deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-34933
Published: 2023-06-28
Description: A stack overflow in the UpdateWanParams function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/h4kuy4/vuln/blob/main/H3C_B1STW/CVE-2023-34933.md; https://github.com/h4kuy4/vuln/blob/main/H3C_B1STW/CVE-2023-34933.md
CVE: CVE-2023-34934
Published: 2023-06-28
Description: A stack overflow in the Edit_BasicSSID_5G function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/h4kuy4/vuln/blob/main/H3C_B1STW/CVE-2023-34934.md; https://github.com/h4kuy4/vuln/blob/main/H3C_B1STW/CVE-2023-34934.md
CVE: CVE-2023-34935
Published: 2023-06-28
Description: A stack overflow in the AddWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/h4kuy4/vuln/blob/main/H3C_B1STW/CVE-2023-34935.md; https://github.com/h4kuy4/vuln/blob/main/H3C_B1STW/CVE-2023-34935.md
CVE: CVE-2023-34936
Published: 2023-06-28
Description: A stack overflow in the UpdateMacClone function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/h4kuy4/vuln/blob/main/H3C_B1STW/CVE-2023-34936.md; https://github.com/h4kuy4/vuln/blob/main/H3C_B1STW/CVE-2023-34936.md
CVE: CVE-2023-34937
Published: 2023-06-28
Description: A stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/h4kuy4/vuln/blob/main/H3C_B1STW/CVE-2023-34937.md; https://github.com/h4kuy4/vuln/blob/main/H3C_B1STW/CVE-2023-34937.md
CVE: CVE-2023-27866
Published: 2023-06-28
Description: IBM Informix JDBC Driver 4.10 and 4.50 is susceptible to remote code execution attack via JNDI injection when driver code or the application using the driver do not verify supplied LDAP URL in Connect String.  IBM X-Force ID:  249511.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-94, CWE-94
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/249511; https://www.ibm.com/support/pages/node/7007615; https://exchange.xforce.ibmcloud.com/vulnerabilities/249511
CVE: CVE-2023-2625
Published: 2023-06-28
Description: A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, having any level of access VIEWER to ADMIN. To exploit the vulnerability the attacker can inject shell commands through a particular field of the web user interface that will be executed by the system.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://search.abb.com/library/Download.aspx?DocumentID=8DBD000163&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=8DBD000163&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2021-31937
Published: 2023-06-28
Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVSS Score: 8.2 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31937; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31937
CVE: CVE-2022-20443
Published: 2023-06-28
Description: In hasInputInfo of Layer.cpp, there is a possible bypass of user interaction requirements due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-194480991
CVSS Score: 7.8 (HIGH)
CWE: CWE-1021
References: https://source.android.com/security/bulletin/android-13; https://source.android.com/security/bulletin/android-13
CVE: CVE-2023-21066
Published: 2023-06-28
Description: In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-250100597References: N/A
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21146
Published: 2023-06-28
Description: there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239867994References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21147
Published: 2023-06-28
Description: In lwis_i2c_device_disable of lwis_device_i2c.c, there is a possible UAF due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-269661912References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21148
Published: 2023-06-28
Description: In BuildSetConfig of protocolimsbuilder.cpp, there is a possible out of bounds read due to a missing null check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-263783657References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21149
Published: 2023-06-28
Description: In registerGsmaServiceIntentReceiver of ShannonRcsService.java, there is a possible way to activate/deactivate RCS service due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-270050709References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21150
Published: 2023-06-28
Description: In handle_set_parameters_ctrl of hal_socket.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-267312009References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21151
Published: 2023-06-28
Description: In the Google BMS kernel module, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-265149414References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21152
Published: 2023-06-28
Description: In FaceStatsAnalyzer::InterpolateWeightList of face_stats_analyzer.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-269174022References: N/A
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21153
Published: 2023-06-28
Description: In Do_AIMS_SET_CALL_WAITING of imsservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264259730References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21154
Published: 2023-06-28
Description: In StoreAdbSerialNumber of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-263783910References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21155
Published: 2023-06-28
Description: In BuildSetRadioNode of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a missing null check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264540700References: N/A
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21156
Published: 2023-06-28
Description: In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure from the modem with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264540759References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21157
Published: 2023-06-28
Description: In encode of wlandata.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-263783137References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21158
Published: 2023-06-28
Description: In encode of miscdata.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-263783635References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21159
Published: 2023-06-28
Description: In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-263783565References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21160
Published: 2023-06-28
Description: In BuildSetTcsFci of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-263784118References: N/A
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21161
Published: 2023-06-28
Description: In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-263783702References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21167
Published: 2023-06-28
Description: In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-259942964
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21168
Published: 2023-06-28
Description: In convertCbYCrY of ColorConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-253270285
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21169
Published: 2023-06-28
Description: In inviteInternal of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-274443441
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21170
Published: 2023-06-28
Description: In executeSetClientTarget of ComposerCommandEngine.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-252764410
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21171
Published: 2023-06-28
Description: In verifyInputEvent of InputDispatcher.cpp, there is a possible way to conduct click fraud due to side channel information disclosure. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261085213
CVSS Score: 6.7 (MEDIUM)
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21172
Published: 2023-06-28
Description: In multiple functions of WifiCallingSettings.java, there is a possible way to change calling preferences for the admin user due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262243015
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21173
Published: 2023-06-28
Description: In multiple methods of DataUsageList.java, there is a possible way to learn about admin user's network activities due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262741858
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21174
Published: 2023-06-28
Description: In isPageSearchEnabled of BillingCycleSettings.java, there is a possible way for the guest user to change data limits due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-235822222
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21175
Published: 2023-06-28
Description: In onCreate of DataUsageSummary.java, there is a possible method for a guest user to enable or disable mobile data due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262243574
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21176
Published: 2023-06-28
Description: In list_key_entries of utils.rs, there is a possible way to disable user credentials due to resource exhaustion. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-222287335
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-400, CWE-770
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21177
Published: 2023-06-28
Description: In requestAppKeyboardShortcuts of WindowManagerService.java, there is a possible way to infer the app a user is interacting with due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-273906410
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21178
Published: 2023-06-28
Description: In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-140762419
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-362
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21179
Published: 2023-06-28
Description: In parseSecurityParamsFromXml of XmlUtil.java, there is a possible bypass of user specified wifi encryption protocol due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-272755865
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21180
Published: 2023-06-28
Description: In xmlParseTryOrFinish of parser.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261365944
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21181
Published: 2023-06-28
Description: In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-264880969
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21182
Published: 2023-06-28
Description: In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-252764175
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21183
Published: 2023-06-28
Description: In ForegroundUtils of ForegroundUtils.java, there is a possible way to read NFC tag data while the app is still in the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-235863754
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21184
Published: 2023-06-28
Description: In getCurrentPrivilegedPackagesForAllUsers of CarrierPrivilegesTracker.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-267809568
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21185
Published: 2023-06-28
Description: In multiple functions of WifiNetworkFactory.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-266700762
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01