deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-23273
Published: 2021-03-09
Description: The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, and TIBCO Spotfire Server contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a stored Cross Site Scripting (XSS) attack on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analyst: versions 10.3.3 and below, versions 10.10.0, 10.10.1, and 10.10.2, versions 10.7.0, 10.8.0, 10.9.0, 11.0.0, and 11.1.0, TIBCO Spotfire Analytics Platform for AWS Marketplace: versions 11.1.0 and below, TIBCO Spotfire Desktop: versions 10.3.3 and below, versions 10.10.0, 10.10.1, and 10.10.2, versions 10.7.0, 10.8.0, 10.9.0, 11.0.0, and 11.1.0, and TIBCO Spotfire Server: versions 10.3.11 and below, versions 10.10.0, 10.10.1, 10.10.2, and 10.10.3, versions 10.7.0, 10.8.0, 10.8.1, 10.9.0, 11.0.0, and 11.1.0.
CVSS Score: 8.0 (HIGH)
CWE: CWE-79
References: http://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2021/03/tibco-security-advisory-march-9-2021-tibco-spotfire; http://www.tibco.com/services/support/advisories
CVE: CVE-2021-28115
Published: 2021-03-09
Description: The OUGC Feedback plugin before 1.8.23 for MyBB allows XSS via the comment field of feedback during an edit operation.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/161746/MyBB-OUGC-Feedback-1.8.22-Cross-Site-Scripting.html; https://github.com/Sama34/OUGC-Feedback/pull/31/commits/ceef7c06359e5dcbaffe90a40884265c5754068c; http://packetstormsecurity.com/files/161746/MyBB-OUGC-Feedback-1.8.22-Cross-Site-Scripting.html
CVE: CVE-2021-28116
Published: 2021-03-09
Description: Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP protocol data. This can be leveraged as part of a chain for remote code execution as nobody.
CVSS Score: 3.7 (LOW)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2021/10/04/1; http://www.squid-cache.org/Versions/; https://github.com/squid-cache/squid/security/advisories/GHSA-rgf3-9v3p-qp82
CVE: CVE-2021-28119
Published: 2021-03-09
Description: Twinkle Tray (aka twinkle-tray) through 1.13.3 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/xanderfrangos/twinkle-tray/issues/142; https://github.com/xanderfrangos/twinkle-tray/issues/142
CVE: CVE-2020-29238
Published: 2021-03-10
Description: An integer buffer overflow in the Nginx webserver of ExpressVPN Router version 1 allows remote attackers to obtain sensitive information when the server running as reverse proxy via specially crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: http://expressvpn.com; http://ja1sharma.com/blog/2021/CVE-2020-29238/; http://packetstormsecurity.com/files/162152/ExpressVPN-VPN-Router-1.0-Integer-Overflow.html
CVE: CVE-2021-3310
Published: 2021-03-10
Description: Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure (by reading local files).
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://www.westerndigital.com/support/productsecurity/wdc-21002-my-cloud-firmware-version-5-10-122; https://www.zerodayinitiative.com/advisories/ZDI-21-277/; https://www.westerndigital.com/support/productsecurity/wdc-21002-my-cloud-firmware-version-5-10-122
CVE: CVE-2020-13936
Published: 2021-03-10
Description: An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/modify velocity templates running Apache Velocity Engine versions up to 2.2.
