deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-38155
Published: 2022-08-11
Description: TEE_Malloc in Samsung mTower through 0.3.0 allows a trusted application to achieve Excessive Memory Allocation via a large len value, as demonstrated by a Numaker-PFM-M2351 TEE kernel crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/Samsung/mTower/blob/18f4b592a8a973ce5972f4e2658ea0f6e3686284/tee/lib/libutee/tee_api.c#L314; https://github.com/Samsung/mTower/issues/74; https://github.com/Samsung/mTower/blob/18f4b592a8a973ce5972f4e2658ea0f6e3686284/tee/lib/libutee/tee_api.c#L314
CVE: CVE-2022-38161
Published: 2022-08-11
Description: The Gumstix Overo SBC on the VSKS board through 2022-08-09, as used on the Orlan-10 and other platforms, allows unrestricted remapping of the NOR flash memory containing the bitstream for the FPGA.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://github.com/subreption/birdwatch-report-1-repo; https://subreption.com/downloads/reports/demystifying-the-orlan-10_opt.pdf; https://subreption.com/press-releases/2022-birdwatch-first-report/
CVE: CVE-2022-2736
Published: 2022-08-11
Description: A vulnerability was found in SourceCodester Company Website CMS. It has been classified as critical. This affects an unknown part of the file /dashboard/updatelogo.php of the component Background Upload Logo Icon. The manipulation of the argument xfile/ufile leads to unrestricted upload. It is possible to initiate the attack remotely. The identifier VDB-205881 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://vuldb.com/?id.205881; https://vuldb.com/?id.205881
CVE: CVE-2022-2740
Published: 2022-08-11
Description: A vulnerability was found in SourceCodester Company Website CMS. It has been declared as critical. This vulnerability affects unknown code of the file /dashboard/add-blog.php of the component Add Blog. The manipulation of the argument ufile leads to unrestricted upload. The attack can be initiated remotely. VDB-205882 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://vuldb.com/?id.205882; https://vuldb.com/?id.205882
CVE: CVE-2022-2744
Published: 2022-08-11
Description: A vulnerability, which was classified as critical, has been found in SourceCodester Gym Management System. Affected by this issue is some unknown functionality of the file /admin/add_exercises.php of the component Background Management. The manipulation of the argument exer_img leads to unrestricted upload. The attack may be launched remotely. The identifier of this vulnerability is VDB-206012.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://vuldb.com/?id.206012; https://vuldb.com/?id.206012
CVE: CVE-2022-2745
Published: 2022-08-11
Description: A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. This affects an unknown part of the file /admin/add_trainers.php of the component Add New Trainer. The manipulation of the argument trainer_name leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-206013 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://vuldb.com/?id.206013; https://vuldb.com/?id.206013
CVE: CVE-2022-2746
Published: 2022-08-11
Description: A vulnerability has been found in SourceCodester Simple Online Book Store System and classified as critical. This vulnerability affects unknown code of the file Admin_ add.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-206014 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://vuldb.com/?id.206014; https://vuldb.com/?id.206014
CVE: CVE-2022-2747
Published: 2022-08-11
Description: A vulnerability was found in SourceCodester Simple Online Book Store and classified as critical. This issue affects some unknown processing of the file book.php. The manipulation of the argument book_isbn leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-206015.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://vuldb.com/?id.206015; https://vuldb.com/?id.206015
CVE: CVE-2022-2748
Published: 2022-08-11
Description: A vulnerability was found in SourceCodester Simple Online Book Store System. It has been classified as problematic. Affected is an unknown function of the file /admin/edit.php. The manipulation of the argument eid leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-206016.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?id.206016; https://vuldb.com/?id.206016
CVE: CVE-2022-2749
Published: 2022-08-11
Description: A vulnerability was found in SourceCodester Gym Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mygym/admin/index.php?view_exercises. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206017 was assigned to this vulnerability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-434
References: https://github.com/Blythe-LU/Record3/blob/main/Gym%20Management%20System%20Project-%20Arbitrary%20file%20upload%20vulnerability.md; https://vuldb.com/?id.206017; https://github.com/Blythe-LU/Record3/blob/main/Gym%20Management%20System%20Project-%20Arbitrary%20file%20upload%20vulnerability.md
CVE: CVE-2022-2750
Published: 2022-08-11
Description: A vulnerability, which was classified as critical, was found in SourceCodester Company Website CMS. Affected is an unknown function of the file /dashboard/add-service.php of the component Add Service Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. VDB-206022 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://vuldb.com/?id.206022; https://vuldb.com/?id.206022
CVE: CVE-2022-2751
Published: 2022-08-11
Description: A vulnerability was found in SourceCodester Company Website CMS and classified as critical. Affected by this issue is some unknown functionality of the file /dashboard/add-portfolio.php. The manipulation of the argument ufile leads to unrestricted upload. The attack may be launched remotely. The identifier of this vulnerability is VDB-206024.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://vuldb.com/?id.206024; https://vuldb.com/?id.206024
CVE: CVE-2022-2765
Published: 2022-08-11
Description: A vulnerability was found in SourceCodester Company Website CMS 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/settings. The manipulation leads to improper authentication. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206161 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-287, CWE-306
References: https://github.com/ch0ing/vul/blob/main/WebRay.com.cn/Company%20Website%20CMS--.md; https://vuldb.com/?id.206161; https://github.com/ch0ing/vul/blob/main/WebRay.com.cn/Company%20Website%20CMS--.md
CVE: CVE-2022-2766
Published: 2022-08-11
