Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-35670 State: PUBLISHED Published: 2023-09-11T20:09:52.999Z Last Updated: 2025-05-02T16:53:52.496Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private directories due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/providers/MediaProvider/+/db3c69afcb0a45c8aa2f333fcde3
References: - https://android.googlesource.com/platform/packages/providers/MediaProvider/+/db3c69afcb0a45c8aa2f333fcde36217889899fe - https://source.android.com/security/bulletin/2023-09-01
CVE ID: CVE-2023-35671 State: PUBLISHED Published: 2023-09-11T20:09:53.198Z Last Updated: 2024-09-26T14:34:53.613Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In onHostEmulationData of HostEmulationManager.java, there is a possible way for a general purpose NFC reader to read the full card number and expiry details when the device is in locked screen mode due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com
ditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/apps/Nfc/+/745632835f3d97513a9c2a96e56e1dc06c4e4176 - https://source.android.com/security/bulletin/2023-09-01
CVE ID: CVE-2023-35673 State: PUBLISHED Published: 2023-09-11T20:09:53.391Z Last Updated: 2024-09-26T14:33:31.585Z Vendors: Google Products: Android Problem Types: Remote code execution Description: In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8770c07c102c7fdc74626dc717acc8f6dd1c92cc - https://source.android.com/secur
ce.com/platform/packages/modules/Bluetooth/+/8770c07c102c7fdc74626dc717acc8f6dd1c92cc - https://source.android.com/security/bulletin/2023-09-01
CVE ID: CVE-2023-35674 State: PUBLISHED Published: 2023-09-11T20:09:53.580Z Last Updated: 2025-10-21T23:05:38.736Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/7428962d3b064ce1122809d87af65099d1129c9e - https://source.android.com/security/bu
esource.com/platform/frameworks/base/+/7428962d3b064ce1122809d87af65099d1129c9e - https://source.android.com/security/bulletin/2023-09-01
CVE ID: CVE-2023-35675 State: PUBLISHED Published: 2023-09-11T20:09:53.771Z Last Updated: 2024-09-26T14:30:04.570Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In loadMediaResumptionControls of MediaResumeListener.kt, there is a possible way to play and listen to media files played by another user on the same device due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/c1cf4b9746c96
tainer: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/c1cf4b9746c9641190730172522324ccd5b8c914 - https://source.android.com/security/bulletin/2023-09-01
CVE ID: CVE-2023-35676 State: PUBLISHED Published: 2023-09-11T20:09:53.971Z Last Updated: 2024-09-26T14:28:34.798Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/109e58b62dc9fedcee93983678ef9d4931e72afa - http
eferences: - https://android.googlesource.com/platform/frameworks/base/+/109e58b62dc9fedcee93983678ef9d4931e72afa - https://source.android.com/security/bulletin/2023-09-01
CVE ID: CVE-2023-35677 State: PUBLISHED Published: 2023-09-11T20:09:54.167Z Last Updated: 2024-10-29T17:52:42.588Z Vendors: Google Products: Android Problem Types: Denial of service Description: In onCreate of DeviceAdminAdd.java, there is a possible way to forcibly add a device admin due to a missing permission check. This could lead to local denial of service (factory reset or continuous locking) with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/apps/Settings/+/846180c19f68f6fb1b0653356401d3235fef846e - h
ences: - https://android.googlesource.com/platform/packages/apps/Settings/+/846180c19f68f6fb1b0653356401d3235fef846e - https://source.android.com/security/bulletin/2023-09-01
CVE ID: CVE-2023-35679 State: PUBLISHED Published: 2023-09-11T20:09:54.343Z Last Updated: 2024-09-26T15:45:20.974Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In MtpPropertyValue of MtpProperty.h, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/av/+/ea6131efa76a0b2a12724ffd157909e2c6fb4036 - https://source.android.com/security/bulletin/2023-09-01
CVE ID: CVE-2023-35680 State: PUBLISHED Published: 2023-09-11T20:09:54.517Z Last Updated: 2024-10-29T17:59:02.103Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In multiple locations, there is a possible way to import contacts belonging to other users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/services/Telephony/+/674039e70e1c5bf29b808899ac80c709acc82290 - https://source.android.com/securi
CVE ID: CVE-2023-35681 State: PUBLISHED Published: 2023-09-11T20:09:54.702Z Last Updated: 2024-09-26T15:46:22.621Z Vendors: Google Products: Android Problem Types: Remote code execution Description: In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d8d95291f16a8f18f8ffbd6322c14686897c5730 - https://source.android.com/security/bullet
