deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-0229
Published: 2020-09-17
Description: There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-156333725
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0245
Published: 2020-09-17
Description: In DecodeFrameCombinedMode of combined_decode.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-152496149
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0278
Published: 2020-09-17
Description: There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-160812574
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0342
Published: 2020-09-17
Description: There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-160812576
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0379
Published: 2020-09-17
Description: In the Bluetooth service, there is a possible spoofing attack due to a logic error. This could lead to remote information disclosure of sensitive information with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-150156492
CVSS Score: 5.7 (MEDIUM)
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0380
Published: 2020-09-17
Description: In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-146398979
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0381
Published: 2020-09-17
Description: In Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure in a highly constrained process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-150159669
CVSS Score: 7.5 (HIGH)
CWE: CWE-190, CWE-787
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0382
Published: 2020-09-17
Description: In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug report data with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-152944488
CVSS Score: 2.3 (LOW)
CWE: CWE-755
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0383
Published: 2020-09-17
Description: In Parse_ins of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure in the media extractor process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-150160279
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0384
Published: 2020-09-17
Description: In Parse_art of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-150159906
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0385
Published: 2020-09-17
Description: In Parse_insh of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-150160041
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0386
Published: 2020-09-17
Description: In onCreate of RequestPermissionActivity.java, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege allowing an attacker to set Bluetooth discoverability with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-155650356
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-1021, CWE-1188
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0388
Published: 2020-09-17
Description: In createEmergencyLocationUserNotification of GnssVisibilityControl.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-156123285
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0389
Published: 2020-09-17
Description: In createSaveNotification of RecordingService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-156959408
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0390
Published: 2020-09-17
Description: In the app zygote SE Policy, there is a possible permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-157598026
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0391
Published: 2020-09-17
Description: In applyPolicy of PackageManagerService.java, there is possible arbitrary command execution as System due to an unenforced protected-broadcast. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-158570769
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0392
Published: 2020-09-17
Description: In getLayerDebugInfo of SurfaceFlinger.cpp, there is a possible code execution due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-150226608
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0393
Published: 2020-09-17
Description: In decrypt and decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-154123412
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0394
Published: 2020-09-17
Description: In onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege and untrusted devices accessing contact lists with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-155648639
CVSS Score: 7.8 (HIGH)
CWE: CWE-1021, CWE-1188
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0395
Published: 2020-09-17
Description: In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-154124307
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0396
Published: 2020-09-17
Description: In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-155094269
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0397
Published: 2020-09-17
Description: In getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-155092443
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0399
Published: 2020-09-17
Description: In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-153993591
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0401
Published: 2020-09-17
Description: In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local escalation of privilege and granting spurious permissions with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-150857253
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0404
Published: 2020-09-17
Description: In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-111893654References: Upstream kernel
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-269
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-0407
Published: 2020-09-17
Description: In various functions in fscrypt_ice.c and related files in some implementations of f2fs encryption that use encryption hardware which only supports 32-bit IVs (Initialization Vectors), 64-bit IVs are used and later are truncated to 32 bits. This may cause IV reuse and thus weakened disk encryption. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153450752References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-330
References: https://source.android.com/security/bulletin/2020-09-01; https://source.android.com/security/bulletin/2020-09-01
CVE: CVE-2020-11698
Published: 2020-09-17
Description: An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snmp-x.php would allow a remote attacker to inject commands into the file snmpd.conf that would allow executing commands on the target server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://packetstormsecurity.com/files/159470/SpamTitan-7.07-Remote-Code-Execution.html; http://packetstormsecurity.com/files/160809/SpamTitan-7.07-Command-Injection.html; https://github.com/felmoltor
CVE: CVE-2020-11699
Published: 2020-09-17
Description: An issue was discovered in Titan SpamTitan 7.07. Improper validation of the parameter fname on the page certs-x.php would allow an attacker to execute remote code on the target server. The user has to be authenticated before interacting with this page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/159218/SpamTitan-7.07-Remote-Code-Execution.html; https://github.com/felmoltor; https://sensepost.com/blog/2020/clash-of-the-spamtitan/
CVE: CVE-2020-11700
Published: 2020-09-17
Description: An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter fname, used on the page certs-x.php, would allow an attacker to retrieve the contents of arbitrary files. The user has to be authenticated before interacting with this page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/159218/SpamTitan-7.07-Remote-Code-Execution.html; https://github.com/felmoltor; https://sensepost.com/blog/2020/clash-of-the-spamtitan/
CVE: CVE-2020-11803
Published: 2020-09-17
Description: An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with the page mailqueue.php could lead to PHP code evaluation server-side, because the user-provided input is passed directly to the php eval() function. The user has to be authenticated on the web platform before interacting with the page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.com/files/159218/SpamTitan-7.07-Remote-Code-Execution.html; https://github.com/felmoltor; https://sensepost.com/blog/2020/clash-of-the-spamtitan/
CVE: CVE-2020-11804
Published: 2020-09-17
Description: An issue was discovered in Titan SpamTitan 7.07. Due to improper sanitization of the parameter quid, used in the page mailqueue.php, code injection can occur. The input for this parameter is provided directly by an authenticated user via an HTTP GET request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.com/files/159218/SpamTitan-7.07-Remote-Code-Execution.html; https://github.com/felmoltor; https://sensepost.com/blog/2020/clash-of-the-spamtitan/
CVE: CVE-2020-24045
Published: 2020-09-17
Description: A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. The restricted shell can be bypassed by presenting a fake vmware-tools ISO image to the guest virtual machine running SpamTitan Gateway. This ISO image should contain a valid Perl script at the vmware-freebsd-tools/vmware-tools-distrib/vmware-install.pl path. The fake ISO image will be mounted and the script wmware-install.pl will be executed with super-user privileges as soon as the hidden option to install VMware Tools is selected in the main menu of the restricted shell (option number 5). The contents of the script can be whatever the attacker wants, including a backdoor or similar.