Description: A vulnerability was found in SourceCodester Loan Management System. It has been rated as critical. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument password leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-206162 is the identifier assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/Drun1baby/CVE_Pentest/blob/main/Loan%20Management%20System%20CMS/images/sql01.png; https://vuldb.com/?id.206162; https://github.com/Drun1baby/CVE_Pentest/blob/main/Loan%20Management%20System%20CMS/images/sql01.png
CVE: CVE-2022-2767
Published: 2022-08-11
Description: A vulnerability classified as problematic has been found in SourceCodester Online Admission System. This affects an unknown part of the file /index.php. The manipulation of the argument student_add leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-206163.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/Drun1baby/CVE_Pentest/blob/main/Online%20Admission%20System%20CMS/images/alert.png; https://vuldb.com/?id.206163; https://github.com/Drun1baby/CVE_Pentest/blob/main/Online%20Admission%20System%20CMS/images/alert.png
CVE: CVE-2022-2777
Published: 2022-08-11
Description: Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/microweber/microweber/commit/60eef7494211d1c458228c321e986edeaa401a58; https://huntr.dev/bounties/13dd2f4d-0c7f-483e-a771-e1ed2ff1c36f; https://github.com/microweber/microweber/commit/60eef7494211d1c458228c321e986edeaa401a58
CVE: CVE-2022-2768
Published: 2022-08-11
Description: A vulnerability classified as problematic was found in SourceCodester Library Management System. This vulnerability affects unknown code of the file /qr/I/. The manipulation of the argument error leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-206164.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?id.206164; https://vuldb.com/?id.206164
CVE: CVE-2022-2769
Published: 2022-08-11
Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Company Website CMS. This issue affects some unknown processing of the file /dashboard/contact. The manipulation of the argument phone leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206165 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/ch0ing/vul/blob/main/WebRay.com.cn/Company%20Website%20CMS%28XSS%29.md; https://vuldb.com/?id.206165; https://github.com/ch0ing/vul/blob/main/WebRay.com.cn/Company%20Website%20CMS%28XSS%29.md
CVE: CVE-2022-2770
Published: 2022-08-11
Description: A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System. Affected is an unknown function of the file /obs/book.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to launch the attack remotely. VDB-206166 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?id.206166; https://vuldb.com/?id.206166
CVE: CVE-2022-2771
Published: 2022-08-11
Description: A vulnerability has been found in SourceCodester Simple Online Book Store System and classified as critical. Affected by this vulnerability is an unknown functionality of the file /obs/bookPerPub.php. The manipulation of the argument bookisbn leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-206167.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://vuldb.com/?id.206167; https://vuldb.com/?id.206167
CVE: CVE-2022-2772
Published: 2022-08-11
Description: A vulnerability was found in SourceCodester Apartment Visitor Management System and classified as critical. Affected by this issue is some unknown functionality of the file action-visitor.php. The manipulation of the argument editid/remark leads to sql injection. The attack may be launched remotely. The identifier of this vulnerability is VDB-206168.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://vuldb.com/?id.206168; https://vuldb.com/?id.206168
CVE: CVE-2022-2773
Published: 2022-08-11
Description: A vulnerability was found in SourceCodester Apartment Visitor Management System. It has been classified as problematic. This affects an unknown part of the file profile.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-206169 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?id.206169; https://vuldb.com/?id.206169
CVE: CVE-2022-2774
Published: 2022-08-11
Description: A vulnerability was found in SourceCodester Library Management System. It has been declared as critical. This vulnerability affects unknown code of the file librarian/student.php. The manipulation of the argument title leads to sql injection. The attack can be initiated remotely. VDB-206170 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://vuldb.com/?id.206170; https://vuldb.com/?id.206170
CVE: CVE-2022-2776
Published: 2022-08-11
Description: A vulnerability classified as problematic has been found in SourceCodester Gym Management System. Affected is an unknown function of the file delete_user.php. The manipulation of the argument delete_user leads to denial of service. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-206172.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-404
References: https://vuldb.com/?id.206172; https://vuldb.com/?id.206172
CVE: CVE-2021-0734
Published: 2022-08-11
Description: In Settings, there is a possible way to determine whether an app is installed without query permissions, due to side channel information disclosure. This could lead to local information disclosure of an installed package, without proper query permissions, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-189122911
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-668
References: https://source.android.com/security/bulletin/android-13; https://source.android.com/security/bulletin/android-13
CVE: CVE-2021-0735
Published: 2022-08-11
Description: In PackageManager, there is a possible way to get information about installed packages ignoring limitations introduced in Android 11 due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-188913056
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/android-13; https://source.android.com/security/bulletin/android-13
CVE: CVE-2021-0975
Published: 2022-08-11
Description: In USB Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure of installed packages with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-180104273
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-203
References: https://source.android.com/security/bulletin/android-13; https://source.android.com/security/bulletin/android-13
CVE: CVE-2021-22289
Published: 2022-08-11
Description: Improper Input Validation vulnerability in the project upload mechanism in B&R Automation Studio version >=4.0 may allow an unauthenticated network attacker to execute code.