tform/packages/modules/Bluetooth/+/d8d95291f16a8f18f8ffbd6322c14686897c5730 - https://source.android.com/security/bulletin/2023-09-01
CVE ID: CVE-2023-35682 State: PUBLISHED Published: 2023-09-11T20:09:54.893Z Last Updated: 2025-05-05T15:17:59.539Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/apps/Launcher3/+/09f8b0e52e45a0b39bab457534ba2e5ae91ffad0 - https://source.andr
droid.googlesource.com/platform/packages/apps/Launcher3/+/09f8b0e52e45a0b39bab457534ba2e5ae91ffad0 - https://source.android.com/security/bulletin/2023-09-01
CVE ID: CVE-2023-35683 State: PUBLISHED Published: 2023-09-11T20:09:55.077Z Last Updated: 2024-09-26T15:47:01.584Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In bindSelection of DatabaseUtils.java, there is a possible way to access files from other applications due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/providers/MediaProvider/+/23d156ed1bed6d2c2b325f0be540d0afca510c49 - https://source.andr
glesource.com/platform/packages/providers/MediaProvider/+/23d156ed1bed6d2c2b325f0be540d0afca510c49 - https://source.android.com/security/bulletin/2023-09-01
CVE ID: CVE-2023-35684 State: PUBLISHED Published: 2023-09-11T20:09:55.266Z Last Updated: 2024-09-26T15:47:27.807Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to an integer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/668bbca29797728004d88db4c9b69102f3939008 - https://source.android.com/security/bull
latform/packages/modules/Bluetooth/+/668bbca29797728004d88db4c9b69102f3939008 - https://source.android.com/security/bulletin/2023-09-01
CVE ID: CVE-2023-35685 State: PUBLISHED Published: 2025-01-08T17:35:14.462Z Last Updated: 2025-01-31T17:59:16.638Z Vendors: Google Products: Android Description: In DevmemIntMapPages of devicemem_server.c, there is a possible physical page uaf due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://issuetracker.google.com/issues/42420027
CVE ID: CVE-2023-35686 State: PUBLISHED Published: 2024-11-13T17:13:19.238Z Last Updated: 2024-11-20T16:18:26.402Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2024-11-01
CVE ID: CVE-2023-35687 State: PUBLISHED Published: 2023-09-11T20:09:55.452Z Last Updated: 2024-09-26T15:49:16.654Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/av/+/ea6131efa76a0b2a12724ffd157909e2c6fb4036 - https://source.android.com/security/bulletin/2023-09-01
CVE ID: CVE-2023-35689 State: PUBLISHED Published: 2023-08-14T21:09:29.953Z Last Updated: 2024-10-09T14:22:00.504Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/wear/2023-08-01
CVE ID: CVE-2023-35690 State: PUBLISHED Published: 2023-12-04T22:40:49.946Z Last Updated: 2024-12-02T17:33:56.452Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-35691 State: PUBLISHED Published: 2023-07-12T23:53:56.481Z Last Updated: 2024-11-01T19:57:07.127Z Vendors: Google Products: Android Problem Types: Denial of service Description: there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-07-01
CVE ID: CVE-2023-35692 State: PUBLISHED Published: 2023-07-14T15:57:35.248Z Last Updated: 2024-10-31T15:42:13.248Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In getLocationCache of GeoLocation.java, there is a possible way to send a mock location during an emergency call due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-07-01
CVE ID: CVE-2023-35693 State: PUBLISHED Published: 2023-07-12T23:56:14.984Z Last Updated: 2024-11-01T19:10:28.904Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/kernel/common/+/8ff940b3513cb - https://source.android.com/security/bulletin/pixel/2023-07-01
CVE ID: CVE-2023-35694 State: PUBLISHED Published: 2023-07-12T23:56:38.081Z Last Updated: 2024-11-01T19:58:26.555Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In DMPixelLogger_ProcessDmCommand of DMPixelLogger.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-07-01
CVE ID: CVE-2023-35695 State: PUBLISHED Published: 2023-06-26T21:58:45.861Z Last Updated: 2024-12-05T15:41:25.722Z Vendors: Trend Micro, Inc. Products: Trend Micro Moibile Security for Enterprise Description: A remote attacker could leverage a vulnerability in Trend Micro Mobile Security (Enterprise) 9.8 SP5 to download a particular log file which may contain sensitive information regarding the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293106?language=en_US - https://www.tenable.com/security/research/tra-2023-17
CVE ID: CVE-2023-35696 State: PUBLISHED Published: 2023-07-10T09:32:57.842Z Last Updated: 2024-11-12T14:38:32.412Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: SICK AG Products: ICR890-4 Problem Types: CWE-668 Description: Unauthenticated endpoints in the SICK ICR890-4 could allow an unauthenticated remote attacker to retrieve sensitive information about the device via HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sick.com/psirt - https://sick.com/.well-known/csaf/white/2023/sca-2023-0006.pdf - https://sick.com/.well-known/csaf/white/2023/sca-2023-0006.json
