Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-27211 State: PUBLISHED Published: 2024-03-11T18:55:38.440Z Last Updated: 2024-08-05T15:06:25.092Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In AtiHandleAPOMsgType of ati_Main.c, there is a possible OOB write due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27212 State: PUBLISHED Published: 2024-03-11T18:55:38.594Z Last Updated: 2024-08-28T18:54:54.812Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In init_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27213 State: PUBLISHED Published: 2024-03-11T18:55:38.748Z Last Updated: 2024-08-02T00:27:59.907Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In BroadcastSystemMessage of servicemgr.cpp, there is a possible Remote Code Execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27215 State: REJECTED Published: N/A Last Updated: 2024-02-21T17:55:53.961640 Description: No description available.
CVE ID: CVE-2024-27217 State: PUBLISHED Published: 2024-05-07T06:26:51.227Z Last Updated: 2024-08-02T00:27:59.941Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-416 Description: in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-05.md
CVE ID: CVE-2024-27218 State: PUBLISHED Published: 2024-03-11T18:55:38.895Z Last Updated: 2025-03-25T15:45:43.831Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In update_freq_data of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27219 State: PUBLISHED Published: 2024-03-11T18:55:39.039Z Last Updated: 2025-03-28T18:35:20.207Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In tmu_set_pi of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27220 State: PUBLISHED Published: 2024-03-11T18:55:39.194Z Last Updated: 2024-08-26T16:04:47.874Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In lpm_req_handler of , there is a possible out of bounds memory access due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27221 State: PUBLISHED Published: 2024-03-11T18:55:39.349Z Last Updated: 2024-08-27T20:50:58.616Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In update_policy_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27222 State: PUBLISHED Published: 2024-03-11T18:55:39.493Z Last Updated: 2024-08-05T17:35:27.703Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In onSkipButtonClick of FaceEnrollFoldPage.java, there is a possible way to access the file the app cannot access due to Intent Redirect GRANT_URI_PERMISSIONS Attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27223 State: PUBLISHED Published: 2024-03-11T18:55:39.642Z Last Updated: 2024-12-06T18:06:06.893Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure after authenticating the cell connection with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27224 State: PUBLISHED Published: 2024-03-11T18:55:39.790Z Last Updated: 2025-04-16T15:43:56.105Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In strncpy of strncpy.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27225 State: PUBLISHED Published: 2024-03-11T18:55:39.936Z Last Updated: 2024-11-07T15:31:43.366Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In sendHciCommand of bluetooth_hci.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27226 State: PUBLISHED Published: 2024-03-11T18:55:40.086Z Last Updated: 2024-08-27T14:34:46.795Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In tmu_config_gov_params of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27227 State: PUBLISHED Published: 2024-03-11T18:55:40.237Z Last Updated: 2025-03-25T15:35:51.594Z Vendors: Google Products: Android Problem Types: Remote code execution Description: A malicious DNS response can trigger a number of OOB reads, writes, and other memory issues Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27228 State: PUBLISHED Published: 2024-03-11T18:55:40.384Z Last Updated: 2024-08-28T18:52:53.585Z Vendors: Google Products: Android Problem Types: Remote code execution Description: there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27229 State: PUBLISHED Published: 2024-03-11T18:55:40.532Z Last Updated: 2025-03-27T19:01:48.928Z Vendors: Google Products: Android Problem Types: Denial of service Description: In ss_SendCallBarringPwdRequiredIndMsg of ss_CallBarring.c, there is a possible null pointer deref due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27230 State: PUBLISHED Published: 2024-03-11T18:55:40.678Z Last Updated: 2024-11-14T20:21:44.411Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In ProtocolPsKeepAliveStatusAdapter::getCode() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27231 State: PUBLISHED Published: 2024-04-05T20:02:14.632Z Last Updated: 2024-11-25T15:20:02.256Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In tmu_get_tr_stats of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-04-01
CVE ID: CVE-2024-27232 State: PUBLISHED Published: 2024-04-05T20:02:14.780Z Last Updated: 2024-11-21T16:06:21.656Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In asn1_ec_pkey_parse of asn1_common.c, there is a possible OOB read due to a missing null check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-04-01
CVE ID: CVE-2024-27233 State: PUBLISHED Published: 2024-03-11T18:55:40.829Z Last Updated: 2024-08-05T17:33:11.328Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In ppcfw_init_secpolicy of ppcfw.c, there is a possible permission bypass due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27234 State: PUBLISHED Published: 2024-03-11T18:55:40.983Z Last Updated: 2024-12-06T18:05:18.901Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In fvp_set_target of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27235 State: PUBLISHED Published: 2024-03-11T18:55:41.132Z Last Updated: 2024-11-06T15:37:10.055Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In plugin_extern_func of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27236 State: PUBLISHED Published: 2024-03-11T18:55:41.315Z Last Updated: 2024-08-27T14:33:14.940Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In aoc_unlocked_ioctl of aoc.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27237 State: PUBLISHED Published: 2024-03-11T18:55:41.467Z Last Updated: 2025-03-25T19:19:07.660Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In wipe_ns_memory of nsmemwipe.c, there is a possible incorrect size calculation due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27238 State: PUBLISHED Published: 2024-07-15T17:20:39.157Z Last Updated: 2024-08-02T00:27:59.915Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Zoom Communications, Inc Products: Zoom Apps and SDKs Problem Types: CWE-367 Description: Race condition in the installer for some Zoom Apps and SDKs for Windows before version 6.0.0 may allow an authenticated user to conduct a privilege escalation via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24021
