deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-0378
Published: 2020-10-14
Description: In onWnmFrameReceived of PasspointManager.java, there is a missing permission check. This could lead to local information disclosure of location data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-157748906
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0398
Published: 2020-10-14
Description: In updateMwi of NotificationMgr.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-154323381
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0400
Published: 2020-10-14
Description: In showDataRoamingNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-153356561
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0408
Published: 2020-10-14
Description: In remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-156999009
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0410
Published: 2020-10-14
Description: In setNotification of SapServer.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-156021269
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0411
Published: 2020-10-14
Description: In ~AACExtractor() of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-142641801
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787, CWE-908
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0412
Published: 2020-10-14
Description: In setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check. This could lead to local information disclosure of foreground processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.0 Android-8.1 Android-9Android ID: A-160390416
CVSS Score: 3.3 (LOW)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0413
Published: 2020-10-14
Description: In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-158778659
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0414
Published: 2020-10-14
Description: In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions bypass. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-157708122
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-404, CWE-665
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0415
Published: 2020-10-14
Description: In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-156020795
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0416
Published: 2020-10-14
Description: In multiple settings screens, there are possible tapjacking attacks due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-155288585
CVSS Score: 8.8 (HIGH)
CWE: CWE-1188
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0419
Published: 2020-10-14
Description: In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-142125338
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0420
Published: 2020-10-14
Description: In setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162383705
CVSS Score: 7.8 (HIGH)
CWE: CWE-667, CWE-787, CWE-862
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0421
Published: 2020-10-14
Description: In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-161894517
CVSS Score: 7.8 (HIGH)
CWE: CWE-755, CWE-787
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0422
Published: 2020-10-14
Description: In constructImportFailureNotification of NotificationImportExportListener.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-161718556
CVSS Score: 3.3 (LOW)
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0423
Published: 2020-10-14
Description: In binder_release_work of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-161151868References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-667
References: https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html; https://source.android.com/security/bulletin/2020-10-01; https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html
CVE: CVE-2020-6933
Published: 2020-10-14
Description: An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earlier), and 12.11.1 QF3 (and earlier) could allow an attacker to potentially cause a Denial of Service (DoS) of the UEM Core service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://support.blackberry.com/kb/articleDetail?articleNumber=000068112; https://support.blackberry.com/kb/articleDetail?articleNumber=000068112
CVE: CVE-2020-9746
Published: 2020-10-14
Description: Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and arbitrary code execution. Exploitation of this issue requires an attacker to insert malicious strings in an HTTP response that is by default delivered over TLS/SSL.
CVSS Score: 7.0 (HIGH)
CWE: CWE-476, CWE-476
References: https://helpx.adobe.com/security/products/flash-player/apsb20-58.html; https://helpx.adobe.com/security/products/flash-player/apsb20-58.html
CVE: CVE-2020-24188
Published: 2020-10-14
Description: Cross-site scripting (XSS) vulnerability in the search functionality in Intrexx before 9.4.0 allows remote attackers to inject arbitrary web script or HTML via the request parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://onlinehelp.unitedplanet.com/intrexx/9400/en/index.html?p=helpfiles/help.3.onlineupdate-02.html; https://onlinehelp.unitedplanet.com/intrexx/9400/en/index.html?p=helpfiles/help.3.onlineupdate-02.html
CVE: CVE-2020-25777
Published: 2020-10-14
Description: Trend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a specific kernel extension request attack where an attacker could bypass the Web Threat Protection feature of the product. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
CVSS Score: 5.4 (MEDIUM)
References: https://helpcenter.trendmicro.com/en-us/article/TMKA-09947; https://www.zerodayinitiative.com/advisories/ZDI-20-1242/; https://helpcenter.trendmicro.com/en-us/article/TMKA-09947
CVE: CVE-2020-25778
Published: 2020-10-14
Description: Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in a specific kernel extension where an attacker could supply a kernel pointer and leak several bytes of memory. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-209
References: https://helpcenter.trendmicro.com/en-us/article/TMKA-09948; https://www.zerodayinitiative.com/advisories/ZDI-20-1241/; https://helpcenter.trendmicro.com/en-us/article/TMKA-09948
CVE: CVE-2020-25824
Published: 2020-10-14
Description: Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within the Export Telegram Data wizard. The threat model is a victim who has voluntarily opened Export Wizard but is then distracted. An attacker then approaches the unattended desktop and pushes the Export key. This attacker may consequently gain access to all chat conversation and media files.
