Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-10277 State: PUBLISHED Published: 2017-05-12T15:00:00 Last Updated: 2024-08-06T03:14:42.908Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33840490. Additional Analyst Notes: - CVE Program Container: References: - https://source.a
, Kernel-3.18. Android ID: A-33840490. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/bid/98149 - https://www.exploit-db.com/exploits/42601/
CVE ID: CVE-2016-10280 State: PUBLISHED Published: 2017-05-12T15:00:00 Last Updated: 2024-08-06T03:14:42.920Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-28175767. References: M-ALPS02696445. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/
Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/bid/98157
CVE ID: CVE-2016-10281 State: PUBLISHED Published: 2017-05-12T15:00:00 Last Updated: 2024-08-06T03:14:42.862Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-28175647. References: M-ALPS02696475. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/
Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/bid/98158
CVE ID: CVE-2016-10282 State: PUBLISHED Published: 2017-05-12T15:00:00 Last Updated: 2024-08-06T03:14:42.899Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-33939045. References: M-ALPS03149189. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/
Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/bid/98159
CVE ID: CVE-2016-10283 State: PUBLISHED Published: 2017-05-12T15:00:00 Last Updated: 2024-08-06T03:14:42.944Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32094986. References: QC-CR#2002052. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - https://www
lyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - https://www.codeaurora.org/stack-overflow-wifi-driver-function-wlanhddchangestation-cve-2016-10283 - http://www.securityfocus.com/bid/98160
CVE ID: CVE-2016-10284 State: PUBLISHED Published: 2017-05-12T15:00:00 Last Updated: 2024-08-06T03:14:42.843Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32402303. References: QC-CR#2000664. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.
lyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/bid/98162
CVE ID: CVE-2016-10285 State: PUBLISHED Published: 2017-05-12T15:00:00 Last Updated: 2024-08-06T03:14:42.974Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-33752702. References: QC-CR#1104899. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus
CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/bid/98163
CVE ID: CVE-2016-10286 State: PUBLISHED Published: 2017-05-12T15:00:00 Last Updated: 2024-08-06T03:14:42.964Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-35400904. References: QC-CR#1090237. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98165 - https://source.android.com/security/bulle
CVE Program Container: References: - http://www.securityfocus.com/bid/98165 - https://source.android.com/security/bulletin/2017-05-01
CVE ID: CVE-2016-10287 State: PUBLISHED Published: 2017-05-12T15:00:00 Last Updated: 2024-08-06T03:14:42.992Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33784446. References: QC-CR#1112751. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.
lyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/bid/98167
CVE ID: CVE-2016-10288 State: PUBLISHED Published: 2017-05-12T15:00:00 Last Updated: 2024-08-06T03:14:42.975Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Qualcomm LED driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-33863909. References: QC-CR#1109763. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01
CVE ID: CVE-2016-10289 State: PUBLISHED Published: 2017-05-12T15:00:00 Last Updated: 2024-08-06T03:14:42.847Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Qualcomm crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33899710. References: QC-CR#1116295. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01
CVE ID: CVE-2016-10290 State: PUBLISHED Published: 2017-05-12T15:00:00 Last Updated: 2024-08-06T03:14:42.972Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Qualcomm shared memory driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33898330. References: QC-CR#1109782. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98182 - https://source.andro
onal Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98182 - https://source.android.com/security/bulletin/2017-05-01
CVE ID: CVE-2016-10291 State: PUBLISHED Published: 2017-05-12T15:00:00 Last Updated: 2024-08-06T03:14:42.926Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Qualcomm Slimbus driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-34030871. References: QC-CR#986837. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocu
- CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/bid/98183