CVSS Score: 8.8 (HIGH)
References: http://www.openwall.com/lists/oss-security/2021/03/10/1; https://lists.apache.org/thread.html/r01043f584cbd47959fabe18fff64de940f81a65024bb8dddbda31d9a%40%3Cuser.velocity.apache.org%3E; https://lists.apache.org/thread.html/r01043f584cbd47959fabe18fff64de940f81a65024bb8dddbda31d9a%40%3Cuser.velocity.apache.org%3E
CVE: CVE-2020-13959
Published: 2021-03-10
Description: The default error page for VelocityView in Apache Velocity Tools prior to 3.1 reflects back the vm file that was entered as part of the URL. An attacker can set an XSS payload file as this vm file in the URL which results in this payload being executed. XSS vulnerabilities allow attackers to execute arbitrary JavaScript in the context of the attacked website and the attacked user. This can be abused to steal session cookies, perform requests in the name of the victim or for phishing attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.openwall.com/lists/oss-security/2021/03/10/2; https://lists.apache.org/thread.html/r6802a38c3041059e763a1aadd7b37fe95de75408144b5805e29b84e3%40%3Cuser.velocity.apache.org%3E; https://lists.apache.org/thread.html/r6802a38c3041059e763a1aadd7b37fe95de75408144b5805e29b84e3%40%3Cuser.velocity.apache.org%3E
CVE: CVE-2021-20667
Published: 2021-03-10
Description: Stored cross-site scripting vulnerability due to inadequate CSP (Content Security Policy) configuration in GROWI versions v4.2.2 and earlier allows remote authenticated attackers to inject an arbitrary script via a specially crafted content.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/vu/JVNVU94889258/index.html; https://weseek.co.jp/security/2021/03/08/vulnerability/growi-prevent-multiple-xss/; https://jvn.jp/en/vu/JVNVU94889258/index.html
CVE: CVE-2021-20668
Published: 2021-03-10
Description: Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read an arbitrary path via a specially crafted URL.
CVSS Score: 2.7 (LOW)
CWE: CWE-22
References: https://jvn.jp/en/vu/JVNVU94889258/index.html; https://weseek.co.jp/security/2021/03/08/vulnerability/growi-prevent-multiple-xss/; https://jvn.jp/en/vu/JVNVU94889258/index.html
CVE: CVE-2021-20669
Published: 2021-03-10
Description: Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read and/or delete an arbitrary path via a specially crafted URL.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-22
References: https://jvn.jp/en/vu/JVNVU94889258/index.html; https://weseek.co.jp/security/2021/03/08/vulnerability/growi-prevent-multiple-xss/; https://jvn.jp/en/vu/JVNVU94889258/index.html
CVE: CVE-2021-20670
Published: 2021-03-10
Description: Improper access control vulnerability in GROWI versions v4.2.2 and earlier allows a remote unauthenticated attacker to read the user's personal information and/or server's internal information via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: https://jvn.jp/en/vu/JVNVU94889258/index.html; https://weseek.co.jp/security/2021/03/08/vulnerability/growi-prevent-multiple-xss/; https://jvn.jp/en/vu/JVNVU94889258/index.html
CVE: CVE-2021-20671
Published: 2021-03-10
Description: Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative privilege to overwrite the files on the server, which may lead to arbitrary code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: https://jvn.jp/en/vu/JVNVU94889258/index.html; https://weseek.co.jp/security/2021/03/08/vulnerability/growi-prevent-multiple-xss/; https://jvn.jp/en/vu/JVNVU94889258/index.html
CVE: CVE-2021-20672
Published: 2021-03-10
Description: Reflected cross-site scripting vulnerability due to insufficient verification of URL query parameters in GROWI (v4.2 Series) versions from v4.2.0 to v4.2.7 allows remote attackers to inject an arbitrary script via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN86438134/index.html; https://weseek.co.jp/security/2021/03/09/vulnerability/growi-prevent-xss5/; https://jvn.jp/en/jp/JVN86438134/index.html
CVE: CVE-2021-20673
Published: 2021-03-10
Description: Stored cross-site scripting vulnerability in Admin Page of GROWI (v4.2 Series) versions from v4.2.0 to v4.2.7 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN86438134/index.html; https://weseek.co.jp/security/2021/03/09/vulnerability/growi-prevent-xss5/; https://jvn.jp/en/jp/JVN86438134/index.html
CVE: CVE-2021-28007
Published: 2021-03-10
Description: Web Based Quiz System 1.0 is affected by cross-site scripting (XSS) in register.php through the name parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/49607; https://www.exploit-db.com/exploits/49607
CVE: CVE-2020-23721
Published: 2021-03-10
Description: An issue was discovered in FUEL CMS V1.4.7. An attacker can use a XSS payload and bypass a filter via /fuelCM/fuel/pages/edit/1?lang=english.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/daylightstudio/FUEL-CMS/issues/559; https://github.com/daylightstudio/FUEL-CMS/issues/559
CVE: CVE-2020-23722
Published: 2021-03-10
Description: An issue was discovered in FUEL CMS 1.4.7. There is a escalation of privilege vulnerability to obtain super admin privilege via the "id" and "fuel_id" parameters.
