Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-27175 State: PUBLISHED Published: 2024-06-14T04:04:32.574Z Last Updated: 2025-02-13T17:46:15.100Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-73 Description: Remote Command program allows an attacker to read any file using a Local File Inclusion vulnerability. An attacker can read any file on the printer. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.tos
chment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27176 State: PUBLISHED Published: 2024-06-14T04:05:52.395Z Last Updated: 2025-02-13T17:46:15.704Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-22 Description: An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying session ID variable. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related oth
vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27177 State: PUBLISHED Published: 2024-06-14T04:06:54.881Z Last Updated: 2025-02-13T17:46:16.301Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-22 Description: An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying package name variable. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related o
is vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27178 State: PUBLISHED Published: 2024-06-14T04:08:21.126Z Last Updated: 2025-02-13T17:46:17.002Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-22 Description: An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying file name variable. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related othe
CVE ID: CVE-2024-27179 State: PUBLISHED Published: 2024-06-14T04:09:24.831Z Last Updated: 2025-02-13T17:46:18.182Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-1295 Description: Admin cookies are written in clear-text in logs. An attacker can retrieve them and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf
iner: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27180 State: PUBLISHED Published: 2024-06-14T04:10:30.671Z Last Updated: 2025-02-13T17:46:18.971Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-276 Description: An attacker with admin access can install rogue applications. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU971
20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27181 State: PUBLISHED Published: 2024-08-02T09:27:48.639Z Last Updated: 2024-08-12T19:53:28.790Z Vendors: Apache Software Foundation Products: Apache Linkis Basic management services Problem Types: CWE-269 Description: In Apache Linkis <= 1.5.0, Privilege Escalation in Basic management services where the attacking user is a trusted account allows access to Linkis's Token information. Users are advised to upgrade to version 1.6.0, which fixes this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/hosd73l7hxb3rpt5rb0yg0ld11zph4c6
CVE ID: CVE-2024-27182 State: PUBLISHED Published: 2024-08-02T09:29:33.391Z Last Updated: 2025-03-27T15:48:58.051Z Vendors: Apache Software Foundation Products: Apache Linkis Basic management services Problem Types: CWE-552 Description: In Apache Linkis <= 1.5.0, Arbitrary file deletion in Basic management services on A user with an administrator account could delete any file accessible by the Linkis system user . Users are recommended to upgrade to version 1.6.0, which fixes this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/2of1p433h8rbq2bx525rtftnk19oz38h
CVE ID: CVE-2024-27183 State: PUBLISHED Published: 2024-07-09T18:05:22.200Z Last Updated: 2025-03-18T04:33:57.625Z Vendors: dj-extensions.com Products: DJ-HelpfulArticles for Joomla Problem Types: CWE-79 Description: XSS vulnerability in DJ-HelpfulArticles component for Joomla. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://extensions.joomla.org/extension/dj-helpfularticles/
CVE ID: CVE-2024-27184 State: PUBLISHED Published: 2024-08-20T16:03:51.605Z Last Updated: 2024-11-26T04:34:52.366Z Vendors: Joomla! Project Products: Joomla! CMS Problem Types: CWE-601 Description: Inadequate validation of URLs could result into an invalid check whether an redirect URL is internal or not.. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://developer.joomla.org/security-centre/941-20240801-core-inadequate-validation-of-internal-urls.html
CVE ID: CVE-2024-27185 State: PUBLISHED Published: 2024-08-20T16:03:58.015Z Last Updated: 2025-03-29T04:35:10.331Z Vendors: Joomla! Project Products: Joomla! CMS Description: The pagination class includes arbitrary parameters in links, leading to cache poisoning attack vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://developer.joomla.org/security-centre/942-20240802-core-cache-poisoning-in-pagination.html