CVE ID: CVE-2023-35697 State: PUBLISHED Published: 2023-07-10T09:35:52.067Z Last Updated: 2024-11-12T14:12:57.135Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SICK AG Products: ICR890-4 Problem Types: CWE-307 Description: Improper Restriction of Excessive Authentication Attempts in the SICK ICR890-4 could allow a remote attacker to brute-force user credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sick.com/psirt - https://sick.com/.well-known/csaf/white/2023/sca-2023-0006.pdf - https://sick.com/.well-known/csaf/white/2023/sca-2023-0006.json
CVE ID: CVE-2023-35698 State: PUBLISHED Published: 2023-07-10T09:37:22.798Z Last Updated: 2024-10-25T19:51:56.241Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SICK AG Products: ICR890-4 Problem Types: CWE-204 Description: Observable Response Discrepancy in the SICK ICR890-4 could allow a remote attacker to identify valid usernames for the FTP server from the response given during a failed login attempt. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sick.com/psirt - https://sick.com/.well-known/csaf/white/2023/sca-2023-0006.pdf - https://sick.com/.well-known/csaf/white/2023/sca-2023-0006.json
CVE ID: CVE-2023-35699 State: PUBLISHED Published: 2023-07-10T09:39:45.804Z Last Updated: 2024-10-25T19:51:39.248Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: SICK AG Products: ICR890-4 Problem Types: CWE-313 Description: Cleartext Storage on Disk in the SICK ICR890-4 could allow an unauthenticated attacker with local access to the device to disclose sensitive information by accessing a SD card. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sick.com/psirt - https://sick.com/.well-known/csaf/white/2023/sca-2023-0006.pdf - https://sick.com/.well-known/csaf/white/2023/sca-2023-0006.json
CVE ID: CVE-2023-35700 State: REJECTED Published: N/A Last Updated: 2023-07-02T21:37:26.274084Z Description: No description available.
CVE ID: CVE-2023-35701 State: PUBLISHED Published: 2024-05-03T08:11:08.215Z Last Updated: 2025-02-13T16:55:52.036Z Vendors: Apache Software Foundation Products: Apache Hive Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Hive. The vulnerability affects the Hive JDBC driver component and it can potentially lead to arbitrary code execution on the machine/endpoint that the JDBC driver (client) is running. The malicious user must have sufficient permissions to specify/edit JDBC URL(s) in an endpoint relying on the Hive JDBC driver and the JDBC client process must run under a privileged user to fully exploit the vulnerability. T
the Hive JDBC driver and the JDBC client process must run under a privileged user to fully exploit the vulnerability. The attacker can setup a malicious HTTP server and specify a JDBC URL pointing towards this server. When a JDBC connection is attempted, the malicious HTTP server can provide a special response with customized payload that can trigger the execution of certain commands in the JDBC client.This issue affects Apache Hive: from 4.0.0-alpha-1 before 4.0.0. Users are recommended to upgrade to version 4.0.0, which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/7zcv6l63spl4r66xwz5jv9rtrg2opx81
DP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/7zcv6l63spl4r66xwz5jv9rtrg2opx81 - http://www.openwall.com/lists/oss-security/2024/05/03/3
CVE ID: CVE-2023-35702 State: PUBLISHED Published: 2024-01-08T14:48:00.814Z Last Updated: 2025-11-04T18:14:47.540Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GTKWave Products: GTKWave Problem Types: CWE-121 Description: Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the fstReaderVarint32 function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1783 - https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE ID: CVE-2023-35703 State: PUBLISHED Published: 2024-01-08T14:48:01.249Z Last Updated: 2025-11-04T18:14:48.753Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GTKWave Products: GTKWave Problem Types: CWE-121 Description: Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the fstReaderVarint64 function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com
CVE ID: CVE-2023-35704 State: PUBLISHED Published: 2024-01-08T14:48:01.458Z Last Updated: 2025-11-04T18:14:50.024Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GTKWave Products: GTKWave Problem Types: CWE-121 Description: Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the fstReaderVarint32WithSkip function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintellig
unction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1783 - https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html