Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-53871 State: PUBLISHED Published: 2025-02-25T20:28:03.753Z Last Updated: 2025-02-25T21:20:32.937Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: CUDA Toolkit Problem Types: CWE-125 Description: NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability might lead to a partial denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5594
CVE ID: CVE-2024-53872 State: PUBLISHED Published: 2025-02-25T20:28:21.988Z Last Updated: 2025-02-25T21:20:27.313Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: CUDA Toolkit Problem Types: CWE-125 Description: NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5594
CVE ID: CVE-2024-53873 State: PUBLISHED Published: 2025-02-25T20:28:37.201Z Last Updated: 2025-02-25T21:20:18.170Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: CUDA Toolkit Problem Types: CWE-125 Description: NVIDIA CUDA toolkit for Windows contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5594
CVE ID: CVE-2024-53874 State: PUBLISHED Published: 2025-02-25T20:28:57.798Z Last Updated: 2025-02-25T20:53:09.999Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: CUDA Toolkit Problem Types: CWE-125 Description: NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5594
CVE ID: CVE-2024-53875 State: PUBLISHED Published: 2025-02-25T20:29:45.526Z Last Updated: 2025-02-25T21:06:13.880Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: CUDA Toolkit Problem Types: CWE-125 Description: NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5594
CVE ID: CVE-2024-53876 State: PUBLISHED Published: 2025-02-25T20:30:02.695Z Last Updated: 2025-02-25T21:06:34.794Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: CUDA Toolkit Problem Types: CWE-125 Description: NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability might lead to a partial denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5594
CVE ID: CVE-2024-53877 State: PUBLISHED Published: 2025-02-25T20:30:45.086Z Last Updated: 2025-02-25T21:07:33.882Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: CUDA Toolkit Problem Types: CWE-476 Description: NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could cause a NULL pointer exception by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability might lead to a partial denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5594
CVE ID: CVE-2024-53878 State: PUBLISHED Published: 2025-02-25T20:38:59.240Z Last Updated: 2025-02-25T20:56:08.076Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: CUDA Toolkit Problem Types: CWE-1284 Description: NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump binary, where a user could cause a crash by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5594
CVE ID: CVE-2024-53879 State: PUBLISHED Published: 2025-02-25T20:41:11.826Z Last Updated: 2025-02-26T15:48:16.867Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: CUDA Toolkit Problem Types: CWE-1284 Description: NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump binary, where a user could cause a crash by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5594
CVE ID: CVE-2024-53880 State: PUBLISHED Published: 2025-02-12T00:39:32.321Z Last Updated: 2025-02-12T16:09:50.801Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: Triton Inference Server Problem Types: CWE-190 Description: NVIDIA Triton Inference Server contains a vulnerability in the model loading API, where a user could cause an integer overflow or wraparound error by loading a model with an extra-large file size that overflows an internal variable. A successful exploit of this vulnerability might lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/
e. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5612
CVE ID: CVE-2024-53881 State: PUBLISHED Published: 2025-01-28T04:11:29.908Z Last Updated: 2025-01-28T15:12:54.967Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: NVIDIA vGPU software Problem Types: CWE-459 Description: NVIDIA vGPU software contains a vulnerability in the host driver, where it can allow a guest to cause an interrupt storm on the host, which may lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5614
CVE ID: CVE-2024-53899 State: PUBLISHED Published: 2024-11-24T00:00:00 Last Updated: 2024-11-24T18:25:36.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/pypa/virtualenv/issues/2768 - https://github.com/pypa/virtualenv/releases/tag/20.26.6 - https://github.com/pypa/virtualenv/pull/2771
CVE ID: CVE-2024-53900 State: PUBLISHED Published: 2024-12-02T00:00:00 Last Updated: 2025-01-06T17:43:08.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mongoose before 8.8.3 can improperly use $where in match, leading to search injection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.npmjs.com/package/mongoose?activeTab=versions - https://github.com/Automattic/mongoose/releases - https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md - https://github.com/Automattic/mongoose/commit/c9e86bff7eef477da75a29af62a06d41a835a156 - https://github.com/advisories/GHSA-m7xq-9374-9rvx