CVSS Score: 2.4 (LOW)
CWE: CWE-306
References: https://github.com/soheilsamanabadi/vulnerability/blob/main/Telegram-Desktop-CVE-2020-25824; https://github.com/telegramdesktop/tdesktop/releases/tag/v2.4.3; https://security.gentoo.org/glsa/202101-34
CVE: CVE-2020-27013
Published: 2020-10-14
Description: Trend Micro Antivirus for Mac 2020 (Consumer) contains a vulnerability in the product that occurs when a webserver is started that implements an API with several properties that can be read and written to allowing the attacker to gather and modify sensitive product and user data. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 4.4 (MEDIUM)
References: https://helpcenter.trendmicro.com/en-us/article/TMKA-09950; https://www.zerodayinitiative.com/advisories/ZDI-20-1243/; https://helpcenter.trendmicro.com/en-us/article/TMKA-09950
CVE: CVE-2020-4395
Published: 2020-10-14
Description: IBM Security Access Manager Appliance 9.0.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 179358.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-613
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/179358; https://www.ibm.com/support/pages/node/6347592; https://exchange.xforce.ibmcloud.com/vulnerabilities/179358
CVE: CVE-2020-15224
Published: 2020-10-14
Description: In Open Enclave before version 0.12.0, an information disclosure vulnerability exists when an enclave application using the syscalls provided by the sockets.edl is loaded by a malicious host application. An attacker who successfully exploited the vulnerability could read privileged data from the enclave heap across trust boundaries. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to elevate user rights directly, but it could be used to obtain information otherwise considered confidential in an enclave, which could be used in further compromises. The issue has been addressed in version 0.12.0 and the current master branch. Users will need to to recompile their applications against the patched libraries to be protected from this vulnerability.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-552
References: https://github.com/openenclave/openenclave/blob/master/CHANGELOG.md#v0120; https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b; https://github.com/openenclave/openenclave/security/advisories/GHSA-525h-wxcc-f66m
CVE: CVE-2020-15229
Published: 2020-10-14
Description: Singularity (an open source container platform) from version 3.1.1 through 3.6.3 has a vulnerability. Due to insecure handling of path traversal and the lack of path sanitization within `unsquashfs`, it is possible to overwrite/create any files on the host filesystem during the extraction with a crafted squashfs filesystem. The extraction occurs automatically for unprivileged (either installation or with `allow setuid = no`) run of Singularity when a user attempt to run an image which is a local SIF image or a single file containing a squashfs filesystem and is coming from remote sources `library://` or `shub://`. Image build is also impacted in a more serious way as it can be used by a root user, allowing an attacker to overwrite/create files leading to a system compromise, so far bootstrap methods `library`, `shub` and `localimage` are triggering the squashfs extraction. This issue is addressed in Singularity 3.6.4. All users are advised to upgrade to 3.6.4 especially if they use Singularity mainly for building image as root user. There is no solid workaround except to temporary avoid to use unprivileged mode with single file images in favor of sandbox images instead. Regarding image build, temporary avoid to build from `library` and `shub` sources and as much as possible use `--fakeroot` or a VM for that.
CVSS Score: 8.2 (HIGH)
CWE: CWE-22
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00070.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00071.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00009.html
CVE: CVE-2020-15253
Published: 2020-10-14
Description: Versions of Grocy <= 2.7.1 are vulnerable to Cross-Site Scripting via the Create Shopping List module, that is rendered upon deleting that Shopping List. The issue was also found in users, batteries, chores, equipment, locations, quantity units, shopping locations, tasks, taskcategories, product groups, recipes and products. Authentication is required to exploit these issues and Grocy should not be publicly exposed. The linked reference details a proof-of-concept.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79
References: https://github.com/grocy/grocy/commit/0624b0df594a4353ef25e6b1874565ea52ce7772; https://github.com/grocy/grocy/commit/0df2590de27c60c18b7db6e056347bd2aff5a887; https://github.com/grocy/grocy/issues/996
CVE: CVE-2020-3427
Published: 2020-10-14
Description: The Windows Logon installer prior to 4.1.2 did not properly validate file installation paths. This allows an attacker with local user privileges to coerce the installer to write to arbitrary privileged directories. If successful, an attacker can manipulate files used by Windows Logon, cause Denial of Service (DoS) by deleting file(s), or replace system files to potentially achieve elevation of privileges. Note that this can only exploitable during new installations while the installer is running and is not exploitable once installation is finished. Versions 4.1.2 of Windows Logon addresses this issue.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-280
References: https://duo.com/docs/rdp-notes; https://duo.com/docs/rdp-notes
CVE: CVE-2020-3483
Published: 2020-10-14
Description: Duo has identified and fixed an issue with the Duo Network Gateway (DNG) product in which some customer-provided SSL certificates and private keys were not excluded from logging. This issue resulted in certificate and private key information being written out in plain-text to local files on the DNG host. Any private keys logged in this way could be viewed by those with access to the DNG host operating system without any need for reversing encrypted values or similar techniques. An attacker that gained access to the DNG logs and with the ability to intercept and manipulate network traffic between a user and the DNG, could decrypt and manipulate SSL/TLS connections to the DNG and to the protected applications behind it. Duo Network Gateway (DNG) versions 1.3.3 through 1.5.7 are affected.
