Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-27016 State: PUBLISHED Published: 2020-11-09T23:10:33 Last Updated: 2024-08-04T16:03:23.191Z Vendors: Trend Micro Products: Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) Problem Types: Cross-Site Request Forgery Description: Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a cross-site request forgery (CSRF) vulnerability which could allow an attacker to modify policy rules by tricking an authenticated administrator into accessing an attacker-controlled web page. An attacker must already have obtained product administrator/root privileges to exploit this vulnerability. Additional Analyst Notes: - CVE Program Contain
ned product administrator/root privileges to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000279833 - https://sec-consult.com/en/blog/advisories/vulnerabilities-in-trend-micro-interscan-messaging-security-virtual-appliance-imsva/
CVE ID: CVE-2020-27017 State: PUBLISHED Published: 2020-11-09T23:10:34 Last Updated: 2024-08-04T16:03:23.261Z Vendors: Trend Micro Products: Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) Problem Types: XXE Description: Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an XML External Entity Processing (XXE) vulnerability which could allow an authenticated administrator to read arbitrary local files. An attacker must already have obtained product administrator/root privileges to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000279833 - https://sec-c
Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000279833 - https://sec-consult.com/en/blog/advisories/vulnerabilities-in-trend-micro-interscan-messaging-security-virtual-appliance-imsva/
CVE ID: CVE-2020-27018 State: PUBLISHED Published: 2020-11-09T23:10:34 Last Updated: 2024-08-04T16:03:23.265Z Vendors: Trend Micro Products: Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) Problem Types: SSRF Description: Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a server side request forgery vulnerability which could allow an authenticated attacker to abuse the product's web server and grant access to web resources or parts of local files. An attacker must already have obtained authenticated privileges on the product to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success
product to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000279833 - https://sec-consult.com/en/blog/advisories/vulnerabilities-in-trend-micro-interscan-messaging-security-virtual-appliance-imsva/
CVE ID: CVE-2020-27019 State: PUBLISHED Published: 2020-11-09T23:10:35 Last Updated: 2024-08-04T16:03:23.230Z Vendors: Trend Micro Products: Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) Problem Types: Information Disclosure Description: Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an information disclosure vulnerability which could allow an attacker to access a specific database and key. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000279833 - https://sec-consult.com/en/blog/advisories/vulnerabilities-in-trend-micro-interscan-messaging-security-virtual-appliance-imsva/
CVE ID: CVE-2020-27020 State: PUBLISHED Published: 2021-05-14T11:00:04 Last Updated: 2024-08-04T16:03:23.260Z Vendors: n/a Products: Kaspersky Password Manager for Windows, Kaspersky Password Manager for Android, Kaspersky Password Manager for iOS Problem Types: Information Disclosure Description: Password generator feature in Kaspersky Password Manager was not completely cryptographically strong and potentially allowed an attacker to predict generated passwords in some cases. An attacker would need to know some additional information (for example, time of password generation). Additional Analyst Notes: - CVE Program Container: References: - https://support.kaspersky.com/general/vulnerabilit
on). Additional Analyst Notes: - CVE Program Container: References: - https://support.kaspersky.com/general/vulnerability.aspx?el=12430#270421
CVE ID: CVE-2020-27021 State: PUBLISHED Published: 2020-12-15T15:58:35 Last Updated: 2024-08-04T16:03:23.283Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In avrc_ctrl_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-168712245 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27023 State: PUBLISHED Published: 2020-12-15T15:58:46 Last Updated: 2024-08-04T16:03:23.227Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In setErrorPlaybackState of BluetoothMediaBrowserService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156009462 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27024 State: PUBLISHED Published: 2020-12-15T16:00:33 Last Updated: 2024-08-04T16:03:23.199Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure triggered by a malformed Bluetooth packet, with no additional execution privileges needed. User interaction is not needed for exploitation. Bounds Sanitizer mitigates this in the default configuration.Product: AndroidVersions: Android-11Android ID: A-162327732 Additional Analyst Notes: - CVE Program Container: References: - https://source
sions: Android-11Android ID: A-162327732 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27025 State: PUBLISHED Published: 2020-12-15T16:00:39 Last Updated: 2024-08-04T16:03:23.208Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In EapFailureNotifier.java and SimRequiredNotifier.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156008365 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27026 State: PUBLISHED Published: 2020-12-15T16:00:47 Last Updated: 2024-08-04T16:03:23.299Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: During boot, the device unlock interface behaves differently depending on if a fingerprint registered to the device is present. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-79776455 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27027 State: PUBLISHED Published: 2020-12-15T16:00:57 Last Updated: 2024-08-04T16:03:23.212Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In nfc_ncif_proc_get_routing of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-122358602 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27028 State: PUBLISHED Published: 2020-12-15T16:01:07 Last Updated: 2024-08-04T16:03:23.263Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In filter_incoming_event of hci_layer.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-141618611 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27029 State: PUBLISHED Published: 2020-12-15T16:01:28 Last Updated: 2024-08-04T16:03:23.263Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In TextView of TextView.java, there is a possible app hang due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-140218875 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27030 State: PUBLISHED Published: 2020-12-15T16:01:36 Last Updated: 2024-08-04T16:03:23.266Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of HandleApiCalls.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege that allows an app to set or dismiss the alarm with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150612638 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27031 State: PUBLISHED Published: 2020-12-15T16:01:43 Last Updated: 2024-08-04T16:03:23.205Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In nfc_data_event of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151313205 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27032 State: PUBLISHED Published: 2020-12-15T16:01:52 Last Updated: 2024-08-04T16:03:23.223Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getRadioAccessFamily of PhoneInterfaceManager.java, there is a possible read of privileged data due to a missing permission check. This could lead to local information disclosure of radio data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150857259 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27033 State: PUBLISHED Published: 2020-12-15T16:02:00 Last Updated: 2024-08-04T16:03:23.304Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In nfc_ncif_proc_get_routing of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153655153 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27034 State: PUBLISHED Published: 2020-12-15T16:02:08 Last Updated: 2024-08-04T16:03:23.265Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In createSimSelectNotification of SimSelectNotification.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153556754 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27035 State: PUBLISHED Published: 2020-12-15T16:02:15 Last Updated: 2024-08-04T16:03:23.266Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In priorLinearAllocation of C2AllocatorIon.cpp, there is a possible use-after-free due to improper locking. This could lead to local information disclosure in the media codec with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-152239213 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27036 State: PUBLISHED Published: 2020-12-15T16:03:21 Last Updated: 2024-08-04T16:03:23.230Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In phNxpNciHal_send_ext_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153731369 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27037 State: PUBLISHED Published: 2020-12-15T16:03:29 Last Updated: 2024-08-04T16:11:35.402Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153731335 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27038 State: PUBLISHED Published: 2020-12-15T16:03:48 Last Updated: 2024-08-04T16:11:35.337Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In process of C2SoftVorbisDec.cpp, there is a possible resource exhaustion due to a memory leak. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154302257 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27039 State: PUBLISHED Published: 2020-12-15T16:03:59 Last Updated: 2024-08-04T16:11:35.370Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In postNotification of ServiceRecord.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153878498 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27040 State: PUBLISHED Published: 2020-12-15T16:04:05 Last Updated: 2024-08-04T16:11:35.579Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153731880 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27041 State: PUBLISHED Published: 2020-12-15T16:05:10 Last Updated: 2024-08-04T16:11:35.314Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In showProvisioningNotification of ConnectivityService.java, there is an unsafe PendingIntent. This could lead to local information disclosure of notification data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154928507 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27043 State: PUBLISHED Published: 2020-12-15T16:05:18 Last Updated: 2024-08-04T16:11:35.575Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In nfc_enabled of nfc_main.cc, there is a possible out of bounds read due to an incorrect increment. This could lead to local information disclosure via firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155234594 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27044 State: PUBLISHED Published: 2020-12-15T16:05:25 Last Updated: 2024-08-04T16:11:35.414Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In restartWrite of Parcel.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157066561 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27045 State: PUBLISHED Published: 2020-12-15T16:05:32 Last Updated: 2024-08-04T16:11:35.492Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In CE_SendRawFrame of ce_main.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157649398 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27046 State: PUBLISHED Published: 2020-12-15T16:05:38 Last Updated: 2024-08-04T16:11:35.397Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In nfc_ncif_proc_ee_action of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157649306 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27047 State: PUBLISHED Published: 2020-12-15T16:05:45 Last Updated: 2024-08-04T16:11:35.339Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In ce_t4t_update_binary of ce_t4t.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157649298 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27048 State: PUBLISHED Published: 2020-12-15T16:05:54 Last Updated: 2024-08-04T16:11:35.371Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In RW_SendRawFrame of rw_main.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157650117 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27049 State: PUBLISHED Published: 2020-12-15T16:06:15 Last Updated: 2024-08-04T16:11:35.422Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In rw_t3t_send_raw_frame of rw_t3t.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157649467 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27050 State: PUBLISHED Published: 2020-12-15T16:06:21 Last Updated: 2024-08-04T16:11:35.471Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In rw_i93_send_cmd_write_multi_blocks of rw_i93.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157650365 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27051 State: PUBLISHED Published: 2020-12-15T16:06:28 Last Updated: 2024-08-04T16:11:35.786Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In NFA_RwI93WriteMultipleBlocks of nfa_rw_api.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157650338 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01
CVE ID: CVE-2020-27052 State: PUBLISHED Published: 2020-12-15T16:06:37 Last Updated: 2024-08-04T16:11:35.552Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In getLockTaskLaunchMode of ActivityRecord.java, there is a possible way for any app to start in Lock Task Mode due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-158833495 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2020-12-01