CVE ID: CVE-2024-27239 State: PUBLISHED Published: 2025-02-25T20:33:42.787Z Last Updated: 2025-10-01T22:45:02.250Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Zoom Communications, Inc Products: Zoom Workplace Apps and SDKs Problem Types: CWE-416 Description: Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24018/
CVE ID: CVE-2024-27240 State: PUBLISHED Published: 2024-07-15T17:07:42.976Z Last Updated: 2024-08-02T00:27:59.850Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Zoom Communications, Inc Products: Zoom Apps for Windows Problem Types: CWE-20 Description: Improper input validation in the installer for some Zoom Apps for Windows may allow an authenticated user to conduct a privilege escalation via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24019
CVE ID: CVE-2024-27241 State: PUBLISHED Published: 2024-07-15T17:17:01.679Z Last Updated: 2024-08-02T00:27:59.870Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Zoom Communications, Inc Products: Zoom Apps and SDKs Problem Types: CWE-20 Description: Improper input validation in some Zoom Apps and SDKs may allow an authenticated user to conduct a denial of service via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24020
CVE ID: CVE-2024-27242 State: PUBLISHED Published: 2024-04-09T17:18:32.081Z Last Updated: 2024-08-02T00:27:59.871Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L) Vendors: Zoom Video Communications, Inc. Products: Zoom Desktop Client for Linux Problem Types: CWE-79 Description: Cross site scripting in Zoom Desktop Client for Linux before version 5.17.10 may allow an authenticated user to conduct a denial of service via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24013/
CVE ID: CVE-2024-27243 State: PUBLISHED Published: 2024-05-15T20:37:45.264Z Last Updated: 2024-09-20T14:34:14.212Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Zoom Video Communications, Inc. Products: see references Problem Types: CWE-122 Description: Buffer overflow in some Zoom Workplace Apps and SDK’s may allow an authenticated user to conduct a denial of service via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24014/
CVE ID: CVE-2024-27244 State: PUBLISHED Published: 2024-05-15T20:46:37.922Z Last Updated: 2024-09-20T14:31:59.382Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Zoom Video Communications, Inc. Products: Zoom Workplace VDI App for Windows Problem Types: CWE-347 Description: Insufficient verification of data authenticity in the installer for Zoom Workplace VDI App for Windows may allow an authenticated user to conduct an escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24015/
CVE ID: CVE-2024-27245 State: PUBLISHED Published: 2025-02-25T20:31:28.555Z Last Updated: 2025-02-25T21:08:19.978Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Zoom Communications, Inc Products: Zoom Workplace Apps and SDKs Problem Types: CWE-122 Description: Buffer overflow in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24016/
CVE ID: CVE-2024-27246 State: PUBLISHED Published: 2025-02-25T20:32:33.638Z Last Updated: 2025-02-25T21:08:59.293Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Zoom Communications, Inc Products: Zoom Workplace Apps and SDKs Problem Types: CWE-416 Description: Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24017/
CVE ID: CVE-2024-27247 State: PUBLISHED Published: 2024-04-09T17:15:27.531Z Last Updated: 2024-09-20T14:33:08.116Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:N) Vendors: Zoom Video Communications, Inc. Products: Zoom Desktop Client for macOS Problem Types: CWE-347 Description: Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to conduct an escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zoom.com/en/trust/security-bulletin/zsb-24012/
CVE ID: CVE-2024-27254 State: PUBLISHED Published: 2024-04-03T12:24:05.327Z Last Updated: 2025-02-13T17:46:21.193Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 federated server is vulnerable to denial of service with a specially crafted query under certain conditions. IBM X-Force ID: 283813. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7145727 - https://https://exchange.xforce.ibmcloud.com/vulnerabilities/28
nces: - https://www.ibm.com/support/pages/node/7145727 - https://https://exchange.xforce.ibmcloud.com/vulnerabilities/283813 - https://security.netapp.com/advisory/ntap-20240517-0004/
CVE ID: CVE-2024-27255 State: PUBLISHED Published: 2024-03-03T11:54:10.301Z Last Updated: 2024-08-02T00:27:59.999Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: MQ Operator Problem Types: CWE-327 Description: IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 283905. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7126571 - https://exc
SA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7126571 - https://exchange.xforce.ibmcloud.com/vulnerabilities/283905
CVE ID: CVE-2024-27256 State: PUBLISHED Published: 2025-01-27T16:27:53.275Z Last Updated: 2025-02-18T19:29:12.435Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: MQ Operator Problem Types: CWE-327 Description: IBM MQ Container 3.0.0, 3.0.1, 3.1.0 through 3.1.3 CD, 2.0.0 LTS through 2.0.22 LTS and 2.4.0 through 2.4.8, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7157667
CVE ID: CVE-2024-27257 State: PUBLISHED Published: 2024-09-10T14:24:20.430Z Last Updated: 2024-09-10T15:30:25.752Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: OpenPages Problem Types: CWE-540 Description: IBM OpenPages 8.3 and 9.0 potentially exposes information about client-side source code through use of JavaScript source maps to unauthorized users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7167702 - https://exchange.xforce.ibmcloud.com/vulnerabilities/283966
CVE ID: CVE-2024-27260 State: PUBLISHED Published: 2024-05-16T16:32:05.917Z Last Updated: 2024-08-02T00:27:59.799Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: AIX Problem Types: CWE-250 Description: IBM AIX could 7.2, 7.3, VIOS 3.1, and VIOS 4.1 allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. IBM X-Force ID: 283985. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7152543 - https://exchange.xforce.ibmcloud.com/vulnerabilities/283985