CVE ID: CVE-2016-10292 State: PUBLISHED Published: 2017-05-12T15:00:00 Last Updated: 2024-08-06T03:14:42.908Z Vendors: Google Inc. Products: Android Problem Types: Denial of service Description: A denial of service vulnerability in the Qualcomm Wi-Fi driver could enable a proximate attacker to cause a denial of service in the Wi-Fi subsystem. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34514463. References: QC-CR#1065466. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98204 - https://source.android.com/security/bulletin/2017-05-01
CVE ID: CVE-2016-10293 State: PUBLISHED Published: 2017-05-12T15:00:00 Last Updated: 2024-08-06T03:14:42.945Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-33352393. References: QC-CR#1101943. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/bi
ogram Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/bid/98206
CVE ID: CVE-2016-10294 State: PUBLISHED Published: 2017-05-12T15:00:00 Last Updated: 2024-08-06T03:14:42.965Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: An information disclosure vulnerability in the Qualcomm power driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33621829. References: QC-CR#1105481. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01
CVE ID: CVE-2016-10295 State: PUBLISHED Published: 2017-05-12T15:00:00 Last Updated: 2024-08-06T03:14:42.843Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: An information disclosure vulnerability in the Qualcomm LED driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-33781694. References: QC-CR#1109326. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - https://www.codeaurora.org/possib
ram Container: References: - https://source.android.com/security/bulletin/2017-05-01 - https://www.codeaurora.org/possible-kernel-information-leak-qpnp-flash-led-driver-debugfs-function-cve-2016-10295
CVE ID: CVE-2016-10296 State: PUBLISHED Published: 2017-05-12T15:00:00 Last Updated: 2024-08-06T03:14:42.846Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: An information disclosure vulnerability in the Qualcomm shared memory driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33845464. References: QC-CR#1109782. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01
CVE ID: CVE-2016-10297 State: PUBLISHED Published: 2017-06-06T14:00:00 Last Updated: 2024-08-06T03:14:42.889Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Time-of-Check Time-of-Use Race Condition Vulnerability in TrustZone Description: In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially exist. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98241 - https://source.android.com/security/bulletin/2017-05-01
CVE ID: CVE-2016-10298 State: PUBLISHED Published: 2018-04-04T18:00:00Z Last Updated: 2024-09-16T22:09:53.144Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393252. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2016-10299 State: PUBLISHED Published: 2018-04-04T18:00:00Z Last Updated: 2024-09-17T02:51:48.322Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32577244. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2016-10304 State: PUBLISHED Published: 2017-04-10T14:00:00 Last Updated: 2024-08-06T03:14:42.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SAP EP-RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to cause a denial of service (out-of-memory error and service instability) via a crafted serialized Java object, as demonstrated by serial.cc3, aka SAP Security Note 2315788. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/advisories/erpscan-16-029-sap-netweaver-java-7-5-deserialization-untrusted-user-value-trustmanagementservlet/
CVE ID: CVE-2016-10305 State: PUBLISHED Published: 2017-03-30T07:00:00Z Last Updated: 2024-09-16T22:09:40.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trango Apex <= 2.1.1, ApexLynx < 2.0, ApexOrion < 2.0, ApexPlus <= 3.2.0, Giga <= 2.6.1, GigaLynx < 2.0, GigaOrion < 2.0, GigaPlus <= 3.2.3, GigaPro <= 1.4.1, StrataLink < 3.0, and StrataPro devices have a built-in, hidden root account, with a default password that was once stored in cleartext within a software update package on a Trango FTP server. This account is accessible via SSH and/or TELNET, and grants access to the underlying embedded UNIX OS on the device, allowing full control over it. Additional Analyst Notes: - C
ts access to the underlying embedded UNIX OS on the device, allowing full control over it. Additional Analyst Notes: - CVE Program Container: References: - http://blog.iancaling.com/post/153011925478
