Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-9969 State: PUBLISHED Published: 2019-03-24T01:23:05 Last Updated: 2024-08-04T22:10:08.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to xnview+0x385399. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/03/crashing-xnview-248.html
CVE ID: CVE-2019-9970 State: PUBLISHED Published: 2019-03-24T01:52:33 Last Updated: 2024-08-04T22:10:08.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Whisper Signal (aka Signal-Desktop) through 1.23.1 and the Signal Private Messenger application through 4.35.3 for Android are vulnerable to an IDN homograph attack when displaying messages containing URLs. This occurs because the application produces a clickable link even if (for example) Latin and Cyrillic characters exist in the same domain name, and the available font has an identical representation of characters from different alphabets. Additional Analyst Notes: - CVE Program Container: References: - http://www.secu
of characters from different alphabets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107550 - https://github.com/blazeinfosec/advisories/blob/master/signal-advisory.txt
CVE ID: CVE-2019-9971 State: PUBLISHED Published: 2022-06-07T17:56:52 Last Updated: 2024-08-04T22:10:08.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an attacker to gain root privileges by using sudo with the tcpdump command, without a password. This occurs because the -z (aka postrotate-command) option to tcpdump can be unsafe when used in conjunction with sudo. Additional Analyst Notes: - CVE Program Container: References: - https://www.securusglobal.com/community/2014/03/17/how-i-got-root-with-sudo/ - https://www.gosecure.net/blog - https://www.gosecure.net/blog/2022/05/31/security-ad
4/03/17/how-i-got-root-with-sudo/ - https://www.gosecure.net/blog - https://www.gosecure.net/blog/2022/05/31/security-advisory-multiple-vulnerabilities-impact-3cx-phone-system/
CVE ID: CVE-2019-9972 State: PUBLISHED Published: 2022-06-07T17:57:00 Last Updated: 2024-08-04T22:10:08.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run arbitrary commands with the phonesystem user privileges because of "<space><space> followed by <shift><enter>" mishandling. Additional Analyst Notes: - CVE Program Container: References: - https://www.gosecure.net/blog - https://www.gosecure.net/blog/2022/05/31/security-advisory-multiple-vulnerabilities-impact-3cx-phone-system/
CVE ID: CVE-2019-9974 State: PUBLISHED Published: 2019-04-11T18:01:44 Last Updated: 2024-08-04T22:10:09.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: diag_tool.cgi on DASAN H660RM GPON routers with firmware 1.03-0022 lacks any authorization check, which allows remote attackers to run a ping command via a GET request to enumerate LAN devices or crash the router with a DoS attack. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Mar/41 - http://packetstormsecurity.com/files/152232/DASAN-H660RM-Information-Disclosure-Hardcoded-Key.html - https://blog.burghardt.pl/2019/03/diag_tool-cgi-on-dasan-h660rm-devices-with-firmware-1-03-
closure-Hardcoded-Key.html - https://blog.burghardt.pl/2019/03/diag_tool-cgi-on-dasan-h660rm-devices-with-firmware-1-03-0022-allows-spawning-ping-processes-without-any-authorization-leading-to-information-disclosure-and-dos-attacks/
CVE ID: CVE-2019-9975 State: PUBLISHED Published: 2019-04-11T18:08:07 Last Updated: 2024-08-04T22:10:08.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: DASAN H660RM devices with firmware 1.03-0022 use a hard-coded key for logs encryption. Data stored using this key can be decrypted by anyone able to access this key. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Mar/41 - http://packetstormsecurity.com/files/152232/DASAN-H660RM-Information-Disclosure-Hardcoded-Key.html - https://blog.burghardt.pl/2019/03/syslog_tool-cgi-on-dasan-h660rm-devices-with-firmware-1-03-0022-uses-a-hard-coded-key-for-logs-encryption/
CVE ID: CVE-2019-9976 State: PUBLISHED Published: 2019-04-11T18:17:14 Last Updated: 2024-08-04T22:10:08.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to the /tmp/boa-temp file, which allows logged-in users to read the credentials of administration web interface users. Additional Analyst Notes: - CVE Program Container: References: - https://blog.burghardt.pl/2019/03/boa-webserver-on-dasan-h660rm-devices-with-firmware-1-03-0022-saves-post-data-including-credentials-to-tmp-boa-temp/
CVE ID: CVE-2019-9977 State: PUBLISHED Published: 2019-03-24T13:39:42 Last Updated: 2024-08-04T22:10:08.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: The renderer process in the entertainment system on Tesla Model 3 vehicles mishandles JIT compilation, which allows attackers to trigger firmware code execution, and display a crafted message to vehicle occupants. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/thezdi/status/1109218603251859456 - https://www.zdnet.com/article/tesla-car-hacked-at-pwn2own-contest/ - http://www.securityfocus.com/bid/107551
CVE ID: CVE-2019-9978 State: PUBLISHED Published: 2019-03-24T14:47:26.000Z Last Updated: 2025-10-21T23:45:41.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpvulndb.com/vulnerabilities/9238 - https://www.cybersecurity-help.cz/vdb/SB2019032105 - https://blog.sucuri.net/2019/03/zero-day-stored-xss-in-social-warfare.html - https://www.wordfence.com/blo
