 for Android allows attackers to tamper with feature-related data, resulting in a severe elevation of privilege attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://play.google.com/store/apps/details?id=com.cuiet.blockCalls - https://www.call-blocker.info/ - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29728/CVE%20detail.md
CVE ID: CVE-2023-29731 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-13T21:05:11.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: SoLive 1.6.14 thru 1.6.20 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the application is opened. When an attacker injects too much data, the application will trigger an OOM error and crash at startup, resulting in a persistent denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht