Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-15362 State: PUBLISHED Published: 2019-11-14T16:25:07 Last Updated: 2024-08-05T00:42:03.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Lava Iris 88 Go Android device with a build fingerprint of LAVA/iris88_go/iris88_go:8.1.0/O11019/1538188945:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15363 State: PUBLISHED Published: 2019-11-14T16:25:09 Last Updated: 2024-08-05T00:42:03.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Leagoo Power 5 Android device with a build fingerprint of LEAGOO/Power_5/Power_5:8.1.0/O11019/1532686195:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15364 State: PUBLISHED Published: 2019-11-14T16:25:10 Last Updated: 2024-08-05T00:42:03.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Dexp BL250 Android device with a build fingerprint of DEXP/BL250/BL250:8.1.0/O11019/1530858027:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15365 State: PUBLISHED Published: 2019-11-14T16:25:12 Last Updated: 2024-08-05T00:42:03.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Lava Z92 Android device with a build fingerprint of LAVA/Z92/Z92:8.1.0/O11019/1535088037:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15366 State: PUBLISHED Published: 2019-11-14T16:25:13 Last Updated: 2024-08-05T00:42:03.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Infinix Note 5 Android device with a build fingerprint of Infinix/H633IJL/Infinix-X604_sprout:8.1.0/O11019/IJL-180531V181:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15367 State: PUBLISHED Published: 2019-11-14T16:25:15 Last Updated: 2024-08-05T00:42:03.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Haier P10 Android device with a build fingerprint of Haier/P10/P10:8.1.0/O11019/1532662449:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15368 State: PUBLISHED Published: 2019-11-14T16:25:16 Last Updated: 2024-08-05T00:42:03.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15369 State: PUBLISHED Published: 2019-11-14T16:25:18 Last Updated: 2024-08-05T00:42:03.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Lava Z61 Turbo Android device with a build fingerprint of LAVA/Z61_Turbo/Z61_Turbo:8.1.0/O11019/1536917928:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15370 State: PUBLISHED Published: 2019-11-14T16:25:19 Last Updated: 2024-08-05T00:42:03.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Haier G8 Android device with a build fingerprint of Haier/HM-G559-FL/G8:8.1.0/O11019/1526527761:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15371 State: PUBLISHED Published: 2019-11-14T16:25:21 Last Updated: 2024-08-05T00:42:03.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Symphony G100 Android device with a build fingerprint of Symphony/G100/G100:8.1.0/O11019/1530618779:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15372 State: PUBLISHED Published: 2019-11-14T16:25:22 Last Updated: 2024-08-05T00:42:03.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Hisense F17 Android device with a build fingerprint of Hisense/F17_4G/HS6739MT:8.1.0/O11019/Hisense_F17_4G_00_S01:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15373 State: PUBLISHED Published: 2019-11-14T16:25:23 Last Updated: 2024-08-05T00:42:03.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Symphony i95 Lite Android device with a build fingerprint of LAVA/iris88_lite/iris88_lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15374 State: PUBLISHED Published: 2019-11-14T16:25:25 Last Updated: 2024-08-05T00:42:03.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Lava Iris 88 Lite Android device with a build fingerprint of LAVA/iris88_lite/iris88_lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15375 State: PUBLISHED Published: 2019-11-14T16:25:27 Last Updated: 2024-08-05T00:42:03.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Haier G8 Android device with a build fingerprint of Haier/HM-G559-FL/G8:8.1.0/O11019/1522294799:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15376 State: PUBLISHED Published: 2019-11-14T16:25:28 Last Updated: 2024-08-05T00:42:03.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Panasonic Eluga Ray 530 Android device with a build fingerprint of Panasonic/ELUGA_Ray_530/ELUGA_Ray_530:8.1.0/O11019/1531828974:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/ - https://mobile.p
alyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/ - https://mobile.panasonic.com/in/advisory
CVE ID: CVE-2019-15377 State: PUBLISHED Published: 2019-11-14T16:25:30 Last Updated: 2024-08-05T00:42:03.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cherry Flare S7 Android device with a build fingerprint of Cherry_Mobile/Flare_S7_Deluxe/Flare_S7_Deluxe:8.1.0/O11019/1533920920:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15378 State: PUBLISHED Published: 2019-11-14T16:25:31 Last Updated: 2024-08-05T00:42:03.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Panasonic Eluga Ray 600 Android device with a build fingerprint of Panasonic/ELUGA_Ray_600/ELUGA_Ray_600:8.1.0/O11019/1532692680:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/ - https://mobile.p
CVE ID: CVE-2019-15379 State: PUBLISHED Published: 2019-11-14T16:25:32 Last Updated: 2024-08-05T00:42:03.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Walton Primo G3 Android device with a build fingerprint of WALTON/Primo_GM3/Primo_GM3:8.1.0/O11019/1522737198:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15380 State: PUBLISHED Published: 2019-11-14T16:25:34 Last Updated: 2024-08-05T00:42:04.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Fly Photo Pro Android device with a build fingerprint of Fly/PhotoPro/Photo_Pro:8.1.0/O11019/1528117003:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15381 State: PUBLISHED Published: 2019-11-14T16:25:35 Last Updated: 2024-08-05T00:42:03.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BQ 5515L Android device with a build fingerprint of BQru/BQru-5515L/BQru-5515L:8.1.0/O11019/20180409.195525:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15382 State: PUBLISHED Published: 2019-11-14T16:25:37 Last Updated: 2024-08-05T00:42:03.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cubot Nova Android device with a build fingerprint of CUBOT/CUBOT_NOVA/CUBOT_NOVA:8.1.0/O11019/1527060122:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15383 State: PUBLISHED Published: 2019-11-14T16:25:38 Last Updated: 2024-08-05T00:42:03.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Allview X5 Android device with a build fingerprint of ALLVIEW/X5_Soul_Mini/X5_Soul_Mini:8.1.0/O11019/1522468763:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15384 State: PUBLISHED Published: 2019-11-14T16:25:40 Last Updated: 2024-08-05T00:42:03.