Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-21380 State: PUBLISHED Published: 2023-10-30T17:01:36.112Z Last Updated: 2024-08-02T09:36:33.808Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/docs/security/bulletin/android-14
CVE ID: CVE-2023-21381 State: PUBLISHED Published: 2023-10-30T17:01:36.310Z Last Updated: 2024-09-06T18:55:22.999Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In Media Resource Manager, there is a possible local arbitrary code execution due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/android-14
CVE ID: CVE-2023-21382 State: PUBLISHED Published: 2023-10-30T17:01:36.502Z Last Updated: 2024-09-06T18:52:23.589Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In Content Resolver, there is a possible method to access metadata about existing content providers on the device due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/android-14
CVE ID: CVE-2023-21383 State: PUBLISHED Published: 2023-10-30T17:01:36.693Z Last Updated: 2024-09-06T18:51:08.045Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In Settings, there is a possible way for the user to unintentionally send extra data due to an unclear prompt. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/android-14
CVE ID: CVE-2023-21384 State: PUBLISHED Published: 2023-10-30T17:01:36.889Z Last Updated: 2024-09-06T20:11:46.030Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In Package Manager, there is a possible possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/android-14
CVE ID: CVE-2023-21385 State: PUBLISHED Published: 2023-10-30T17:01:37.089Z Last Updated: 2024-09-06T20:11:17.368Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In Whitechapel, there is a possible out of bounds read due to memory corruption. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/android-14
CVE ID: CVE-2023-21387 State: PUBLISHED Published: 2023-10-30T17:01:37.310Z Last Updated: 2024-09-06T18:49:49.381Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In User Backup Manager, there is a possible way to leak a token to bypass user confirmation for backup due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/android-14
CVE ID: CVE-2023-21388 State: PUBLISHED Published: 2023-10-30T17:01:37.495Z Last Updated: 2024-09-06T18:48:34.768Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In Settings, there is a possible restriction bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/android-14
CVE ID: CVE-2023-21389 State: PUBLISHED Published: 2023-10-30T17:01:37.682Z Last Updated: 2024-09-06T18:45:51.800Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In Settings, there is a possible bypass of profile owner restrictions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/android-14
CVE ID: CVE-2023-21390 State: PUBLISHED Published: 2023-10-30T17:01:37.870Z Last Updated: 2024-09-05T20:07:57.605Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In Sim, there is a possible way to evade mobile preference restrictions due to a permission bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/android-14
CVE ID: CVE-2023-21391 State: PUBLISHED Published: 2023-10-30T17:01:38.064Z Last Updated: 2024-09-06T18:40:26.370Z Vendors: Google Products: Android Problem Types: Denial of service Description: In Messaging, there is a possible way to disable the messaging application due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/android-14
CVE ID: CVE-2023-21392 State: PUBLISHED Published: 2023-10-30T17:01:38.267Z Last Updated: 2024-08-02T09:36:34.148Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In Bluetooth, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege when connecting to a Bluetooth device with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/docs/security/bulletin/android-14
CVE ID: CVE-2023-21393 State: PUBLISHED Published: 2023-10-30T17:01:38.471Z Last Updated: 2024-09-06T18:36:39.370Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In Settings, there is a possible way for the user to change SIM due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/android-14
CVE ID: CVE-2023-21394 State: PUBLISHED Published: 2023-10-30T17:01:38.666Z Last Updated: 2024-08-02T09:36:33.740Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In registerPhoneAccount of TelecomServiceImpl.java, there is a possible way to reveal images from another user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/services/Telecomm/+/68dca62035c49e14ad26a54f614199cb29a3393f - https://source.android.com/sec
urce.com/platform/packages/services/Telecomm/+/68dca62035c49e14ad26a54f614199cb29a3393f - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-21395 State: PUBLISHED Published: 2023-10-30T17:01:38.879Z Last Updated: 2024-08-02T09:36:34.216Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/docs/security/bulletin/android-14
CVE ID: CVE-2023-21396 State: PUBLISHED Published: 2023-10-30T17:01:39.070Z Last Updated: 2024-09-06T18:34:54.782Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In Activity Manager, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/android-14