B2019032105 - https://blog.sucuri.net/2019/03/zero-day-stored-xss-in-social-warfare.html - https://www.wordfence.com/blog/2019/03/unpatched-zero-day-vulnerability-in-social-warfare-plugin-exploited-in-the-wild/ - https://www.pluginvulnerabilities.com/2019/03/21/full-disclosure-of-settings-change-persistent-cross-site-scripting-xss-vulnerability-in-social-warfare/ - https://wordpress.org/plugins/social-warfare/#developers - https://twitter.com/warfareplugins/status/1108852747099652099 - https://www.exploit-db.com/exploits/46794/ - http://packetstormsecurity.com/files/152722/Wordpress-Social-Warfare-Remote-Code-Execution.html - http://packetstormsecurity.com/files/163680/WordPress-Social-Warfa
Wordpress-Social-Warfare-Remote-Code-Execution.html - http://packetstormsecurity.com/files/163680/WordPress-Social-Warfare-3.5.2-Remote-Code-Execution.html
CVE ID: CVE-2019-9983 State: REJECTED Published: 2021-07-23T12:46:15 Last Updated: 2021-07-23T12:46:15 Description: No description available.
CVE ID: CVE-2020-0001 State: PUBLISHED Published: 2020-01-08T18:25:12 Last Updated: 2024-08-04T05:47:40.190Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In getProcessRecordLocked of ActivityManagerService.java isolated apps are not handled correctly. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-140055304 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-01-01
CVE ID: CVE-2020-0002 State: PUBLISHED Published: 2020-01-08T18:26:11 Last Updated: 2024-08-04T05:47:40.577Z Vendors: n/a Products: Android Problem Types: Remote code execution Description: In ih264d_init_decoder of ih264d_api.c, there is a possible out of bounds write due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-142602711 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-01-01
CVE ID: CVE-2020-0003 State: PUBLISHED Published: 2020-01-08T18:30:02 Last Updated: 2024-08-04T05:47:40.461Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of InstallStart.java, there is a possible package validation bypass due to a time-of-check time-of-use vulnerability. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0 Android ID: A-140195904 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-01-01
CVE ID: CVE-2020-0004 State: PUBLISHED Published: 2020-01-08T18:31:15 Last Updated: 2024-08-04T05:47:40.397Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In generateCrop of WallpaperManagerService.java, there is a possible sysui crash due to image exceeding maximum texture size. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-120847476 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-01-01
CVE ID: CVE-2020-0005 State: PUBLISHED Published: 2020-02-13T14:22:01 Last Updated: 2024-08-04T05:47:40.799Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In btm_read_remote_ext_features_complete of btm_acl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-141552859 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-02-01
CVE ID: CVE-2020-0006 State: PUBLISHED Published: 2020-01-08T18:32:49 Last Updated: 2024-08-04T05:47:40.354Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In rw_i93_send_cmd_write_single_block of rw_i93.cc, there is a possible information disclosure of heap memory due to uninitialized data. This could lead to remote information disclosure in the NFC server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-139738828 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin
-139738828 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-01-01
CVE ID: CVE-2020-0007 State: PUBLISHED Published: 2020-01-08T18:33:59 Last Updated: 2024-08-04T05:47:40.523Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In flattenString8 of Sensor.cpp, there is a possible information disclosure of heap memory due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-141890807 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-01-01
CVE ID: CVE-2020-0008 State: PUBLISHED Published: 2020-01-08T18:34:50 Last Updated: 2024-08-04T05:47:40.264Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In LowEnergyClient::MtuChangedCallback of low_energy_client.cc, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-142558228 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-01-01
CVE ID: CVE-2020-0009 State: PUBLISHED Published: 2020-01-08T15:31:49 Last Updated: 2024-08-04T05:47:40.683Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-01-01 - http://pack
lyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-01-01 - http://packetstormsecurity.com/files/155903/Android-ashmem-Read-Only-Bypasses.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html
CVE ID: CVE-2020-0010 State: PUBLISHED Published: 2020-03-10T19:53:17 Last Updated: 2024-08-04T05:47:40.320Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In fpc_ta_get_build_info of fpc_ta_kpi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137014293References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-03-01
CVE ID: CVE-2020-0011 State: PUBLISHED Published: 2020-03-10T19:55:25 Last Updated: 2024-08-04T05:47:40.781Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In get_auth_result of fpc_ta_hw_auth.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137648045References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-03-01
