deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-13183
Published: 2018-01-12
Description: In the OMXNodeInstance::useBuffer and IOMX::freeBuffer functions, there is a possible use after free due to a race condition if the user frees the buffer while it's being used in another thread. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 8.1. Android ID: A-38118127.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.securityfocus.com/bid/102421; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-13184
Published: 2018-01-12
Description: In the enableVSyncInjections function of SurfaceFlinger, there is a possible use after free of mVSyncInjector. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-65483324.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/102414; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-13185
Published: 2018-01-12
Description: An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65123471.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-200
References: https://android.googlesource.com/platform/external/libhevc/+/2b9fb0c2074d370a254b35e2489de2d94943578d; https://source.android.com/security/bulletin/pixel/2018-01-01; https://android.googlesource.com/platform/external/libhevc/+/2b9fb0c2074d370a254b35e2489de2d94943578d
CVE: CVE-2017-13186
Published: 2018-01-12
Description: A vulnerability in the Android media framework (libavc) related to incorrect use of mmco parameters. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65735716.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://android.googlesource.com/platform/external/libavc/+/6c327afb263837bc90760c55c6605b26161a4eb9; https://source.android.com/security/bulletin/pixel/2018-01-01; https://android.googlesource.com/platform/external/libavc/+/6c327afb263837bc90760c55c6605b26161a4eb9
CVE: CVE-2017-13187
Published: 2018-01-12
Description: An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65034175.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-200
References: https://android.googlesource.com/platform/external/libhevc/+/7c9be319a279654e55a6d757265f88c61a16a4d5; https://source.android.com/security/bulletin/pixel/2018-01-01; https://android.googlesource.com/platform/external/libhevc/+/7c9be319a279654e55a6d757265f88c61a16a4d5
CVE: CVE-2017-13188
Published: 2018-01-12
Description: An information disclosure vulnerability in the Android media framework (aac). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65280786.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-200
References: https://android.googlesource.com/platform/external/aac/+/8e3be529372892e20ccf196809bc73276c822189; https://source.android.com/security/bulletin/pixel/2018-01-01; https://android.googlesource.com/platform/external/aac/+/8e3be529372892e20ccf196809bc73276c822189
CVE: CVE-2017-13189
Published: 2018-01-12
Description: A vulnerability in the Android media framework (libavc) related to handling dec_hdl memory allocation failures. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68300072.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://android.googlesource.com/platform/external/libavc/+/5acaa6fc86c73a750e5f4900c4e2d44bf22f683a; https://source.android.com/security/bulletin/pixel/2018-01-01; https://android.googlesource.com/platform/external/libavc/+/5acaa6fc86c73a750e5f4900c4e2d44bf22f683a
CVE: CVE-2017-13190
Published: 2018-01-12
Description: A vulnerability in the Android media framework (libhevc) related to handling ps_codec_obj memory allocation failures. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68299873.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://android.googlesource.com/platform/external/libhevc/+/3ed3c6b79a7b9a60c475dd4936ad57b0b92fd600; https://source.android.com/security/bulletin/pixel/2018-01-01; https://android.googlesource.com/platform/external/libhevc/+/3ed3c6b79a7b9a60c475dd4936ad57b0b92fd600
CVE: CVE-2017-13191
Published: 2018-01-12
Description: In the ihevcd_decode function of ihevcd_decode.c, there is an infinite loop due to an incomplete frame error. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64380403.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://www.securityfocus.com/bid/102414; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-13192
Published: 2018-01-12
Description: In the ihevcd_parse_slice_header function of ihevcd_parse_slice_header.c a slice address of zero after the first slice could result in an infinite loop. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64380202.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://www.securityfocus.com/bid/102414; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-13193
Published: 2018-01-12
Description: In ihevcd_decode.c there is a possible infinite loop due to bytes for an sps of unsupported resolution resulting in the same sps being fed in over and over. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65718319.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://www.securityfocus.com/bid/102414; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-13194
Published: 2018-01-12
Description: A vulnerability in the Android media framework (libvpx) related to odd frame width. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64710201.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://android.googlesource.com/platform/external/libvpx/+/55cd1dd7c8d0a3de907d22e0f12718733f4e41d9; https://lists.debian.org/debian-lts-announce/2018/02/msg00025.html; https://source.android.com/security/bulletin/pixel/2018-01-01
CVE: CVE-2017-13195
Published: 2018-01-12
Description: In the ihevcd_parse_sps function of ihevcd_parse_headers.c, several parameter values could be negative which could lead to negative indexes which could lead to an infinite loop. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65398821.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://www.securityfocus.com/bid/102414; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-13196
Published: 2018-01-12
Description: In several places in ihevcd_decode.c, a dead loop could occur due to incomplete frames which could lead to memory leaks. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63522067.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: http://www.securityfocus.com/bid/102414; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-13197