CVSS Score: 8.8 (HIGH)
CWE: CWE-639
References: https://github.com/daylightstudio/FUEL-CMS/issues/560; https://github.com/daylightstudio/FUEL-CMS/issues/560
CVE: CVE-2020-24791
Published: 2021-03-10
Description: FUEL CMS 1.4.8 allows SQL injection via the 'fuel_replace_id' parameter in pages/replace/1. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/daylightstudio/FUEL-CMS/issues/561; https://github.com/leerina/vulnerability/blob/master/Fuel%20CMS%201.4.8%20SQLi%20vulnerability.txt; https://www.exploit-db.com/exploits/48778
CVE: CVE-2020-28705
Published: 2021-03-10
Description: FUEL CMS 1.4.13 contains a cross-site request forgery (CSRF) vulnerability that can delete a page via a post ID to /pages/delete/3.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/daylightstudio/FUEL-CMS/commit/fbf2d59215800f05d4359e8f984d5680d62f0f3b; https://github.com/daylightstudio/FUEL-CMS/issues/576; https://github.com/daylightstudio/FUEL-CMS/commit/fbf2d59215800f05d4359e8f984d5680d62f0f3b
CVE: CVE-2021-3224
Published: 2021-03-10
Description: A stored cross-site scripting (XSS) vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/cskaza/cszcms/issues/28; https://www.cszcms.com/; https://github.com/cskaza/cszcms/issues/28
CVE: CVE-2020-35752
Published: 2021-03-10
Description: Baby Care System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Edit Page tab through the Post title parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/49358; https://www.sourcecodester.com/download-code?nid=14622&title=Baby+Care+System+in+PHP%2FMySQLi+with+Full+Source+Code+; https://www.sourcecodester.com/php/14622/baby-care-system-phpmysqli-full-source-code.html
CVE: CVE-2020-4717
Published: 2021-03-10
Description: A vulnerability exists in IBM SPSS Modeler Subscription Installer that allows a user with create symbolic link permission to write arbitrary file in another protected path during product installation. IBM X-Force ID: 187727.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/187727; https://www.ibm.com/support/pages/node/6427901; https://exchange.xforce.ibmcloud.com/vulnerabilities/187727
CVE: CVE-2020-5016
Published: 2021-03-10
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. When application security is disabled and JAX-RPC applications are present, an attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary xml files on the system. This does not occur if Application security is enabled. IBM X-Force ID: 193556.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/193556; https://www.ibm.com/support/pages/node/6427873; https://exchange.xforce.ibmcloud.com/vulnerabilities/193556
CVE: CVE-2021-21491
Published: 2021-03-10
Description: SAP Netweaver Application Server Java (Applications based on WebDynpro Java) versions 7.00, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://launchpad.support.sap.com/#/notes/2976947; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107; https://launchpad.support.sap.com/#/notes/2976947
CVE: CVE-2021-28122
Published: 2021-03-10
Description: A request-validation issue was discovered in Open5GS 2.1.3 through 2.2.x before 2.2.1. The WebUI component allows an unauthenticated user to use a crafted HTTP API request to create, read, update, or delete entries in the subscriber database. For example, new administrative users can be added. The issue occurs because Express is not set up to require authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://github.com/open5gs/open5gs/compare/v2.2.0...v2.2.1; https://github.com/open5gs/open5gs/issues/837; https://github.com/open5gs/open5gs/pull/838
CVE: CVE-2020-0025
Published: 2021-03-10
Description: In deletePackageVersionedInternal of PackageManagerService.java, there is a possible way to exit Screen Pinning due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-135604684
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2021-03-01; https://source.android.com/security/bulletin/pixel/2021-03-01
CVE: CVE-2020-1916
Published: 2021-03-10
Description: An incorrect size calculation in ldap_escape may lead to an integer overflow when overly long input is passed in, resulting in an out-of-bounds write. This issue affects HHVM prior to 4.56.2, all versions between 4.57.0 and 4.78.0, 4.79.0, 4.80.0, 4.81.0, 4.82.0, 4.83.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4; https://hhvm.com/blog/2020/11/12/security-update.html; https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4
CVE: CVE-2020-1917
Published: 2021-03-10
Description: xbuf_format_converter, used as part of exif_read_data, was appending a terminating null character to the generated string, but was not using its standard append char function. As a result, if the buffer was full, it would result in an out-of-bounds write. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca; https://hhvm.com/blog/2021/02/25/security-update.html; https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca
CVE: CVE-2020-1918
Published: 2021-03-10
