deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-0298
Published: 2020-09-18
Description: In Bluetooth, there is a possible control over Bluetooth enabled state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145129266
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0299
Published: 2020-09-18
Description: In Bluetooth, there is a possible spoofing of bluetooth device metadata due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145130119
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0300
Published: 2020-09-18
Description: In NFC, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-148736216
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-908
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0302
Published: 2020-09-18
Description: In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151646375
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0304
Published: 2020-09-18
Description: In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151645695
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0307
Published: 2020-09-18
Description: In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151645867
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0309
Published: 2020-09-18
Description: In the Bluetooth server, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System privileges and a Firmware compromise needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147227320
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-190, CWE-787
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0310
Published: 2020-09-18
Description: In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153356468
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0311
Published: 2020-09-18
Description: In InputManagerService, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153878642
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0313
Published: 2020-09-18
Description: In NotificationManagerService, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154917989
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0315
Published: 2020-09-18
Description: In Zen Mode, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155642026
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0316
Published: 2020-09-18
Description: In Telephony, there is a missing permission check. This could lead to local information disclosure of radio data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154934919
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0319
Published: 2020-09-18
Description: In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges and a Firmware compromise needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137868765
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0325
Published: 2020-09-18
Description: In NFC, there is a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145079309
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0326
Published: 2020-09-18
Description: In NFC, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-146453119
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-908
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0327
Published: 2020-09-18
Description: In core networking, there is a missing permission check. This could lead to local information disclosure of app network usage with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-129151407
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0331
Published: 2020-09-18
Description: In Settings, there is a possible permissions bypass. This could lead to local information disclosure of the device's IMEI with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147309310
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0334
Published: 2020-09-18
Description: In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges and a Firmware compromise needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147995915
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0335
Published: 2020-09-18
Description: In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges and a Firmware compromise needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-122361504
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0347
Published: 2020-09-18
Description: In iptables, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-136658008
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0348
Published: 2020-09-18
Description: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-139188582
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0349
Published: 2020-09-18
Description: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-139188779
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0350
Published: 2020-09-18
Description: In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges and a Firmware compromise needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-139424089
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0365
Published: 2020-09-18
Description: In netd, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137346580
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-0405
Published: 2020-09-18
Description: In NetworkStackNotifier, there is a possible permissions bypass due to an unsafe implicit PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157475111
CVSS Score: 7.8 (HIGH)
CWE: CWE-281
References: https://source.android.com/security/bulletin/android-11; https://source.android.com/security/bulletin/android-11
CVE: CVE-2020-15188
Published: 2020-09-18
Description: SOY CMS 3.0.2.327 and earlier is affected by Unauthenticated Remote Code Execution (RCE). The allows remote attackers to execute any arbitrary code when the inquiry form feature is enabled by the service. The vulnerability is caused by unserializing the form without any restrictions. This was fixed in 3.0.2.328.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-502
References: https://github.com/inunosinsi/soycms/issues/10; https://github.com/inunosinsi/soycms/pull/12/commits/a[PII_REDACTED]2dd25f74a13194b27c0986c3de020; https://github.com/inunosinsi/soycms/security/advisories/GHSA-hrrx-m22r-p9jp
CVE: CVE-2020-24623
Published: 2020-09-18
Description: A potential security vulnerability has been identified in Hewlett Packard Enterprise Universal API Framework. The vulnerability could be remotely exploited to allow SQL injection in HPE Universal API Framework for VMware Esxi v2.5.2 and HPE Universal API Framework for Microsoft Hyper-V (VHD).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04024en_us; https://www.zerodayinitiative.com/advisories/ZDI-20-1208/; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04024en_us
CVE: CVE-2020-14021
Published: 2020-09-18
Description: An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The ASP.net SMS module can be used to read and validate the source code of ASP files. By altering the path, it can be made to read any file on the Operating System, usually with NT AUTHORITY\SYSTEM privileges.
CVSS Score: 4.9 (MEDIUM)
References: https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-14021-Arbitrary%20File%20Read-Ozeki%20SMS%20Gateway; https://www.ozeki.hu/index.php?ow_page_number=1017&downloadaction=email&download_product_id=1&os=windows&dpath=%2Fattachments%2F702%2Finstallwindows_[PII_REDACTED]_OzekiNG-SMS-Gateway_4.17.6.zip&dname=Ozeki+NG+SMS+Gateway+v4.17.6&dsize=+%2817.8+MB%29&platform=Windows; https://www.ozeki.hu/index.php?owpn=231
CVE: CVE-2020-14029
Published: 2020-09-18
Description: An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The RSS To SMS module processes XML files in an unsafe manner. This opens the application to an XML External Entity attack that can be used to perform SSRF or read arbitrary local files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: http://www.ozeki.hu/index.php?owpn=231; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-14029-XXE-Ozeki%20SMS%20Gateway; http://www.ozeki.hu/index.php?owpn=231
CVE: CVE-2020-14390
Published: 2020-09-18
Description: A flaw was found in the Linux kernel in versions before 5.9-rc6. When changing screen size, an out-of-bounds memory write can occur leading to memory corruption or a denial of service. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-787, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html; https://bugzilla.redhat.com/show_bug.cgi?id=1876788
CVE: CVE-2020-14506
Published: 2020-09-18
Description: Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.
CVSS Score: 3.4 (LOW)
CWE: CWE-352
References: https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01; https://www.philips.com/a-w/security/security-advisories/product-security-2020.html#2020_archive; https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01
CVE: CVE-2020-14525
Published: 2020-09-18
Description: Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not neutralize or incorrectly neutralizes user-controllable input 
before it is placed in output used as a webpage that is served to other 
users.
CVSS Score: 3.5 (LOW)
CWE: CWE-83
References: https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01; https://www.philips.com/a-w/security/security-advisories/product-security-2020.html#2020_archive; https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01
CVE: CVE-2020-15181
Published: 2020-09-18
Description: The Alfresco Reset Password add-on before version 1.2.0 relies on untrusted inputs in a security decision. Intruders can get admin's access to the system using the vulnerability in the project. Impacts all servers where this add-on is installed. The problem is fixed in version 1.2.0
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-20, CWE-284
References: https://github.com/FlexSolution/AlfrescoResetPassword/commit/5927b9651356c4cd952cb9b485292583d305b47c; https://github.com/FlexSolution/AlfrescoResetPassword/security/advisories/GHSA-xrc8-fjp4-h4fv; https://github.com/FlexSolution/AlfrescoResetPassword/commit/5927b9651356c4cd952cb9b485292583d305b47c
CVE: CVE-2020-15189
Published: 2020-09-18
Description: SOY CMS 3.0.2 and earlier is affected by Remote Code Execution (RCE) using Unrestricted File Upload. Cross-Site Scripting(XSS) vulnerability that was used in CVE-2020-15183 can be used to increase impact by redirecting the administrator to access a specially crafted page. This vulnerability is caused by insecure configuration in elFinder. This is fixed in version 3.0.2.328.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-434
References: https://github.com/inunosinsi/soycms/issues/9; https://github.com/inunosinsi/soycms/pull/14; https://github.com/inunosinsi/soycms/pull/14/commits/e4ef00677ed52f9e5a5fcfcb56b797f5412b5d59
CVE: CVE-2020-16198
Published: 2020-09-18
Description: When an attacker claims to have a given identity, 