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Elephone A4 Android device with a build fingerprint of Elephone/A4/A4:8.1.0/O11019/20180530.143559:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15385 State: PUBLISHED Published: 2019-11-14T16:25:41 Last Updated: 2024-08-05T00:42:04.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Infinix Note 5 Android device with a build fingerprint of Infinix/H633B/Infinix-X604_sprout:8.1.0/O11019/L-IN-180206V64:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15386 State: PUBLISHED Published: 2019-11-14T16:25:43 Last Updated: 2024-08-05T00:42:03.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Lava Z60s Android device with a build fingerprint of LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15387 State: PUBLISHED Published: 2019-11-14T16:25:44 Last Updated: 2024-08-05T00:42:03.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Archos Core 101 Android device with a build fingerprint of archos/MTKAC101CR3G_ARCHOS/ac101cr3g:7.0/NRD90M/20180611.034442:user/release-keys contains a pre-installed app with a package name of com.roco.autogen app (versionCode=1, versionName=1) that allows any app co-located on the device to programmatically disable and enable Wi-Fi without the corresponding access permission through an exported interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15388 State: PUBLISHED Published: 2019-11-14T16:25:46 Last Updated: 2024-08-05T00:42:03.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.1.13). This app contains an exported service named com.lovelyfont.manager.FontCoverService that allows any app co-located on the device to supply arbitrary commands to be executed as the system user. This app cannot be disabled by the user and the attack can be performed by a zero
nds to be executed as the system user. This app cannot be disabled by the user and the attack can be performed by a zero-permission app. In addition to the local attack surface, its accompanying app with a package name of com.ekesoo.lovelyhifonts makes network requests using HTTP and an attacker can perform a Man-in-the-Middle (MITM) attack on the connection to inject a command in a network response that will be executed as the system user by the com.lovelyfont.defcontainer app. Executing commands as the system user can allow a third-party app to video record the user's screen, factory reset the device, obtain the user's notifications, read the logcat logs, inject events in the Graphical Use
een, factory reset the device, obtain the user's notifications, read the logcat logs, inject events in the Graphical User Interface (GUI), and obtains the user's text messages, and more. Executing commands as the system user can allow a third-party app to factory reset the device, obtain the user's notifications, read the logcat logs, inject events in the GUI, change the default Input Method Editor (IME) (e.g., keyboard) with one contained within the attacking app that contains keylogging functionality, and obtains the user's text messages, and more. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15389 State: PUBLISHED Published: 2019-11-14T16:25:47 Last Updated: 2024-08-05T00:42:03.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Haier A6 Android device with a build fingerprint of Haier/A6/A6:8.1.0/O11019/1534219877:userdebug/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.1.13). This app contains an exported service named com.lovelyfont.manager.FontCoverService that allows any app co-located on the device to supply arbitrary commands to be executed as the system user. This app cannot be disabled by the user and the attack can be performed by a zero-permission app.
ed as the system user. This app cannot be disabled by the user and the attack can be performed by a zero-permission app. In addition to the local attack surface, its accompanying app with a package name of com.ekesoo.lovelyhifonts makes network requests using HTTP and an attacker can perform a Man-in-the-Middle (MITM) attack on the connection to inject a command in a network response that will be executed as the system user by the com.lovelyfont.defcontainer app. Executing commands as the system user can allow a third-party app to video record the user's screen, factory reset the device, obtain the user's notifications, read the logcat logs, inject events in the Graphical User Interface (GUI
et the device, obtain the user's notifications, read the logcat logs, inject events in the Graphical User Interface (GUI), and obtains the user's text messages, and more. Executing commands as the system user can allow a third-party app to factory reset the device, obtain the user's notifications, read the logcat logs, inject events in the GUI, change the default Input Method Editor (IME) (e.g., keyboard) with one contained within the attacking app that contains keylogging functionality, and obtains the user's text messages, and more. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15390 State: PUBLISHED Published: 2019-11-14T16:25:49 Last Updated: 2024-08-05T00:42:04.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Haier G8 Android device with a build fingerprint of Haier/HM-G559-FL/G8:8.1.0/O11019/1522294799:user/release-keys contains a pre-installed app with a package name of com.qiku.service.container app (versionCode=5, versionName=1.03.00_VER_32525983298984) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15391 State: PUBLISHED Published: 2019-11-14T16:25:50 Last Updated: 2024-08-05T00:42:04.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WW_Phone/ASUS_X00LD_1:8.1.0/OPM1.171019.011/15.0400.1809.405-0:user/release-keys contains a pre-installed app with a package name of com.log.logservice app (versionCode=1, versionName=1) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15392 State: PUBLISHED Published: 2019-11-14T16:25:52 Last Updated: 2024-08-05T00:42:04.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Asus ZenFone 4 Selfie Android device with a build fingerprint of Android/sdm660_64/sdm660_64:8.1.0/OPM1/14.2016.1802.247-20180419:user/release-keys contains a pre-installed app with a package name of com.log.logservice app (versionCode=1, versionName=1) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/
CVE ID: CVE-2019-15393 State: PUBLISHED Published: 2019-11-14T16:25:53 Last Updated: 2024-08-05T00:42:03.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Asus ZenFone Live Android device with a build fingerprint of asus/WW_Phone/ASUS_X00LD_3:7.1.1/NMF26F/14.0400.1806.203-20180720:user/release-keys contains a pre-installed app with a package name of com.asus.atd.smmitest app (versionCode=1, versionName=1) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/android-firmware-2019/