Description: In-memory file operations (ie: using fopen on a data URI) did not properly restrict negative seeking, allowing for the reading of memory prior to the in-memory buffer. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-127, CWE-125
References: https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca; https://hhvm.com/blog/2021/02/25/security-update.html; https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca
CVE: CVE-2020-1919
Published: 2021-03-10
Description: Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second string argument passed in is longer than the first. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca; https://hhvm.com/blog/2021/02/25/security-update.html; https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca
CVE: CVE-2020-1921
Published: 2021-03-10
Description: In the crypt function, we attempt to null terminate a buffer using the size of the input salt without validating that the offset is within the buffer. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121, CWE-787
References: https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca; https://hhvm.com/blog/2021/02/25/security-update.html; https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca
CVE: CVE-2021-0368
Published: 2021-03-10
Description: In oggpack_look of bitwise.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169829774
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2021-03-01; https://source.android.com/security/bulletin/pixel/2021-03-01
CVE: CVE-2021-0369
Published: 2021-03-10
Description: In CrossProfileAppsServiceImpl.java, there is the possibility of an application's INTERACT_ACROSS_PROFILES grant state not displaying properly in the setting UI due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-166561076
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2021-03-01; https://source.android.com/security/bulletin/pixel/2021-03-01
CVE: CVE-2021-0370
Published: 2021-03-10
Description: In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169259605
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2021-03-01; https://source.android.com/security/bulletin/pixel/2021-03-01
CVE: CVE-2021-0371
Published: 2021-03-10
Description: In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-164440989
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2021-03-01; https://source.android.com/security/bulletin/pixel/2021-03-01
CVE: CVE-2021-0372
Published: 2021-03-10
Description: In getMediaOutputSliceAction of RemoteMediaSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174047735
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://source.android.com/security/bulletin/pixel/2021-03-01; https://source.android.com/security/bulletin/pixel/2021-03-01
CVE: CVE-2021-0374
Published: 2021-03-10
Description: In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169572641
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2021-03-01; https://source.android.com/security/bulletin/pixel/2021-03-01
CVE: CVE-2021-0375
Published: 2021-03-10
Description: In onPackageModified of VoiceInteractionManagerService.java, there is a possible change of default applications due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-167261484
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-330
References: https://source.android.com/security/bulletin/pixel/2021-03-01; https://source.android.com/security/bulletin/pixel/2021-03-01
CVE: CVE-2021-0376
Published: 2021-03-10
Description: In checkUriPermission and related functions of MediaProvider.java, there is a possible way to access external files due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-115619667
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://source.android.com/security/bulletin/pixel/2021-03-01; https://source.android.com/security/bulletin/pixel/2021-03-01
CVE: CVE-2021-0377
Published: 2021-03-10
Description: In DeltaPerformer::Write of delta_performer.cc, there is a possible use of untrusted input due to improper input validation. This could lead to a local bypass of defense in depth protections with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160800689
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://source.android.com/security/bulletin/pixel/2021-03-01; https://source.android.com/security/bulletin/pixel/2021-03-01
CVE: CVE-2021-0378
Published: 2021-03-10
Description: In getNbits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154076193
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2021-03-01; https://source.android.com/security/bulletin/pixel/2021-03-01
CVE: CVE-2021-0390
Published: 2021-03-10
Description: In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to a missing permission check. This could lead to local escalation of privilege by a background user on the same device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174749461
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2021-03-01; https://source.android.com/security/bulletin/2021-03-01