deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-0206
Published: 2020-06-11
Description: In the settings app, there is a possible app crash due to improper input validation. This could lead to local denial of service of the Settings app with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-136005061
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0207
Published: 2020-06-11
Description: In next_marker of jdmarker.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-135532289
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0208
Published: 2020-06-11
Description: In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145207098
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0209
Published: 2020-06-11
Description: In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145206842
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0210
Published: 2020-06-11
Description: In removeSharedAccountAsUser of AccountManager.java, there is a possible permissions bypass to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145206763
CVSS Score: 7.8 (HIGH)
CWE: CWE-610
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0211
Published: 2020-06-11
Description: In SumCompoundHorizontalTaps of convolve_neon.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-147491773
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0212
Published: 2020-06-11
Description: In _onBufferDestroyed of InputBufferManager.cpp, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-135140854
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-416
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0213
Published: 2020-06-11
Description: In hevcd_fmt_conv_420sp_to_420sp_av8 of ihevcd_fmt_conv_420sp_to_420sp.s, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10 Android-11 Android ID: A-143464314
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0214
Published: 2020-06-11
Description: In ce_t4t_process_select_file_cmd of ce_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140292264
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0215
Published: 2020-06-11
Description: In onCreate of ConfirmConnectActivity.java, there is a possible leak of Bluetooth information due to a permissions bypass. This could lead to local escalation of privilege that exposes a pairing Bluetooth MAC address with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1 Android ID: A-140417248
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0216
Published: 2020-06-11
Description: In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-126204073
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0217
Published: 2020-06-11
Description: In RW_T4tPresenceCheck of rw_t4t.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141331405
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0218
Published: 2020-06-11
Description: In loadSoundModel and related functions of SoundTriggerHwService.cpp, there is possible out of bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-136005905
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0219
Published: 2020-06-11
Description: In onCreate of SliceDeepLinkSpringBoard.java there is a possible insecure Intent. This could lead to local elevation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-122836081
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-0233
Published: 2020-06-11
Description: In main of main.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150225255
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-06-01; https://source.android.com/security/bulletin/pixel/2020-06-01
CVE: CVE-2020-11613
Published: 2020-06-11
Description: Mids' Reborn Hero Designer 2.6.0.7 has an elevation of privilege vulnerability due to default and insecure permissions being set for the installation folder. By default, the Authenticated Users group has Modify permissions to the installation folder. Because of this, any user on the system can replace binaries or plant malicious DLLs to obtain elevated, or different, privileges, depending on the context of the user that runs the application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-732
References: https://github.com/Crytilis/mids-reborn-hero-designer/releases; https://www.doyler.net/security-not-included/mids-reborn-vulnerabilities; https://github.com/Crytilis/mids-reborn-hero-designer/releases
CVE: CVE-2020-11614
Published: 2020-06-11
Description: Mids' Reborn Hero Designer 2.6.0.7 downloads the update manifest, as well as update files, over cleartext HTTP. Additionally, the application does not perform file integrity validation for files after download. An attacker can perform a man-in-the-middle attack against this connection and replace executable files with malicious versions, which the operating system then executes under the context of the user running Hero Designer.
CVSS Score: 8.1 (HIGH)
CWE: CWE-319, CWE-345
References: https://github.com/Crytilis/mids-reborn-hero-designer/releases; https://www.doyler.net/security-not-included/mids-reborn-vulnerabilities; https://github.com/Crytilis/mids-reborn-hero-designer/releases
CVE: CVE-2020-5411
Published: 2020-06-11
Description: When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this vulnerability by blacklisting known "deserialization gadgets". Spring Batch configures Jackson with global default typing enabled which means that through the previous exploit, arbitrary code could be executed if all of the following is true: * Spring Batch's Jackson support is being leveraged to serialize a job's ExecutionContext. * A malicious user gains write access to the data store used by the JobRepository (where the data to be deserialized is stored). In order to protect against this type of attack, Jackson prevents a set of untrusted gadget classes from being deserialized. Spring Batch should be proactive against blocking unknown "deserialization gadgets" when enabling default typing.
CVSS Score: 8.1 (HIGH)
CWE: CWE-502, CWE-502
References: https://tanzu.vmware.com/security/cve-2020-5411; https://tanzu.vmware.com/security/cve-2020-5411
CVE: CVE-2020-12725
Published: 2020-06-11
Description: Havoc Research discovered an authenticated Server-Side Request Forgery (SSRF) via the "JSON" data source of Redash open-source 8.0.0 and prior. Possibly, other connectors are affected. The SSRF is potent and provides a lot of flexibility in terms of being able to craft HTTP requests e.g., by adding headers, selecting any HTTP verb, etc.