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, 
does not prove or insufficiently proves the claim is correct.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-693
References: https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01; https://www.philips.com/a-w/security/security-advisories/product-security-2020.html#2020_archive; https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01
CVE: CVE-2020-16200
Published: 2020-09-18
Description: Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, 

does not properly control the allocation and maintenance of a limited 
resource, thereby enabling an attacker to influence the amount of 
resources consumed, eventually leading to the exhaustion of available 
resources.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-757
References: https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01; https://www.philips.com/a-w/security/security-advisories/product-security-2020.html#2020_archive; https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01
CVE: CVE-2020-16247
Published: 2020-09-18
Description: Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, 


exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-16, CWE-668
References: https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01; https://www.philips.com/a-w/security/security-advisories/product-security-2020.html#2020_archive; https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01
CVE: CVE-2020-25766
Published: 2020-09-18
Description: An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form that is not linked to the login page.
CVSS Score: 7.5 (HIGH)
References: https://github.com/MISP/MISP/commit/164963100a830234744a6004d5eda55d24e97b2a; https://github.com/MISP/MISP/compare/v2.4.131...v2.4.132; https://github.com/MISP/MISP/commit/164963100a830234744a6004d5eda55d24e97b2a
CVE: CVE-2020-3979
Published: 2020-09-18
Description: InstallBuilder for Qt Windows (versions prior to 20.7.0) installers look for plugins at a predictable location at initialization time, writable by non-admin users. While those plugins are not required, they are loaded if present, which could allow an attacker to plant a malicious library which could result in code execution with the security scope of the installer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://blog.installbuilder.com/2020/08/updates-and-bug-fixes-with-version-2070.html; https://blog.installbuilder.com/2020/08/updates-and-bug-fixes-with-version-2070.html
CVE: CVE-2020-7945
Published: 2020-09-18
Description: Local registry credentials were included directly in the CD4PE deployment definition, which could expose these credentials to users who should not have access to them. This is resolved in Continuous Delivery for Puppet Enterprise 4.0.1.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522
References: https://puppet.com/security/cve/CVE-2020-7945; https://puppet.com/security/cve/CVE-2020-7945
CVE: CVE-2020-16230
Published: 2020-09-18
Description: All version of Ewon Flexy and Cosy prior to 14.1 use wildcards such as (*) under which domains can request resources. An attacker with local access and high privileges could inject scripts into the Cross-origin Resource Sharing (CORS) configuration that could abuse this vulnerability, allowing the attacker to retrieve limited confidential information through sniffing.
CVSS Score: 2.3 (LOW)
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-254-03; https://us-cert.cisa.gov/ics/advisories/icsa-20-254-03
CVE: CVE-2020-25633
Published: 2020-09-18
Description: A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy client call. The highest threat from this vulnerability is to data confidentiality.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209, CWE-209
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25633; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25633
CVE: CVE-2020-9084
Published: 2020-09-18
Description: Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege and compromise the service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200916-01-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200916-01-smartphone-en
CVE: CVE-2020-11861
Published: 2020-09-18
Description: Unauthorized escalation of local privileges vulnerability on Micro Focus Operation Agent, affecting all versions prior to versions 12.11. The vulnerability could be exploited to escalate the local privileges and gain root access on the system.
CVSS Score: 7.8 (HIGH)
References: https://softwaresupport.softwaregrp.com/doc/KM03709900; https://softwaresupport.softwaregrp.com/doc/KM03709900
CVE: CVE-2020-8158
Published: 2020-09-18
Description: Prototype pollution vulnerability in the TypeORM package < 0.2.25 may allow attackers to add or modify Object properties leading to further denial of service or SQL injection attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-471, CWE-1321
References: https://hackerone.com/reports/869574; https://hackerone.com/reports/869574
CVE: CVE-2020-8200
Published: 2020-09-18
Description: Improper authentication in Citrix StoreFront Server < 1912.0.1000 allows an attacker who is authenticated on the same Microsoft Active Directory domain as a Citrix StoreFront server to read arbitrary files from that server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://support.citrix.com/article/CTX277455; https://support.citrix.com/article/CTX277455