deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-26012
Published: 2023-05-04
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Denzel Chia | Phire Design Custom Login Page plugin <= 2.0 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wp-custom-login-page/wordpress-custom-login-page-plugin-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-custom-login-page/wordpress-custom-login-page-plugin-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-29827
Published: 2023-05-04
Description: ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration settings of the closeDelimiter parameter. NOTE: this is disputed by the vendor because the render function is not intended to be used with untrusted input.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: https://github.com/mde/ejs/blob/main/SECURITY.md#out-of-scope-vulnerabilities; https://github.com/mde/ejs/issues/720; https://github.com/mde/ejs/blob/main/SECURITY.md#out-of-scope-vulnerabilities
CVE: CVE-2023-30619
Published: 2023-05-04
Description: Tuleap Open ALM is a Libre and Open Source tool for end to end traceability of application and system developments. The title of an artifact is not properly escaped in the tooltip. A malicious user with the capability to create an artifact or to edit a field title could force victim to execute uncontrolled code. This issue has been patched in version 14.7.99.143.

CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Enalean/tuleap/commit/fdc93a736cbccad05de16ff0cc7cc3ef18dc93df; https://github.com/Enalean/tuleap/security/advisories/GHSA-7fm3-cr3g-5922; https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=fdc93a736cbccad05de16ff0cc7cc3ef18dc93df
CVE: CVE-2023-29994
Published: 2023-05-04
Description: In NanoMQ v0.15.0-0, Heap overflow occurs in read_byte function of mqtt_code.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/emqx/nanomq/issues/1042; https://github.com/emqx/nanomq/issues/1042
CVE: CVE-2023-29995
Published: 2023-05-04
Description: In NanoMQ v0.15.0-0, a Heap overflow occurs in copyn_utf8_str function of mqtt_parser.c
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/emqx/nanomq/issues/1043; https://github.com/emqx/nanomq/issues/1043
CVE: CVE-2023-29996
Published: 2023-05-04
Description: In NanoMQ v0.15.0-0, segment fault with Null Pointer Dereference occurs in the process of decoding subinfo_decode and unsubinfo_decode.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://github.com/emqx/nanomq/issues/1038; https://github.com/emqx/nanomq/issues/1038
CVE: CVE-2023-2519
Published: 2023-05-04
Description: A vulnerability has been found in Caton CTP Relay Server 1.2.9 and classified as critical. This vulnerability affects unknown code of the file /server/api/v1/login of the component API. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. VDB-228010 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://vuldb.com/?ctiid.228010; https://vuldb.com/?id.228010; https://vuldb.com/?ctiid.228010
CVE: CVE-2023-2520
Published: 2023-05-04
Description: A vulnerability was found in Caton Prime 2.1.2.51.e8d7225049[PII_REDACTED]01) and classified as critical. This issue affects some unknown processing of the file cgi-bin/tools_ping.cgi?action=Command of the component Ping Handler. The manipulation of the argument Destination leads to command injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-228011. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://vuldb.com/?ctiid.228011; https://vuldb.com/?id.228011; https://www.youtube.com/watch?v=H1y7CXjJDmU
CVE: CVE-2023-2521
Published: 2023-05-04
Description: A vulnerability was found in NEXTU NEXT-7004N 3.0.1. It has been classified as problematic. Affected is an unknown function of the file /boafrm/formFilter of the component POST Request Handler. The manipulation of the argument url with the input <svg onload=alert(1337)> leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-228012. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://vuldb.com/?ctiid.228012; https://vuldb.com/?id.228012; https://vuldb.com/?ctiid.228012
CVE: CVE-2023-30184
Published: 2023-05-04
Description: A stored cross-site scripting (XSS) vulnerability in Typecho v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter at /index.php/archives/1/comment.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/typecho/typecho/issues/1546; https://github.com/typecho/typecho/issues/1546
CVE: CVE-2023-30203
Published: 2023-05-04
Description: Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the event_id parameter at /php-jms/result_sheet.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/debug601/bug_report/blob/main/vendors/oretnom23/judging-management-system/SQLi-2.md; https://github.com/debug601/bug_report/blob/main/vendors/oretnom23/judging-management-system/SQLi-2.md
CVE: CVE-2023-2522
Published: 2023-05-04
Description: A vulnerability was found in Chengdu VEC40G 3.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /send_order.cgi?parameter=access_detect of the component Network Detection. The manipulation of the argument COUNT with the input 3 | netstat -an leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228013 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-78
References: https://github.com/eckert-lcc/cve/blob/main/Flying%20fish%20star.md; https://vuldb.com/?ctiid.228013; https://vuldb.com/?id.228013
CVE: CVE-2023-2523
Published: 2023-05-04
Description: A vulnerability was found in Weaver E-Office 9.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file App/Ajax/ajax.php?action=mobile_upload_save. The manipulation of the argument upload_quwan leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-228014 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/RCEraser/cve/blob/main/Weaver.md; https://vuldb.com/?ctiid.228014; https://vuldb.com/?id.228014
CVE: CVE-2023-30550
Published: 2023-05-04
Description: MeterSphere is an open source continuous testing platform, covering functions such as test tracking, interface testing, UI testing, and performance testing. This IDOR vulnerability allows the administrator of a project to modify other projects under the workspace. An attacker can obtain some operating permissions. The issue has been fixed in version 2.9.0.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-639, CWE-639, CWE-639