CVSS Score: 7.2 (HIGH)
CWE: CWE-918
References: https://blog.redash.io; https://github.com/getredash/redash/commits/master; https://github.com/getredash/redash/issues/4869
CVE: CVE-2020-13702
Published: 2020-06-11
Description: The Rolling Proximity Identifier used in the Apple/Google Exposure Notification API beta through 2020-05-29 enables attackers to circumvent Bluetooth Smart Privacy because there is a secondary temporary UID. An attacker with access to Beacon or IoT networks can seamlessly track individual device movement via a Bluetooth LE discovery mechanism.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://blog.google/documents/70/Exposure_Notification_-_Bluetooth_Specification_v1.2.2.pdf; https://github.com/google/exposure-notifications-internals/commit/8f751a666697; https://github.com/google/exposure-notifications-internals/commit/8f751a666697c3cae0a56ae3464c2c6cbe31b69e
CVE: CVE-2020-12023
Published: 2020-06-11
Description: Philips IntelliBridge Enterprise (IBE), Versions B.12 and prior, IntelliBridge Enterprise system integration with SureSigns (VS4), EarlyVue (VS30) and IntelliVue Guardian (IGS). Unencrypted user credentials received in the IntelliBridge Enterprise (IBE) are logged within the transaction logs, which are secured behind the login based administrative web portal. The unencrypted user credentials sent from the affected products listed above, for the purpose of handshake or authentication with the Enterprise Systems, are logged as the payload in IntelliBridge Enterprise (IBE) within the transaction logs. An attacker with administrative privileges could exploit this vulnerability to read plain text credentials from log files.
CVSS Score: 2.0 (LOW)
CWE: CWE-532, CWE-532
References: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-20-163-01; https://www.philips.com/a-w/security/security-advisories/product-security-2020.html#2020_archive; https://www.us-cert.gov/ics/advisories/icsma-20-163-01
CVE: CVE-2020-12758
Published: 2020-06-11
Description: HashiCorp Consul and Consul Enterprise could crash when configured with an abnormally-formed service-router entry. Introduced in 1.6.0, fixed in 1.6.6 and 1.7.4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-404
References: https://github.com/hashicorp/consul/blob/v1.6.6/CHANGELOG.md; https://github.com/hashicorp/consul/blob/v1.7.4/CHANGELOG.md; https://github.com/hashicorp/consul/pull/7783
CVE: CVE-2020-12797
Published: 2020-06-11
Description: HashiCorp Consul and Consul Enterprise failed to enforce changes to legacy ACL token rules due to non-propagation to secondary data centers. Introduced in 1.4.0, fixed in 1.6.6 and 1.7.4.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/hashicorp/consul/blob/v1.6.6/CHANGELOG.md; https://github.com/hashicorp/consul/blob/v1.7.4/CHANGELOG.md; https://github.com/hashicorp/consul/pull/8047
CVE: CVE-2020-13170
Published: 2020-06-11
Description: HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data center, where replication to a secondary data center was not enabled. Introduced in 1.4.0, fixed in 1.6.6 and 1.7.4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/hashicorp/consul/blob/v1.6.6/CHANGELOG.md; https://github.com/hashicorp/consul/blob/v1.7.4/CHANGELOG.md; https://github.com/hashicorp/consul/pull/8068
CVE: CVE-2020-13250
Published: 2020-06-11
Description: HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching feature that was vulnerable to denial of service. Fixed in 1.6.6 and 1.7.4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/hashicorp/consul/blob/v1.6.6/CHANGELOG.md; https://github.com/hashicorp/consul/blob/v1.7.4/CHANGELOG.md; https://github.com/hashicorp/consul/pull/8023
CVE: CVE-2020-4045
Published: 2020-06-11
Description: SSB-DB version 20.0.0 has an information disclosure vulnerability. The get() method is supposed to only decrypt messages when you explicitly ask it to, but there is a bug where it's decrypting any message that it can. This means that it is returning the decrypted content of private messages, which a malicious peer could use to get access to private data. This only affects peers running SSB-DB@20.0.0 who also have private messages, and is only known to be exploitable if you're also running SSB-OOO (default in SSB-Server), which exposes a thin wrapper around get() to anonymous peers. This is fixed in version 20.0.1. Note that users of SSB-Server verion 16.0.0 should upgrade to 16.0.1 to get the fixed version of SSB-DB.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/ssbc/ssb-db/commit/43334d0871c9cc6220e0f6d[PII_REDACTED]f7761d4; https://github.com/ssbc/ssb-db/security/advisories/GHSA-mpgr-2cx9-327h; https://github.com/ssbc/ssb-db/commit/43334d0871c9cc6220e0f6d[PII_REDACTED]f7761d4
CVE: CVE-2020-14048
Published: 2020-06-12