CVE ID: CVE-2020-0012 State: PUBLISHED Published: 2020-03-10T19:55:33 Last Updated: 2024-08-04T05:47:39.583Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In fpc_ta_pn_get_unencrypted_image of fpc_ta_pn.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137648844 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-03-01
CVE ID: CVE-2020-0014 State: PUBLISHED Published: 2020-02-13T14:20:09 Last Updated: 2024-08-04T05:47:40.797Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: It is possible for a malicious application to construct a TYPE_TOAST window manually and make that window clickable. This could lead to a local escalation of privilege with no additional execution privileges needed. User action is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-128674520 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-02-01
CVE ID: CVE-2020-0015 State: PUBLISHED Published: 2020-02-13T14:20:24 Last Updated: 2024-08-04T05:47:40.323Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of CertInstaller.java, there is a possible way to overlay the Certificate Installation dialog by a malicious application. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-139017101 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-02-01
CVE ID: CVE-2020-0016 State: PUBLISHED Published: 2020-12-14T22:07:14 Last Updated: 2024-08-04T05:47:40.623Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-171413483 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-12-01
CVE ID: CVE-2020-0017 State: PUBLISHED Published: 2020-02-13T14:20:47 Last Updated: 2024-08-04T05:47:39.561Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In multiple places, it was possible for the primary user’s dictionary to be visible to and modifiable by secondary users. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-123232892 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-02-01
CVE ID: CVE-2020-0018 State: PUBLISHED Published: 2020-02-13T14:20:59 Last Updated: 2024-08-04T05:47:40.759Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In MotionEntry::appendDescription of InputDispatcher.cpp, there is a possible log information disclosure. This could lead to local disclosure of user input with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-139945049 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-02-01
CVE ID: CVE-2020-0019 State: PUBLISHED Published: 2020-12-14T22:07:25 Last Updated: 2024-08-04T05:47:40.324Z Vendors: n/a Products: Android Problem Types: Information Disclosure Description: In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local information disclosure in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-171413798 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-12-01
CVE ID: CVE-2020-0020 State: PUBLISHED Published: 2020-02-13T14:21:09 Last Updated: 2024-08-04T05:47:40.607Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getAttributeRange of ExifInterface.java, there is a possible failure to redact location information from media files due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143118731 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-02-01
CVE ID: CVE-2020-0021 State: PUBLISHED Published: 2020-02-13T14:21:25 Last Updated: 2024-08-04T05:47:39.569Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In removeUnusedPackagesLPw of PackageManagerService.java, there is a possible permanent denial-of-service due to a missing package dependency test. This could lead to remote denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141413692 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-02-01
CVE ID: CVE-2020-0022 State: PUBLISHED Published: 2020-02-13T14:21:41 Last Updated: 2024-08-04T05:47:40.847Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143894715 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/202
Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-02-01 - http://seclists.org/fulldisclosure/2020/Feb/10 - http://packetstormsecurity.com/files/156891/Android-Bluetooth-Remote-Denial-Of-Service.html - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200513-03-smartphone-en
CVE ID: CVE-2020-0023 State: PUBLISHED Published: 2020-02-13T14:21:52 Last Updated: 2024-08-04T05:47:40.375Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In setPhonebookAccessPermission of AdapterService.java, there is a possible disclosure of user contacts over bluetooth due to a missing permission check. This could lead to local information disclosure if a malicious app enables contacts over a bluetooth connection, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145130871 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/sec
0Android ID: A-145130871 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-02-01
CVE ID: CVE-2020-0024 State: PUBLISHED Published: 2020-05-14T20:08:08 Last Updated: 2024-08-04T05:47:40.791Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of SettingsBaseActivity.java, there is a possible unauthorized setting modification due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-137015265 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2020-05-01
CVE ID: CVE-2020-0025 State: PUBLISHED Published: 2021-03-10T15:52:13 Last Updated: 2024-08-04T05:47:39.499Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In deletePackageVersionedInternal of PackageManagerService.java, there is a possible way to exit Screen Pinning due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-135604684 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-03-01