Published: 2018-01-12
Description: In the ihevcd_parse_slice.c function, slave threads are not joined if there is an error. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64784973.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102414; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-13198
Published: 2018-01-12
Description: A vulnerability in the Android media framework (ex) related to composition of frames lacking a color map. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68399117.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://android.googlesource.com/platform/frameworks/ex/+/ede8f95361dcbf9757aaf6d25ce59fa3767344e3; https://source.android.com/security/bulletin/pixel/2018-01-01; https://android.googlesource.com/platform/frameworks/ex/+/ede8f95361dcbf9757aaf6d25ce59fa3767344e3
CVE: CVE-2017-13199
Published: 2018-01-12
Description: In Bitmap.ccp if Bitmap.nativeCreate fails an out of memory exception is not thrown leading to a java.io.IOException later on. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-33846679.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755
References: http://www.securityfocus.com/bid/102414; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-13200
Published: 2018-01-12
Description: An information disclosure vulnerability in the Android media framework (av) related to id3 unsynchronization. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63100526.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://android.googlesource.com/platform/frameworks/av/+/dd3ca4d6b81a9ae2ddf358b7b93d2f8c010921f5; https://source.android.com/security/bulletin/pixel/2018-01-01; https://android.googlesource.com/platform/frameworks/av/+/dd3ca4d6b81a9ae2ddf358b7b93d2f8c010921f5
CVE: CVE-2017-13201
Published: 2018-01-12
Description: An information disclosure vulnerability in the Android media framework (mediadrm). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63982768.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102529; https://source.android.com/security/bulletin/pixel/2018-01-01; http://www.securityfocus.com/bid/102529
CVE: CVE-2017-13202
Published: 2018-01-12
Description: An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67647856.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102521; https://source.android.com/security/bulletin/pixel/2018-01-01; http://www.securityfocus.com/bid/102521
CVE: CVE-2017-13203
Published: 2018-01-12
Description: An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63122634.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-200
References: https://android.googlesource.com/platform/external/libavc/+/e86d3cfd2bc28dac[PII_REDACTED]51e5638d54a848; https://source.android.com/security/bulletin/pixel/2018-01-01; https://android.googlesource.com/platform/external/libavc/+/e86d3cfd2bc28dac[PII_REDACTED]51e5638d54a848
CVE: CVE-2017-13204
Published: 2018-01-12
Description: An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64380237.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-200
References: https://android.googlesource.com/platform/external/libavc/+/42cf02965b11c397dd37a0063e683cef005bc0ae; https://source.android.com/security/bulletin/pixel/2018-01-01; https://android.googlesource.com/platform/external/libavc/+/42cf02965b11c397dd37a0063e683cef005bc0ae
CVE: CVE-2017-13205
Published: 2018-01-12
Description: An information disclosure vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64550583.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-200
References: https://android.googlesource.com/platform/external/libmpeg2/+/29a78a11844fc027fa44be7f8bd8dc1cf8bf89f6; https://source.android.com/security/bulletin/pixel/2018-01-01; https://android.googlesource.com/platform/external/libmpeg2/+/29a78a11844fc027fa44be7f8bd8dc1cf8bf89f6
CVE: CVE-2017-13206
Published: 2018-01-12
Description: An information disclosure vulnerability in the Android media framework (aacdec). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65025048.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102523; https://source.android.com/security/bulletin/pixel/2018-01-01; http://www.securityfocus.com/bid/102523
CVE: CVE-2017-13207
Published: 2018-01-12
Description: An information disclosure vulnerability in the Android media framework (stagefright mpeg4writer). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37564426.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102526; https://source.android.com/security/bulletin/pixel/2018-01-01; http://www.securityfocus.com/bid/102526
CVE: CVE-2017-13208
Published: 2018-01-12
Description: In receive_packet of libnetutils/packet.c, there is a possible out-of-bounds write due to a missing bounds check on the DHCP response. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67474440.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102415; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-13209
Published: 2018-01-12
Description: In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller which could allow an application or service to replace a HAL service with its own service. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-68217907.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: http://www.securityfocus.com/bid/102415; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-13210
Published: 2018-01-12
Description: In CameraDeviceClient::submitRequestList of CameraDeviceClient.cpp, there is an out-of-bounds write if metadataSize is too small. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67782345.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102415; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-13211
Published: 2018-01-12
Description: In bta_scan_results_cb_impl of btif_ble_scanner.cc, there is possible resource exhaustion if a large number of repeated BLE scan results are received. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0. Android ID: A-65174158.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.securityfocus.com/bid/102415; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-13212
Published: 2018-01-12
Description: An elevation of privilege vulnerability in the Android system (systemui). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62187985.