CVSS Score: 8.3 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.br-automation.com/downloads_br_productcatalogue/assets/[PII_REDACTED]94-en-original-1.0.pdf; https://www.br-automation.com/downloads_br_productcatalogue/assets/[PII_REDACTED]94-en-original-1.0.pdf
CVE: CVE-2022-20158
Published: 2022-08-11
Description: In bdi_put and bdi_unregister of backing-dev.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-182815710References: Upstream kernel
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20180
Published: 2022-08-11
Description: In several functions of mali_gralloc_reference.cpp, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-212804042References: N/A
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20237
Published: 2022-08-11
Description: In BuildDevIDResponse of miscdatabuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-229621649References: N/A
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20241
Published: 2022-08-11
Description: In Messaging, there is a possible way to attach a private file to an SMS message due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-217185011
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: https://source.android.com/security/bulletin/android-13; https://source.android.com/security/bulletin/android-13
CVE: CVE-2022-20242
Published: 2022-08-11
Description: In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-231986212
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-203
References: https://source.android.com/security/bulletin/android-13; https://source.android.com/security/bulletin/android-13
CVE: CVE-2022-20243
Published: 2022-08-11
Description: In Core Utilities, there is a possible log information disclosure. This could lead to local information disclosure of sensitive browsing data with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-190199986
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-319
References: https://source.android.com/security/bulletin/android-13; https://source.android.com/security/bulletin/android-13
CVE: CVE-2022-20244
Published: 2022-08-11
Description: In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if more than 100 bluetooth devices have been connected with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-201083240
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/android-13; https://source.android.com/security/bulletin/android-13
CVE: CVE-2022-20245
Published: 2022-08-11
Description: In WindowManager, there is a possible method to create a recording of the lock screen due to an insecure default value. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-215005011
CVSS Score: 2.4 (LOW)
References: https://source.android.com/security/bulletin/android-13; https://source.android.com/security/bulletin/android-13
CVE: CVE-2022-20246
Published: 2022-08-11
Description: In WindowManager, there is a possible bypass of the restrictions for starting activities from the background due to an incorrect UID/permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-230493191
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/android-13; https://source.android.com/security/bulletin/android-13
CVE: CVE-2022-20247
Published: 2022-08-11
Description: In Media, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-229858836
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/android-13; https://source.android.com/security/bulletin/android-13
CVE: CVE-2022-20248
Published: 2022-08-11
Description: In Settings, there is a possible way to connect to an open network bypassing DISALLOW_CONFIG_WIFI restriction due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-227619193
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/android-13; https://source.android.com/security/bulletin/android-13
CVE: CVE-2022-20249
Published: 2022-08-11
Description: In LocaleManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-226900861
CVSS Score: 3.3 (LOW)
CWE: CWE-203
References: https://source.android.com/security/bulletin/android-13; https://source.android.com/security/bulletin/android-13
CVE: CVE-2022-20250
Published: 2022-08-11
Description: In Messaging, there is a possible way to attach files to a message without proper access checks due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-226134095
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/android-13; https://source.android.com/security/bulletin/android-13
CVE: CVE-2022-20251
Published: 2022-08-11
Description: In LocaleManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-225881167
CVSS Score: 3.3 (LOW)
CWE: CWE-203
References: https://source.android.com/security/bulletin/android-13; https://source.android.com/security/bulletin/android-13
CVE: CVE-2022-20252
Published: 2022-08-11
Description: In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224547584
CVSS Score: 3.3 (LOW)
CWE: CWE-203
References: https://source.android.com/security/bulletin/android-13; https://source.android.com/security/bulletin/android-13
CVE: CVE-2022-20365
Published: 2022-08-11
Description: Product: AndroidVersions: Android kernelAndroid ID: A-229632566References: N/A
CVSS Score: 9.8 (CRITICAL)
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01