CVE ID: CVE-2024-27186 State: PUBLISHED Published: 2024-08-20T16:03:56.863Z Last Updated: 2024-11-26T04:35:13.782Z Vendors: Joomla! Project Products: Joomla! CMS Problem Types: CWE-79 Description: The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://developer.joomla.org/security-centre/944-20240803-core-xss-in-html-mail-templates.html
CVE ID: CVE-2024-27187 State: PUBLISHED Published: 2024-08-20T16:03:43.540Z Last Updated: 2024-08-22T04:32:02.125Z Vendors: Joomla! Project Products: Joomla! CMS Problem Types: CWE-284 Description: Improper Access Controls allows backend users to overwrite their username when disallowed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://developer.joomla.org/security-centre/945-20240804-core-improper-acl-for-backend-profile-view.html
CVE ID: CVE-2024-27188 State: PUBLISHED Published: 2024-03-27T06:35:38.045Z Last Updated: 2024-08-05T16:46:09.011Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Cloudways Products: Breeze Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cloudways Breeze allows Stored XSS.This issue affects Breeze: from n/a through 2.1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/breeze/wordpress-breeze-plugin-2-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-27189 State: PUBLISHED Published: 2024-03-15T12:52:31.918Z Last Updated: 2024-08-02T00:27:59.699Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: catchsquare Products: WP Social Widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Social Widget allows Stored XSS.This issue affects WP Social Widget: from n/a through 2.2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-social-widget/wordpress-wp-social-widget-plugin-2-2-5-cross-site-scripting-xss-v
atchstack.com/database/vulnerability/wp-social-widget/wordpress-wp-social-widget-plugin-2-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-27190 State: PUBLISHED Published: 2024-03-21T17:04:37.746Z Last Updated: 2024-08-02T00:27:59.797Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Jean-David Daviet Products: Download Media Problem Types: CWE-862 Description: Missing Authorization vulnerability in Jean-David Daviet Download Media.This issue affects Download Media: from n/a through 1.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/download-media/wordpress-download-media-plugin-1-4-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-27191 State: PUBLISHED Published: 2024-04-03T12:04:05.322Z Last Updated: 2024-08-19T19:27:08.017Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Inpersttion Products: Slivery Extender Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Inpersttion Slivery Extender allows Code Injection.This issue affects Slivery Extender: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/slivery-extender/wordpress-slivery-extender-plugin-1-0-2-remote-code-execution-rce-vulnerability?_s_id=cve
CVE ID: CVE-2024-27192 State: PUBLISHED Published: 2024-03-15T12:44:30.559Z Last Updated: 2024-08-02T00:27:59.676Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Scott Reilly Products: Configure SMTP Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Reilly Configure SMTP allows Reflected XSS.This issue affects Configure SMTP: from n/a through 3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/configure-smtp/wordpress-configure-smtp-plugin-3-1-reflected-cross-site-scripting-xss-vu
tack.com/database/vulnerability/configure-smtp/wordpress-configure-smtp-plugin-3-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-27193 State: PUBLISHED Published: 2024-03-15T12:50:19.441Z Last Updated: 2024-08-02T00:27:59.757Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: PayU Products: PayU India Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PayU PayU India allows Reflected XSS.This issue affects PayU India: from n/a through 3.8.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/payu-india/wordpress-payu-india-plugin-3-8-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-27194 State: PUBLISHED Published: 2024-03-16T01:22:52.438Z Last Updated: 2024-08-08T16:12:39.196Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Andrei Ivasiuc Products: Fontific | Google Fonts Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Andrei Ivasiuc Fontific | Google Fonts allows Stored XSS.This issue affects Fontific | Google Fonts: from n/a through 0.1.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/fontific/wordpress-fontific-plugin-0-1-6-csrf-to-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-27195 State: PUBLISHED Published: 2024-03-16T01:17:58.073Z Last Updated: 2025-04-10T20:31:29.720Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Sandi Verdev Products: Watermark RELOADED Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Sandi Verdev Watermark RELOADED allows Stored XSS.This issue affects Watermark RELOADED: from n/a through 1.3.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/watermark-reloaded/wordpress-watermark-reloaded-plugin-1-3-5-csrf-to-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-27196 State: PUBLISHED Published: 2024-03-15T12:47:12.660Z Last Updated: 2024-08-02T00:27:59.692Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Joel Starnes Products: postMash – custom post order Problem Types: CWE-79 Description: Cross Site Scripting (XSS) vulnerability in Joel Starnes postMash – custom post order allows Reflected XSS.This issue affects postMash – custom post order: from n/a through 1.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/postmash/wordpress-postmash-custom-post-order-plugin-1-2-0-reflected-cross-site-scripting-xss-vulnerab
ase/vulnerability/postmash/wordpress-postmash-custom-post-order-plugin-1-2-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-27197 State: PUBLISHED Published: 2024-03-16T01:12:32.602Z Last Updated: 2024-08-02T00:27:59.966Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Bee Products: BeePress Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Bee BeePress allows Stored XSS.This issue affects BeePress: from n/a through 6.9.8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/beepress/wordpress-beepress-plugin-6-9-8-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-27198 State: PUBLISHED Published: 2024-03-04T17:21:39.422Z Last Updated: 2025-10-21T23:05:23.577Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: JetBrains Products: TeamCity Problem Types: CWE-288 Description: In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/ - https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive
CVE ID: CVE-2024-27199 State: PUBLISHED Published: 2024-03-04T17:21:40.081Z Last Updated: 2025-05-30T16:40:42.060Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: JetBrains Products: TeamCity Problem Types: CWE-23 Description: In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/ - https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive
CVE ID: CVE-2024-27200 State: PUBLISHED Published: 2024-11-13T21:08:15.521Z Last Updated: 2024-11-14T19:45:37.802Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: n/a Products: Intel(R) Granulate(TM) software Problem Types: escalation of privilege, CWE-284 Description: Improper access control in some Intel(R) Granulate(TM) software before version 4.30.1 may allow a authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01145.html
CVE ID: CVE-2024-27201 State: PUBLISHED Published: 2024-04-03T13:55:03.371Z Last Updated: 2025-11-04T18:30:00.899Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: Open Automation Software Products: OAS Platform Problem Types: CWE-20 Description: An improper input validation vulnerability exists in the OAS Engine User Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted series of network requests can lead to unexpected data in the configuration. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - htt
rigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1949
CVE ID: CVE-2024-27202 State: PUBLISHED Published: 2024-05-08T15:01:26.004Z Last Updated: 2024-08-02T00:27:59.644Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: F5 Products: BIG-IP Problem Types: CWE-79 Description: A DOM-based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://my.f5.com/manage/s/article/K000138520
CVE ID: CVE-2024-27204 State: PUBLISHED Published: 2024-03-11T18:55:37.406Z Last Updated: 2024-08-02T00:27:59.739Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In tmu_set_gov_active of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27205 State: PUBLISHED Published: 2024-03-11T18:55:37.551Z Last Updated: 2024-08-26T16:02:27.393Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27206 State: PUBLISHED Published: 2024-03-11T18:55:37.696Z Last Updated: 2024-08-27T20:50:15.357Z Vendors: Google Products: Android Problem Types: Information disclosure Description: there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27207 State: PUBLISHED Published: 2024-03-11T18:55:37.844Z Last Updated: 2024-08-05T17:38:30.451Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: Exported broadcast receivers allowing malicious apps to bypass broadcast protection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27208 State: PUBLISHED Published: 2024-03-11T18:55:37.992Z Last Updated: 2024-08-27T14:36:13.045Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27209 State: PUBLISHED Published: 2024-03-11T18:55:38.143Z Last Updated: 2024-08-22T20:02:54.683Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2024-03-01
CVE ID: CVE-2024-27210 State: PUBLISHED Published: 2024-03-11T18:55:38.288Z Last Updated: 2025-04-16T15:44:30.886Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In policy_check of fvp.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2024-03-01