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2018-01-01; https://source.android.com/security/bulletin/pixel/2018-01-01
CVE: CVE-2017-13213
Published: 2018-01-12
Description: An elevation of privilege vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Android ID: A-63374465. References: B-V[PII_REDACTED].
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2018-01-01; https://source.android.com/security/bulletin/pixel/2018-01-01
CVE: CVE-2017-13214
Published: 2018-01-12
Description: In the hardware HEVC decoder, some media files could cause a page fault. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-38495900.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/102416; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-13215
Published: 2018-01-12
Description: A elevation of privilege vulnerability in the Upstream kernel skcipher. Product: Android. Versions: Android kernel. Android ID: A-64386293. References: Upstream kernel.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/102390; http://www.securitytracker.com/id/1040106; https://access.redhat.com/errata/RHSA-2018:2384
CVE: CVE-2017-13216
Published: 2018-01-12
Description: In ashmem_ioctl of ashmem.c, there is an out-of-bounds write due to insufficient locking when accessing asma. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-66954097.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102390; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-13217
Published: 2018-01-12
Description: In DisplayFtmItem in the bootloader, there is an out-of-bounds write due to reading a string without verifying that it's null-terminated. This could lead to a secure boot bypass and a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-68269077.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102423; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-13218
Published: 2018-01-12
Description: Access to CNTVCT_EL0 in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear could be used for side channel attacks and this could lead to local information disclosure with no additional execution privileges needed in FSM9055, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA4531, QCA9980, QCN5502, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/102390; http://www.securitytracker.com/id/1040106
CVE: CVE-2017-13219
Published: 2018-01-12
Description: A denial of service vulnerability in the Upstream kernel synaptics touchscreen controller. Product: Android. Versions: Android kernel. Android ID: A-62800865.
CVSS Score: 7.5 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2018-01-01; https://source.android.com/security/bulletin/pixel/2018-01-01
CVE: CVE-2017-13220
Published: 2018-01-12
Description: An elevation of privilege vulnerability in the Upstream kernel bluez. Product: Android. Versions: Android kernel. Android ID: A-63527053.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843
References: https://bugzilla.redhat.com/show_bug.cgi?id=1536155; https://bugzilla.suse.com/show_bug.cgi?id=1076537; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=51bda2bca53b265715ca1852528f38dc67429d9a
CVE: CVE-2017-13221
Published: 2018-01-12
Description: An elevation of privilege vulnerability in the Upstream kernel wifi driver. Product: Android. Versions: Android kernel. Android ID: A-64709938.
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2018-01-01; https://source.android.com/security/bulletin/pixel/2018-01-01
CVE: CVE-2017-13222
Published: 2018-01-12
Description: An information disclosure vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Android ID: A-38159576.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://source.android.com/security/bulletin/pixel/2018-01-01; https://source.android.com/security/bulletin/pixel/2018-01-01
CVE: CVE-2017-13225
Published: 2018-01-12
Description: In libMtkOmxVdec.so there is a possible heap buffer overflow. This could lead to a remote elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-38308024. References: M-ALPS03495789.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102420; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-13226
Published: 2018-01-12
Description: An elevation of privilege vulnerability in the MediaTek mtk. Product: Android. Versions: Android kernel. Android ID: A-32591194. References: M-ALPS03149184.
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2018-01-01; https://source.android.com/security/bulletin/pixel/2018-01-01
CVE: CVE-2018-5651
Published: 2018-01-13
Description: An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php dark_mode_start parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/dark-mode.md; https://wpvulndb.com/vulnerabilities/9008; https://github.com/d4wner/Vulnerabilities-Report/blob/master/dark-mode.md
CVE: CVE-2018-5652
Published: 2018-01-13
Description: An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php dark_mode_end parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/dark-mode.md; https://wpvulndb.com/vulnerabilities/9008; https://github.com/d4wner/Vulnerabilities-Report/blob/master/dark-mode.md
CVE: CVE-2018-5653
Published: 2018-01-13
Description: An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php weblizar_pffree_settings_save_get-users parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/weblizar-pinterest-feeds.md; https://wpvulndb.com/vulnerabilities/9009; https://github.com/d4wner/Vulnerabilities-Report/blob/master/weblizar-pinterest-feeds.md