CVSS Score: 7.2 (HIGH)
CWE: CWE-345
References: https://github.com/felmoltor; https://sensepost.com/blog/2020/clash-of-the-spamtitan/; https://twitter.com/felmoltor
CVE: CVE-2020-24046
Published: 2020-09-17
Description: A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. This restricted shell can be bypassed after changing the properties of the user admin in the operating system file /etc/passwd. This file cannot be accessed though the restricted shell, but it can be modified by abusing the Backup/Import Backup functionality of the web interface. An authenticated attacker would be able to obtain the file /var/tmp/admin.passwd after executing a Backup operation. This file can be manually modified to change the GUID of the user to 0 (root) and change the restricted shell to a normal shell /bin/sh. After the modification is done, the file can be recompressed to a .tar.bz file and imported again via the Import Backup functionality. The properties of the admin user will be overwritten and a root shell will be granted to the user upon the next successful login.
CVSS Score: 7.2 (HIGH)
CWE: CWE-269
References: https://github.com/felmoltor; https://sensepost.com/blog/2020/clash-of-the-spamtitan/; https://twitter.com/felmoltor
CVE: CVE-2020-25490
Published: 2020-09-17
Description: Lack of cryptographic signature verification in the Sqreen PHP agent daemon before 1.16.0 makes it easier for remote attackers to inject rules for execution inside the virtual machine.
CVSS Score: 7.3 (HIGH)
CWE: CWE-347
References: https://blog.sqreen.com/vulnerability-disclosure-finding-a-vulnerability-in-sqreens-php-agent-and-how-we-fixed-it/; https://blog.sqreen.com/vulnerability-disclosure-finding-a-vulnerability-in-sqreens-php-agent-and-how-we-fixed-it/
CVE: CVE-2020-25727
Published: 2020-09-17
Description: The Reset Password add-on before 1.2.0 for Alfresco suffers from CMIS-SQL Injection, which allows a malicious user to inject a query within the email input field.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://amriunix.com/post/alfresco-reset-password-add-on-0-day-vulnerabilities/; https://amriunix.com/post/alfresco-reset-password-add-on-0-day-vulnerabilities/
CVE: CVE-2020-25728
Published: 2020-09-17
Description: The Reset Password add-on before 1.2.0 for Alfresco has a broken algorithm (involving an increment) that allows a malicious user to change any user's account password include the admin account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-640
References: https://amriunix.com/post/alfresco-reset-password-add-on-0-day-vulnerabilities/; https://amriunix.com/post/alfresco-reset-password-add-on-0-day-vulnerabilities/
CVE: CVE-2019-20919
Published: 2020-09-17
Description: An issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation requires checking for NULL and the code does that. But, shortly thereafter, it calls SvOK(profile), causing a NULL pointer dereference.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00013.html; https://github.com/perl5-dbi/dbi/commit/eca7d7c8f43d96f6277e86d1000e842eb4cc67ff
CVE: CVE-2020-13169
Published: 2020-09-17
Description: Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and pages. This vulnerability may lead to the Information Disclosure and Escalation of Privileges (takeover of administrator account).
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79
References: https://documentation.solarwinds.com/en/Success_Center/orionplatform/Content/Release_Notes/Orion_Platform_2020-2-1_release_notes.htm#NewFeaturesOrion; https://support.solarwinds.com/SuccessCenter/s/; https://documentation.solarwinds.com/en/Success_Center/orionplatform/Content/Release_Notes/Orion_Platform_2020-2-1_release_notes.htm#NewFeaturesOrion
CVE: CVE-2020-24753
Published: 2020-09-17
Description: A memory corruption vulnerability in Objective Open CBOR Run-time (oocborrt) in versions before 2020-08-12 could allow an attacker to execute code via crafted Concise Binary Object Representation (CBOR) input to the cbor2json decoder. An uncaught error while decoding CBOR Major Type 3 text strings leads to the use of an attacker-controllable uninitialized stack value. This can be used to modify memory, causing a crash or potentially exploitable heap corruption.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-755, CWE-787, CWE-908
References: https://github.com/objsys/oocborrt/commit/539851c66778f68a244633985f6f8d0df94ea3b3; https://warcollar.com/cve-2020-24753.html; https://github.com/objsys/oocborrt/commit/539851c66778f68a244633985f6f8d0df94ea3b3
CVE: CVE-2020-25489
Published: 2020-09-17
Description: A heap overflow in Sqreen PyMiniRacer (aka Python Mini Racer) before 0.3.0 allows remote attackers to potentially exploit heap corruption.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://blog.sqreen.com/vulnerability-disclosure-finding-a-vulnerability-in-sqreens-php-agent-and-how-we-fixed-it/; https://github.com/sqreen/PyMiniRacer/compare/v0.2.0...v0.3.0; https://blog.sqreen.com/vulnerability-disclosure-finding-a-vulnerability-in-sqreens-php-agent-and-how-we-fixed-it/
CVE: CVE-2020-25729
Published: 2020-09-17
Description: ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://forums.zoneminder.com/viewforum.php?f=1; https://github.com/ZoneMinder/zoneminder/commit/9268db14a79c4ccd444c2bf8d24e62b13207b413; https://github.com/ZoneMinder/zoneminder/releases/tag/1.34.21