Description: Zoho ManageEngine ServiceDesk Plus before 11.1 build 11115 allows remote unauthenticated attackers to change the installation status of deployed agents.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://gitlab.com/eLeN3Re/CVE-2020-14048; https://www.manageengine.com/products/service-desk/on-premises/readme.html; https://gitlab.com/eLeN3Re/CVE-2020-14048
CVE: CVE-2020-3928
Published: 2020-06-12
Description: GeoVision Door Access Control device family is hardcoded with a root password, which adopting an identical password in all devices.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-798
References: https://www.twcert.org.tw/tw/cp-132-3695-9e72d-1.html; https://www.twcert.org.tw/tw/cp-132-3695-9e72d-1.html
CVE: CVE-2020-3929
Published: 2020-06-12
Description: GeoVision Door Access Control device family employs shared cryptographic private keys for SSH and HTTPS. Attackers may conduct MITM attack with the derived keys and plaintext recover of encrypted messages.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-326
References: https://www.twcert.org.tw/tw/cp-132-3696-6601c-1.html; https://www.twcert.org.tw/tw/cp-132-3696-6601c-1.html
CVE: CVE-2020-3930
Published: 2020-06-12
Description: GeoVision Door Access Control device family improperly stores and controls access to system logs, any users can read these logs.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-532
References: https://www.twcert.org.tw/tw/cp-132-3697-780d0-1.html; https://www.twcert.org.tw/tw/cp-132-3697-780d0-1.html
CVE: CVE-2020-4251
Published: 2020-06-12
Description: IBM API Connect 5.0.0.0 through 5.0.8.8 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 175489.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/175489; https://www.ibm.com/support/pages/node/6209125; https://exchange.xforce.ibmcloud.com/vulnerabilities/175489
CVE: CVE-2020-10732
Published: 2020-06-12
Description: A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data.
CVSS Score: 3.3 (LOW)
CWE: CWE-908, CWE-908
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10732
CVE: CVE-2020-9633
Published: 2020-06-12
Description: Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/flash-player/apsb20-30.html; https://security.gentoo.org/glsa/202006-09; https://helpx.adobe.com/security/products/flash-player/apsb20-30.html
CVE: CVE-2020-9634
Published: 2020-06-12
Description: Adobe Framemaker versions 2019.0.5 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-32.html; https://helpx.adobe.com/security/products/framemaker/apsb20-32.html
CVE: CVE-2020-9635
Published: 2020-06-12
Description: Adobe Framemaker versions 2019.0.5 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-32.html; https://helpx.adobe.com/security/products/framemaker/apsb20-32.html
CVE: CVE-2020-9636
Published: 2020-06-12
Description: Adobe Framemaker versions 2019.0.5 and below have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-32.html; https://helpx.adobe.com/security/products/framemaker/apsb20-32.html
CVE: CVE-2020-9643
Published: 2020-06-12
Description: Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-31.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-31.html
CVE: CVE-2020-9644
Published: 2020-06-12
Description: Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (stored) vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-31.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-31.html
CVE: CVE-2020-9645
Published: 2020-06-12
Description: Adobe Experience Manager versions 6.5 and earlier have a blind server-side request forgery (ssrf) vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-31.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-31.html
CVE: CVE-2020-9647
Published: 2020-06-12
Description: Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (dom-based) vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-31.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-31.html
CVE: CVE-2020-9648
Published: 2020-06-12
Description: Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-31.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-31.html
CVE: CVE-2020-9651
Published: 2020-06-12
Description: Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (reflected) vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-31.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-31.html
CVE: CVE-2020-14004
Published: 2020-06-12
Description: An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script (run as part of the icinga2 systemd service) executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrary files can be changed to mode 2750 by the unprivileged icinga2 user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00014.html; http://www.openwall.com/lists/oss-security/2020/06/12/1; https://bugzilla.suse.com/show_bug.cgi?id=CVE-2020-14004