References: https://github.com/metersphere/metersphere/releases/tag/v2.9.0; https://github.com/metersphere/metersphere/security/advisories/GHSA-j5cq-cpw2-gp2q; https://github.com/metersphere/metersphere/releases/tag/v2.9.0
CVE: CVE-2023-2524
Published: 2023-05-04
Description: A vulnerability classified as critical has been found in Control iD RHiD 23.3.19.0. This affects an unknown part of the file /v2/#/. The manipulation leads to direct request. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-228015. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-425
References: https://vuldb.com/?ctiid.228015; https://vuldb.com/?id.228015; https://vuldb.com/?ctiid.228015
CVE: CVE-2023-20126
Published: 2023-05-04
Description: A vulnerability in the web-based management interface of Cisco SPA112 2-Port Phone Adapters could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to a missing authentication process within the firmware upgrade function. An attacker could exploit this vulnerability by upgrading an affected device to a crafted version of firmware. A successful exploit could allow the attacker to execute arbitrary code on the affected device with full privileges. Cisco has not released firmware updates to address this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-unauth-upgrade-UqhyTWW; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-unauth-upgrade-UqhyTWW
CVE: CVE-2023-23059
Published: 2023-05-04
Description: An issue was discovered in GeoVision GV-Edge Recording Manager 2.2.3.0 for windows, which contains improper permissions within the default installation and allows attackers to execute arbitrary code and gain escalated privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276, CWE-276
References: http://geovision.com; http://gv-edge.com; https://packetstormsecurity.com/files/172141/GV-Edge-Recording-Manager-2.2.3.0-Privilege-Escalation.html
CVE: CVE-2023-25458
Published: 2023-05-04
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GMO Internet Group, Inc. TypeSquare Webfonts for ConoHa plugin <= 2.0.3 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/ts-webfonts-for-conoha/wordpress-typesquare-webfonts-for-conoha-plugin-2-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/ts-webfonts-for-conoha/wordpress-typesquare-webfonts-for-conoha-plugin-2-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-25961
Published: 2023-05-04
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Catch Themes Darcie theme <= 1.1.5 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/darcie/wordpress-darcie-theme-1-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/darcie/wordpress-darcie-theme-1-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-25977
Published: 2023-05-04
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in 9seeds.Com CPT – Speakers plugin <= 1.1 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/cpt-speakers/wordpress-cpt-speakers-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/cpt-speakers/wordpress-cpt-speakers-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-25982
Published: 2023-05-04
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Eirudo Simple YouTube Responsive plugin <= 2.5 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/simple-youtube-responsive/wordpress-simple-youtube-responsive-plugin-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/simple-youtube-responsive/wordpress-simple-youtube-responsive-plugin-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-30094
Published: 2023-05-04
Description: A stored cross-site scripting (XSS) vulnerability in TotalJS Flow v10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field in the settings module.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/totaljs/flow/issues/100; https://www.edoardoottavianelli.it/CVE-2023-30094/; https://www.youtube.com/watch?v=vOb9Fyg3iVo
CVE: CVE-2023-30095
Published: 2023-05-04
Description: A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the channel description field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/totaljs/messenger/issues/11; https://www.edoardoottavianelli.it/CVE-2023-30095/; https://www.youtube.com/watch?v=2k7e9E0Cw0Y
CVE: CVE-2023-30096
Published: 2023-05-04
Description: A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user information field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/totaljs/messenger/issues/10; https://www.edoardoottavianelli.it/CVE-2023-30096/; https://www.youtube.com/watch?v=ZA7R001kE2w
CVE: CVE-2023-30097
Published: 2023-05-04
Description: A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the private task field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/totaljs/messenger/issues/9; https://www.edoardoottavianelli.it/CVE-2023-30097/; https://www.youtube.com/watch?v=VAlbkvOm_DU
CVE: CVE-2023-30264
Published: 2023-05-04
Description: CLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via application/admin/controller/Template.php:update.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://gist.github.com/HuBenLab/8498761dc3eaaed724a134197f092c47; https://gist.github.com/HuBenLab/8498761dc3eaaed724a134197f092c47
CVE: CVE-2023-30268
Published: 2023-05-04
Description: CLTPHP <=6.0 is vulnerable to Improper Input Validation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://gist.github.com/HuBenLab/16dc2f87f91a6f8c60eefce5abf18c08; https://gist.github.com/HuBenLab/16dc2f87f91a6f8c60eefce5abf18c08
CVE: CVE-2023-31284
Published: 2023-05-04
Description: illumos illumos-gate before 676abcb has a stack buffer overflow in /dev/net, leading to privilege escalation via a stat on a long file name in /dev/net.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://www.openwall.com/lists/oss-security/2023/09/13/4; http://www.openwall.com/lists/oss-security/2023/09/13/5; http://www.openwall.com/lists/oss-security/2023/09/14/4
CVE: CVE-2022-47434
Published: 2023-05-04