CVSS Score: 7.1 (HIGH)
CWE: CWE-256, CWE-522
References: https://duo.com/labs/psa/duo-psa-2020-004; https://duo.com/labs/psa/duo-psa-2020-004
CVE: CVE-2020-7317
Published: 2020-10-14
Description: Cross-Site Scripting vulnerability in McAfee ePolicy Orchistrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via parameter values for "syncPointList" not being correctly sanitsed.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10332; https://kc.mcafee.com/corporate/index?page=content&id=SB10332
CVE: CVE-2020-7318
Published: 2020-10-14
Description: Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10332; https://kc.mcafee.com/corporate/index?page=content&id=SB10332
CVE: CVE-2020-7383
Published: 2020-10-14
Description: A SQL Injection issue in Rapid7 Nexpose version prior to 6.6.49 that may have allowed an authenticated user with a low permission level to access resources & make changes they should not have been able to access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://help.rapid7.com/insightvm/en-us/release-notes/index.html?pid=6.6.49; https://help.rapid7.com/insightvm/en-us/release-notes/index.html?pid=6.6.49
CVE: CVE-2020-8332
Published: 2020-10-14
Description: A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and IBM System x servers may allow arbitrary code execution. Servers operating in UEFI mode are not affected.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://support.lenovo.com/us/en/product_security/LEN-38625; https://support.lenovo.com/us/en/product_security/LEN-38625
CVE: CVE-2020-8338
Published: 2020-10-14
Description: A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426, CWE-426
References: https://support.lenovo.com/us/en/product_security/LEN-32702; https://support.lenovo.com/us/en/product_security/LEN-32702
CVE: CVE-2020-8345
Published: 2020-10-14
Description: A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feature prior to version 1.0.46.11 that could allow escalation of privilege.
CVSS Score: 7.3 (HIGH)
CWE: CWE-427, CWE-427
References: https://support.lenovo.com/us/en/product_security/LEN-44421; https://support.lenovo.com/us/en/product_security/LEN-44421
CVE: CVE-2020-8349
Published: 2020-10-14
Description: An internal security review has identified an unauthenticated remote code execution vulnerability in Cloud Networking Operating System (CNOS)’ optional REST API management interface. This interface is disabled by default and not vulnerable unless enabled. When enabled, it is only vulnerable where attached to a VRF and as allowed by defined ACLs. Lenovo strongly recommends upgrading to a non-vulnerable CNOS release. Where not possible, Lenovo recommends disabling the REST API management interface or restricting access to the management VRF and further limiting access to authorized management stations via ACL.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-94
References: https://support.lenovo.com/us/en/product_security/LEN-44423; https://support.lenovo.com/us/en/product_security/LEN-44423
CVE: CVE-2020-8350
Published: 2020-10-14
Description: An authentication bypass vulnerability was reported in Lenovo ThinkPad Stack Wireless Router firmware version 1.1.3.4 that could allow escalation of privilege.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287, CWE-287
References: https://support.lenovo.com/us/en/product_security/LEN-48228; https://support.lenovo.com/us/en/product_security/LEN-48228
CVE: CVE-2020-6272
Published: 2020-10-15
Description: SAP Commerce Cloud versions - 1808, 1811, 1905, 2005, does not sufficiently encode user inputs, which allows an authenticated and authorized content manager to inject malicious script into several web CMS components. These can be saved and later triggered, if an affected web page is visited, resulting in Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2917381; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196; https://launchpad.support.sap.com/#/notes/2917381