CVE ID: CVE-2016-10306 State: PUBLISHED Published: 2017-03-30T07:00:00 Last Updated: 2024-08-06T03:14:42.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trango Altum AC600 devices have a built-in, hidden root account, with a default password of abcd1234. This account is accessible via SSH and/or TELNET, and grants access to the underlying embedded UNIX OS on the device, allowing full control over it. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97241 - http://blog.iancaling.com/post/153011925478 - http://blog.iancaling.com/post/155395764003
CVE ID: CVE-2016-10307 State: PUBLISHED Published: 2017-03-30T07:00:00 Last Updated: 2024-08-06T03:14:42.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trango ApexLynx 2.0, ApexOrion 2.0, GigaLynx 2.0, GigaOrion 2.0, and StrataLink 3.0 devices have a built-in, hidden root account, with a default password for which the MD5 hash value is public (but the cleartext value is perhaps not yet public). This account is accessible via SSH and/or TELNET, and grants access to the underlying embedded UNIX OS on the device, allowing full control over it. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97242 - http://blog.iancaling.com/post
st Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97242 - http://blog.iancaling.com/post/153011925478
CVE ID: CVE-2016-10308 State: PUBLISHED Published: 2017-03-30T07:00:00 Last Updated: 2024-08-06T03:14:42.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the same across all devices. This account is accessible via both SSH and the device's web interface and grants access to the underlying embedded Linux OS on the device, allowing full control over it. Additional Analyst Notes: - CVE Program Container: References: - http://blog.iancaling.com/post/145309944453 - http://www.securityfocus.com/bid/97243
CVE ID: CVE-2016-10309 State: PUBLISHED Published: 2017-03-30T07:00:00 Last Updated: 2024-08-06T03:14:42.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the GUI of Ceragon FibeAir IP-10 (before 7.2.0) devices, a remote attacker can bypass authentication by adding an ALBATROSS cookie with the value 0-4-11 to their browser. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91263 - http://blog.iancaling.com/post/145973147383
CVE ID: CVE-2016-10310 State: PUBLISHED Published: 2017-04-10T15:00:00 Last Updated: 2024-08-06T03:14:42.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the MobiLink Synchronization Server component in SAP SQL Anywhere 17 and possibly earlier allows remote authenticated users to cause a denial of service (resource consumption and process crash) by sending a crafted packet several times, aka SAP Security Note 2308778. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/advisories/erpscan-16-024-sap-sql-anywhere-mobilink-synchronization-server-buffer-overflow/ - http://www.securityfocus.com/bid/91197
CVE ID: CVE-2016-10311 State: PUBLISHED Published: 2017-04-10T15:00:00 Last Updated: 2024-08-06T03:14:42.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service () by sending a crafted packet to the SAPSTARTSRV port, aka SAP Security Note 2295238. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/advisories/erpscan-16-030-sap-netweaver-sapstartsrv-stack-based-buffer-overflow/
CVE ID: CVE-2016-10312 State: PUBLISHED Published: 2017-04-03T05:44:00Z Last Updated: 2024-09-17T01:41:28.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/* pages. Additional Analyst Notes: - CVE Program Container: References: - https://www.riskbasedsecurity.com/research/RBS-2016-004.pdf
CVE ID: CVE-2016-10313 State: PUBLISHED Published: 2017-04-03T05:44:00Z Last Updated: 2024-09-16T18:29:33.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to conduct CSRF attacks via certain /goform/* pages. Additional Analyst Notes: - CVE Program Container: References: - https://www.riskbasedsecurity.com/research/RBS-2016-004.pdf
CVE ID: CVE-2016-10314 State: PUBLISHED Published: 2017-04-03T05:44:00Z Last Updated: 2024-09-17T03:49:07.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to read passwords via a direct request to the x.asp page. Additional Analyst Notes: - CVE Program Container: References: - https://www.riskbasedsecurity.com/research/RBS-2016-004.pdf
CVE ID: CVE-2016-10315 State: PUBLISHED Published: 2017-04-03T05:44:00Z Last Updated: 2024-09-17T02:47:28.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to conduct Open Redirect attacks via the submit-url parameter to certain /goform/* pages. Additional Analyst Notes: - CVE Program Container: References: - https://www.riskbasedsecurity.com/research/RBS-2016-004.pdf
CVE ID: CVE-2016-10316 State: PUBLISHED Published: 2017-04-03T05:44:00Z Last Updated: 2024-09-16T17:04:07.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to conduct Open Redirect attacks via the return-url parameter to /goform/formLogout. Additional Analyst Notes: - CVE Program Container: References: - https://www.riskbasedsecurity.com/research/RBS-2016-004.pdf