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PB SEO Friendly Images plugin <= 4.0.5 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/pb-seo-friendly-images/wordpress-pb-seo-friendly-images-plugin-4-0-5-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/pb-seo-friendly-images/wordpress-pb-seo-friendly-images-plugin-4-0-5-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2022-47449
Published: 2023-05-04
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RexTheme Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD plugin <= 3.1.5 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/cart-lift/wordpress-cart-lift-abandoned-cart-recovery-for-woocommerce-and-edd-plugin-3-1-5-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/cart-lift/wordpress-cart-lift-abandoned-cart-recovery-for-woocommerce-and-edd-plugin-3-1-5-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-21484
Published: 2023-05-04
Description: Improper access control vulnerability in AppLock prior to SMR May-2023 Release 1 allows local attackers without proper permission to execute a privileged operation.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE: CVE-2023-21485
Published: 2023-05-04
Description: Improper export of android application components vulnerability in VideoPreviewActivity in Call Settings to SMR May-2023 Release 1 allows physical attackers to access some media data stored in sandbox.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-926
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE: CVE-2023-21486
Published: 2023-05-04
Description: Improper export of android application components vulnerability in ImagePreviewActivity in Call Settings to SMR May-2023 Release 1 allows physical attackers to access some media data stored in sandbox.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-926
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE: CVE-2023-21487
Published: 2023-05-04
Description: Improper access control vulnerability in Telephony framework prior to SMR May-2023 Release 1 allows local attackers to change a call setting.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE: CVE-2023-21488
Published: 2023-05-04
Description: Improper access control vulnerablility in Tips prior to SMR May-2023 Release 1 allows local attackers to launch arbitrary activity in Tips.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-284
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE: CVE-2023-21489
Published: 2023-05-04
Description: Heap out-of-bounds write vulnerability in bootloader prior to SMR May-2023 Release 1 allows a physical attacker to execute arbitrary code.
CVSS Score: 7.1 (HIGH)
CWE: CWE-787, CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE: CVE-2023-21490
Published: 2023-05-04
Description: Improper access control in GearManagerStub prior to SMR May-2023 Release 1 allows a local attacker to delete applications installed by watchmanager.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-284
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE: CVE-2023-21491
Published: 2023-05-04
Description: Improper access control vulnerability in ThemeManager prior to SMR May-2023 Release 1 allows local attackers to write arbitrary files with system privilege.
CVSS Score: 8.5 (HIGH)
CWE: CWE-284
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE: CVE-2023-21492
Published: 2023-05-04
Description: Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21492
CVE: CVE-2023-21493
Published: 2023-05-04
Description: Improper access control vulnerability in SemShareFileProvider prior to SMR May-2023 Release 1 allows local attackers to access protected data.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-284
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE: CVE-2023-21494
Published: 2023-05-04
Description: Potential buffer overflow vulnerability in auth api in mm_Authentication.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-20, CWE-120
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE: CVE-2023-21495
Published: 2023-05-04
Description: Improper access control vulnerability in Knox Enrollment Service prior to SMR May-2023 Release 1 allow attacker install KSP app when device admin is set.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-284
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE: CVE-2023-21496
Published: 2023-05-04
Description: Active Debug Code vulnerability in ActivityManagerService prior to SMR May-2023 Release 1 allows attacker to use debug function via setting debug level.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-489
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE: CVE-2023-21497
Published: 2023-05-04
Description: Use of externally-controlled format string vulnerability in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the memory address.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-134, CWE-134
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE: CVE-2023-21498
Published: 2023-05-04
Description: Improper input validation vulnerability in setPartnerTAInfo in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to overwrite the trustlet memory.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE: CVE-2023-21499
Published: 2023-05-04
Description: Out-of-bounds write vulnerability in TA_Communication_mpos_encrypt_pin in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code.
CVSS Score: 8.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE: CVE-2023-21500
Published: 2023-05-04
Description: Double free validation vulnerability in setPinPadImages in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the trustlet memory.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-415, CWE-415
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE: CVE-2023-21501
Published: 2023-05-04
Description: Improper input validation vulnerability in mPOS fiserve trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20, CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE: CVE-2023-21502
Published: 2023-05-04
Description: Improper input validation vulnerability in FactoryTest application prior to SMR May-2023 Release 1 allows local attackers to get privilege escalation via debugging commands.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05