deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-20589
Published: 2022-12-16
Description: In valid_va_secbuf_check of drm_access_control.c, there is a possible ID due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238841928References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20590
Published: 2022-12-16
Description: In valid_va_sec_mfc_check of drm_access_control.c, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238932493References: N/A
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20591
Published: 2022-12-16
Description: In ppmpu_set of ppmpu.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238939706References: N/A
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20592
Published: 2022-12-16
Description: In ppmp_validate_secbuf of drm_fw.c, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238976908References: N/A
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20593
Published: 2022-12-16
Description: In pop_descriptor_string of BufferDescriptor.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239415809References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20594
Published: 2022-12-16
Description: In updateStart of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239567689References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20595
Published: 2022-12-16
Description: In getWpcAuthChallengeResponse of WirelessCharger.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239700137References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20596
Published: 2022-12-16
Description: In sendChunk of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239700400References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20597
Published: 2022-12-16
Description: In ppmpu_set of ppmpu.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243480506References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20598
Published: 2022-12-16
Description: In sec_media_protect of media.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege of secure mode MFC Core with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242357514References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20599
Published: 2022-12-16
Description: In Pixel firmware, there is a possible exposure of sensitive memory due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242332706References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20600
Published: 2022-12-16
Description: In TBD of TBD, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239847859References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20601
Published: 2022-12-16
Description: Product: AndroidVersions: Android kernelAndroid ID: A-204541506References: N/A
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20602
Published: 2022-12-16
Description: Product: AndroidVersions: Android kernelAndroid ID: A-211081867References: N/A
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20603
Published: 2022-12-16
Description: In SetDecompContextDb of RohcDeCompContextOfRbId.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-219265339References: N/A
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20604
Published: 2022-12-16
Description: In SAECOMM_SetDcnIdForPlmn of SAECOMM_DbManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure from a single device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-230463606References: N/A
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20605
Published: 2022-12-16
Description: In SAECOMM_CopyBufferBytes of SAECOMM_Utility.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-231722405References: N/A
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20606
Published: 2022-12-16
Description: In SAEMM_MiningCodecTableWithMsgIE of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-233230674References: N/A
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20607
Published: 2022-12-16
Description: In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with LTE authentication needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238914868References: N/A
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20608
Published: 2022-12-16
Description: In Pixel cellular firmware, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239239246References: N/A
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20609
Published: 2022-12-16
Description: In Pixel cellular firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239240808References: N/A
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-20610
Published: 2022-12-16
Description: In cellular modem firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to remote code execution with LTE authentication needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-240462530References: N/A
CVSS Score: 8.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-25626
Published: 2022-12-16
Description: An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to carry out server side tasks without a valid web session.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-425
References: https://support.broadcom.com/external/content/SecurityAdvisories/0/21136; https://support.broadcom.com/external/content/SecurityAdvisories/0/21136
CVE: CVE-2022-25627
Published: 2022-12-16
Description: An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Symantec Identity Manager 14.4
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-284
References: https://support.broadcom.com/external/content/SecurityAdvisories/0/21136; https://support.broadcom.com/external/content/SecurityAdvisories/0/21136
CVE: CVE-2022-25628
Published: 2022-12-16
Description: An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4
CVSS Score: 8.8 (HIGH)
CWE: CWE-611, CWE-611
References: https://support.broadcom.com/external/content/SecurityAdvisories/0/21136; https://support.broadcom.com/external/content/SecurityAdvisories/0/21136
CVE: CVE-2022-31707
Published: 2022-12-16
Description: vRealize Operations (vROps) contains a privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.2.
CVSS Score: 7.2 (HIGH)
CWE: CWE-269
References: https://www.vmware.com/security/advisories/VMSA-2022-0034.html; https://www.vmware.com/security/advisories/VMSA-2022-0034.html
CVE: CVE-2022-31708
Published: 2022-12-16
Description: vRealize Operations (vROps) contains a broken access control vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.4.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-284
References: https://www.vmware.com/security/advisories/VMSA-2022-0034.html; https://www.vmware.com/security/advisories/VMSA-2022-0034.html
CVE: CVE-2022-35694
Published: 2022-12-16
Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html
CVE: CVE-2022-35696
Published: 2022-12-16
Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html
CVE: CVE-2022-38106
Published: 2022-12-16
Description: This vulnerability happens in the web client versions 15.3.0 to Serv-U 15.3.1. This vulnerability affects the directory creation function.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=%20CVE-2022-38106; https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-3-2_release_notes.htm; https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-38106
CVE: CVE-2022-42343
Published: 2022-12-16
Description: Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A low-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://helpx.adobe.com/security/products/campaign/apsb22-58.html; https://helpx.adobe.com/security/products/campaign/apsb22-58.html
CVE: CVE-2022-42351
Published: 2022-12-16
Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to disclose low level confidentiality information. Exploitation of this issue does not require user interaction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html
CVE: CVE-2022-42360
Published: 2022-12-16
Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html
CVE: CVE-2022-42366
Published: 2022-12-16
Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html
CVE: CVE-2022-42367
Published: 2022-12-16
Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html
CVE: CVE-2022-42501
Published: 2022-12-16
Description: In HexString2Value of util.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241231403References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42502
Published: 2022-12-16
Description: In FacilityLock::Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241231970References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42503
Published: 2022-12-16
Description: In ProtocolMiscBuilder::BuildSetLinkCapaReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241231983References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42504
Published: 2022-12-16
Description: In CallDialReqData::encodeCallNumber of callreqdata.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241232209References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42505
Published: 2022-12-16
Description: In ProtocolMiscBuilder::BuildSetSignalReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241232492References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42506
Published: 2022-12-16
Description: In SimUpdatePbEntry::encode of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241388399References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42507
Published: 2022-12-16
Description: In ProtocolSimBuilder::BuildSimUpdatePb3gEntry of protocolsimbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241388774References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42508
Published: 2022-12-16
Description: In ProtocolCallBuilder::BuildSendUssd of protocolcallbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241388966References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42509
Published: 2022-12-16
Description: In CallDialReqData::encode of callreqdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241544307References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42510
Published: 2022-12-16
Description: In StringsRequestData::encode of requestdata.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241762656References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01