CVE ID: CVE-2023-21397 State: PUBLISHED Published: 2023-10-30T17:01:39.250Z Last Updated: 2024-09-06T18:33:01.274Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In Setup Wizard, there is a possible way to save a WiFi network due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/android-14
CVE ID: CVE-2023-21398 State: PUBLISHED Published: 2023-10-30T17:01:39.442Z Last Updated: 2024-09-06T18:30:52.147Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In sdksandbox, there is a possible strandhogg style overlay attack due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/android-14
CVE ID: CVE-2023-21399 State: PUBLISHED Published: 2023-07-12T23:53:16.607Z Last Updated: 2024-11-01T19:57:43.178Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: there is a possible way to bypass cryptographic assurances due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-07-01
CVE ID: CVE-2023-21400 State: PUBLISHED Published: 2023-07-12T23:53:37.414Z Last Updated: 2025-02-13T16:40:14.210Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple functions of io_uring.c, there is a possible kernel memory corruption due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2023-07-01 - http://www.openwall.com/lists/oss-security/2023/07/14/2 - http://www.openwall.com/lists/oss-security/2023/07/19
-07-01 - http://www.openwall.com/lists/oss-security/2023/07/14/2 - http://www.openwall.com/lists/oss-security/2023/07/19/2 - http://www.openwall.com/lists/oss-security/2023/07/19/7 - http://www.openwall.com/lists/oss-security/2023/07/25/7 - https://www.debian.org/security/2023/dsa-5480 - http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html - https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html - https://security.netapp.com/advisory/ntap-20240119-0012/
CVE ID: CVE-2023-21401 State: PUBLISHED Published: 2023-12-04T22:40:49.129Z Last Updated: 2024-12-02T17:34:38.257Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In DevmemIntChangeSparse of devicemem_server.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-21402 State: PUBLISHED Published: 2023-12-04T22:40:49.339Z Last Updated: 2024-08-02T09:36:34.325Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In MMU_UnmapPages of mmu_common.c, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-21403 State: PUBLISHED Published: 2023-12-04T22:40:49.543Z Last Updated: 2024-08-02T09:36:34.255Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In RGXDestroyZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-21404 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T16:13:31.188Z Vendors: Axis Communications AB Products: AXIS OS Problem Types: CWE-321 Description: AXIS OS 11.0.X - 11.3.x use a static RSA key in legacy LUA-components to protect Axis-specific source code. The static RSA key is not used in any other secure communication nor can it be used to compromise the device or any customer data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/07/0a/20/cve-2023-21404-en-US-398426.pdf
CVE ID: CVE-2023-21405 State: PUBLISHED Published: 2023-07-25T07:34:36.652Z Last Updated: 2024-11-08T08:37:04.140Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Axis Communications AB Products: AXIS A1001 Network Door Controller, AXIS A1210-B Network Door Controller, AXIS A1601 Network Door Controller, AXIS A1610 (-B) Network Door Controller, AXIS A8207-VE Network Video Door Station, AXIS A8207-VE Mk II Network Video Door Station Problem Types: CWE-1286 Description: Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP, highlighting that the OSDP message parser crashes the pacsio
rs and Axis Network Intercoms when communicating over OSDP, highlighting that the OSDP message parser crashes the pacsiod process, causing a temporary unavailability of the door-controlling functionalities meaning that doors cannot be opened or closed. No sensitive or customer data can be extracted as the Axis device is not further compromised. Please refer to the Axis security advisory for more information, mitigation and affected products and software versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/7f/3a/ed/cve-2023-21405-en-US-407244.pdf
CVE ID: CVE-2023-21406 State: PUBLISHED Published: 2023-07-25T07:38:13.757Z Last Updated: 2024-11-08T08:38:11.809Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H) Vendors: Axis Communications AB Products: AXIS A1001 Network Door Controller Problem Types: CWE-122 Description: Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod process which is handling the OSDP communication allowing to write outside of the allocated buffer. By appending invalid data to an OSDP message it was possible to write data beyond the heap allocated buffer. The data written outside the buff