CVE ID: CVE-2024-53901 State: PUBLISHED Published: 2024-11-24T00:00:00 Last Updated: 2024-11-24T18:19:31.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Imager package before 1.025 for Perl has a heap-based buffer overflow leading to denial of service, or possibly unspecified other impact, when the trim() method is called on a crafted input image. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/tonycoz/imager/issues/534 - https://metacpan.org/release/TONYC/Imager-1.025/changes - https://github.com/briandfoy/cpan-security-advisory/issues/171 - https://github.com/briandfoy/cpan-security-advisory/issues/167
CVE ID: CVE-2024-53907 State: PUBLISHED Published: 2024-12-06T00:00:00 Last Updated: 2024-12-31T18:03:11.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The strip_tags() method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.djangoproject.com/en/dev/releases/security/ - https://groups.google.com/g/django-announce - https://www.openwall.com/lists/oss-security/2024/12/04
eleases/security/ - https://groups.google.com/g/django-announce - https://www.openwall.com/lists/oss-security/2024/12/04/3
CVE ID: CVE-2024-53908 State: PUBLISHED Published: 2024-12-06T00:00:00 Last Updated: 2024-12-06T16:22:02.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. (Applications that use the jsonfield.has_key lookup via __ are unaffected.) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.djangoproject.com/en/dev/releases/security/ - https://groups.google.com/g/django-announce - https://www.openwall.co
docs.djangoproject.com/en/dev/releases/security/ - https://groups.google.com/g/django-announce - https://www.openwall.com/lists/oss-security/2024/12/04/3
CVE ID: CVE-2024-53909 State: PUBLISHED Published: 2024-11-24T00:00:00 Last Updated: 2024-11-26T16:02:55.886Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24334. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.veritas.com/content/support/en_US/security/VTS24-014
CVE ID: CVE-2024-53910 State: PUBLISHED Published: 2024-11-24T00:00:00 Last Updated: 2024-11-26T16:02:39.787Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24336. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.veritas.com/content/support/en_US/security/VTS24-014
CVE ID: CVE-2024-53911 State: PUBLISHED Published: 2024-11-24T00:00:00 Last Updated: 2024-11-26T16:02:28.584Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24339. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.veritas.com/content/support/en_US/security/VTS24-014
CVE ID: CVE-2024-53912 State: PUBLISHED Published: 2024-11-24T00:00:00 Last Updated: 2024-11-26T16:02:19.265Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24341. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.veritas.com/content/support/en_US/security/VTS24-014
CVE ID: CVE-2024-53913 State: PUBLISHED Published: 2024-11-24T00:00:00 Last Updated: 2024-11-26T16:02:07.290Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24343. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.veritas.com/content/support/en_US/security/VTS24-014
CVE ID: CVE-2024-53914 State: PUBLISHED Published: 2024-11-24T00:00:00 Last Updated: 2024-11-26T16:01:57.856Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24344. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.veritas.com/content/support/en_US/security/VTS24-014
CVE ID: CVE-2024-53915 State: PUBLISHED Published: 2024-11-24T00:00:00 Last Updated: 2024-11-26T16:01:50.007Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24405. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.veritas.com/content/support/en_US/security/VTS24-014
CVE ID: CVE-2024-53916 State: PUBLISHED Published: 2024-11-24T00:00:00 Last Updated: 2025-01-06T17:49:17.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant is able to change (add and clear) tags on network objects that do not belong to the tenant, and this action is not subjected to the proper policy authorization check. This affects 23 before 23.2.1, 24 before 24.0.2, and 25 before 25.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Referenc
efore 24.0.2, and 25 before 25.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://review.opendev.org/c/openstack/neutron/+/935883 - https://review.opendev.org/q/project:openstack/neutron - https://github.com/openstack/neutron/blob/363ffa6e9e1ab5968f87d45bc2f1cb6394f48b9f/neutron/extensions/tagging.py#L138-L232 - https://security.openstack.org/ossa/OSSA-2024-005.html
CVE ID: CVE-2024-53919 State: PUBLISHED Published: 2024-12-10T00:00:00 Last Updated: 2024-12-10T15:43:52.695Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AC:L/AV:P/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An injection vulnerability in Barco ClickShare CX-30/20, C-5/10, and ClickShare Bar Pro and Core models, running firmware before 2.21.1, allows physically proximate attackers or local admins to the webUI to trigger OS-level command execution as root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cwe.mitre.org/data/definitions/78.html - https://www.barco.com/en/support/knowledge-base/15008-clickshare-cve-2024-53919
CVE ID: CVE-2024-53920 State: PUBLISHED Published: 2024-11-27T00:00:00.000Z Last Updated: 2025-11-03T20:48:26.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.savannah.gnu.org/cgit/emacs.git/tree/Chan
s: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.savannah.gnu.org/cgit/emacs.git/tree/ChangeLog.4 - https://git.savannah.gnu.org/cgit/emacs.git/tag/?h=emacs-30.0.92 - https://eshelyaron.com/posts/2024-11-27-emacs-aritrary-code-execution-and-how-to-avoid-it.html - https://yhetil.org/emacs/CAFXAjY5f4YfHAtZur1RAqH34UbYU56_t6t2Er0YEh1Sb7-W=hg@mail.gmail.com/ - https://news.ycombinator.com/item?id=42256409 - https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-30.1
CVE ID: CVE-2024-53921 State: PUBLISHED Published: 2024-12-03T00:00:00 Last Updated: 2024-12-03T19:21:00.884Z Severity: LOW (CVSS 2.8 CVSS:3.1/AC:L/AV:L/A:N/C:N/I:L/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the installer in Samsung Magician 8.1.0 on Windows. An attacker can create arbitrary folders in the system permission directory via a symbolic link during the installation process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-53923 State: PUBLISHED Published: 2025-01-23T00:00:00.000Z Last Updated: 2025-01-24T18:23:51.400Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Centreon Web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before 23.04.24. A user with high privileges is able to achieve SQL injection in the form to upload media. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/centreon/centreon/releases - https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-53923-centreon-web-critical-severity-4265
CVE ID: CVE-2024-53924 State: PUBLISHED Published: 2025-04-17T00:00:00.000Z Last Updated: 2025-04-22T14:33:08.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pycel through 1.0b30, when operating on an untrusted spreadsheet, allows code execution via a crafted formula in a cell, such as one beginning with the =IF(A1=200, eval("__import__('os').system( substring. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pypi.org/project/pycel/ - https://github.com/stephenrauch/pycel - https://github.com/dgorissen/pycel - https://gist.github.com/aelmosalamy/cb098e61939718d2bb248fd1cc94f287
CVE ID: CVE-2024-53930 State: PUBLISHED Published: 2024-11-25T00:00:00 Last Updated: 2024-11-26T15:12:59.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: WikiDocs before 1.0.65 allows stored XSS by authenticated users via data that comes after $$\\, which is mishandled by a KaTeX parser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Zavy86/WikiDocs/releases/tag/1.0.65 - https://github.com/Zavy86/WikiDocs/compare/1.0.64...1.0.65 - https://github.com/Zavy86/WikiDocs/commit/aa264bd046a254522da67600be73791bd4e5dafc - https://github.com/Zavy86/WikiDocs/issues/211 - https://github.com/Zavy86/WikiDocs/pull/213 - https://www.xbow.com
CVE ID: CVE-2024-53931 State: PUBLISHED Published: 2025-01-06T00:00:00.000Z Last Updated: 2025-01-23T17:35:00.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: The com.glitter.caller.screen (aka iCaller, Caller Theme & Dialer) application through 1.1 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.glitter.caller.screen.DialerActivity component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/actuator/com.glitter.caller.screen/blob/main/CVE-2024-53931
CVE ID: CVE-2024-53932 State: PUBLISHED Published: 2025-01-06T00:00:00.000Z Last Updated: 2025-01-23T17:33:20.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: The com.remi.colorphone.callscreen.calltheme.callerscreen (aka Color Phone: Call Screen Theme) application through 21.1.9 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.remi.colorphone.callscreen.calltheme.callerscreen.dialer.DialerActivity component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/actuator/com.remi.colorphone.callscreen.calltheme.callerscreen/blob/main/CVE-2024-53932
CVE ID: CVE-2024-53933 State: PUBLISHED Published: 2025-01-06T00:00:00 Last Updated: 2025-01-08T17:29:53.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: The com.callerscreen.colorphone.themes.callflash (aka Color Call Theme & Call Screen) application through 1.0.7 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.android.call.color.app.activities.DialerActivity component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/actuator/com.callerscreen.colorphone.themes.callflash - https://github.com/actuator/com.callerscreen.colorphone.themes.callflash/bl
m.callerscreen.colorphone.themes.callflash - https://github.com/actuator/com.callerscreen.colorphone.themes.callflash/blob/main/CVE-2024-53933
CVE ID: CVE-2024-53934 State: PUBLISHED Published: 2025-01-06T00:00:00 Last Updated: 2025-01-08T16:21:31.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: The com.windymob.callscreen.ringtone.callcolor.colorphone (aka Color Phone Call Screen Themes) application through 1.1.2 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.frovis.androidbase.call.DialerActivity component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/actuator/com.windymob.callscreen.ringtone.callcolor.colorphone - https://github.com/actuator/com.windymob.callscreen.ringtone.callco
.windymob.callscreen.ringtone.callcolor.colorphone - https://github.com/actuator/com.windymob.callscreen.ringtone.callcolor.colorphone/blob/main/CVE-2024-53934
CVE ID: CVE-2024-53935 State: PUBLISHED Published: 2025-01-06T00:00:00 Last Updated: 2025-01-07T21:37:44.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: The com.callos14.callscreen.colorphone (aka iCall OS17 - Color Phone Flash) application through 4.3 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.callos14.callscreen.colorphone.DialerActivity component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/actuator/com.callos14.callscreen.colorphone - https://github.com/actuator/com.callos14.callscreen.colorphone/blob/main/CVE-2024-53935