ata to an OSDP message it was possible to write data beyond the heap allocated buffer. The data written outside the buffer could be used to execute arbitrary code. lease refer to the Axis security advisory for more information, mitigation and affected products and software versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/1b/21/5f/cve-2023-21406-en-US-407245.pdf
CVE ID: CVE-2023-21407 State: PUBLISHED Published: 2023-08-03T06:40:44.618Z Last Updated: 2024-10-17T15:44:15.221Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Axis Communications AB Products: AXIS License Plate Verifier Description: A broken access control was found allowing for privileged escalation of the operator account to gain administrator privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/0b/1c/96/cve-2023-2140712-en-US-409778.pdf
CVE ID: CVE-2023-21408 State: PUBLISHED Published: 2023-08-03T06:45:08.231Z Last Updated: 2024-10-17T15:40:24.846Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Axis Communications AB Products: AXIS License Plate Verifier Description: Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials that are used in the integration interface towards 3rd party systems. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/0b/1c/96/cve-2023-2140712-en-US-409778.pdf
CVE ID: CVE-2023-21409 State: PUBLISHED Published: 2023-08-03T06:48:52.975Z Last Updated: 2024-10-17T15:39:19.382Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Axis Communications AB Products: AXIS License Plate Verifier Description: Due to insufficient file permissions, unprivileged users could gain access to unencrypted administrator credentials allowing the configuration of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/0b/1c/96/cve-2023-2140712-en-US-409778.pdf
CVE ID: CVE-2023-21410 State: PUBLISHED Published: 2023-08-03T06:51:51.800Z Last Updated: 2024-11-08T08:28:59.293Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Axis Communications AB Products: AXIS License Plate Verifier Problem Types: CWE-78 Description: User provided input is not sanitized on the AXIS License Plate Verifier specific “api.cgi” allowing for arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/0b/1c/96/cve-2023-2140712-en-US-409778.pdf
CVE ID: CVE-2023-21411 State: PUBLISHED Published: 2023-08-03T06:54:00.361Z Last Updated: 2024-11-08T08:29:24.001Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Axis Communications AB Products: AXIS License Plate Verifier Problem Types: CWE-78 Description: User provided input is not sanitized in the “Settings > Access Control” configuration interface allowing for arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/0b/1c/96/cve-2023-2140712-en-US-409778.pdf
CVE ID: CVE-2023-21412 State: PUBLISHED Published: 2023-08-03T06:56:00.673Z Last Updated: 2024-11-08T08:30:14.825Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Axis Communications AB Products: AXIS License Plate Verifier Problem Types: CWE-89 Description: User provided input is not sanitized on the AXIS License Plate Verifier specific “search.cgi” allowing for SQL injections. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/0b/1c/96/cve-2023-2140712-en-US-409778.pdf
CVE ID: CVE-2023-21413 State: PUBLISHED Published: 2023-10-16T06:08:33.349Z Last Updated: 2025-06-16T16:51:55.426Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Axis Communications AB Products: AXIS OS Problem Types: CWE-78 Description: GoSecure on behalf of Genetec Inc. has found a flaw that allows for a remote code execution during the installation of ACAP applications on the Axis device. The application handling service in AXIS OS was vulnerable to command injection allowing an attacker to run arbitrary code. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solutio
d AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/ad/ff/83/cve-2023-21413pdf-en-US-412755.pdf
CVE ID: CVE-2023-21414 State: PUBLISHED Published: 2023-10-16T06:18:06.428Z Last Updated: 2024-11-08T08:32:47.057Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Axis Communications AB Products: AXIS OS, AXIS A8207-VE Mk II, AXIS Q3527-LVE Problem Types: CWE-121 Description: NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications. The protection for device tampering (commonly known as Secure Boot) contains a flaw which provides an opportunity for a sophisticated attack to bypass this protection. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more
Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/45/3c/a1/cve-2023-21414pdf-en-US-412758.pdf
CVE ID: CVE-2023-21415 State: PUBLISHED Published: 2023-10-16T06:24:13.381Z Last Updated: 2024-11-08T08:33:59.027Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Axis Communications AB Products: AXIS OS Problem Types: CWE-35 Description: Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del.cgi is vulnerable to path traversal attacks that allows for file deletion. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and so
atched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/b6/55/e2/cve-2023-21415pdf-en-US-416245.pdf