deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-21186
Published: 2023-06-28
Description: In LogResponse of Dns.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261079188
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21187
Published: 2023-06-28
Description: In onCreate of UsbAccessoryUriActivity.java, there is a possible way to escape the Setup Wizard due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246542917
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21188
Published: 2023-06-28
Description: In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-264624283
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21189
Published: 2023-06-28
Description: In startLockTaskMode of LockTaskController.java, there is a possible bypass of lock task mode due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-213942596
CVSS Score: 7.3 (HIGH)
CWE: CWE-667
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21190
Published: 2023-06-28
Description: In btm_acl_encrypt_change of btm_acl.cc, there is a possible way for a remote device to turn off encryption without resulting in a terminated connection due to an unusual root cause. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251436534
CVSS Score: 5.0 (MEDIUM)
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21191
Published: 2023-06-28
Description: In fixNotification of NotificationManagerService.java, there is a possible bypass of notification hide preference due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-269738057
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21192
Published: 2023-06-28
Description: In setInputMethodWithSubtypeIdLocked of InputMethodManagerService.java, there is a possible way to setup input methods that are not enabled due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-227207653
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21193
Published: 2023-06-28
Description: In VideoFrame of VideoFrame.h, there is a possible abort due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-233006499
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21194
Published: 2023-06-28
Description: In gatt_dbg_op_name of gatt_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260079141
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21195
Published: 2023-06-28
Description: In btm_ble_periodic_adv_sync_tx_rcvd of btm_ble_gap.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure over Bluetooth, if the firmware were compromised with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-233879420
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21196
Published: 2023-06-28
Description: In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261857395
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21197
Published: 2023-06-28
Description: In btm_acl_process_sca_cmpl_pkt of btm_acl.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251427561
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21198
Published: 2023-06-28
Description: In remove_sdp_record of btif_sdp_server.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-245517503
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21199
Published: 2023-06-28
Description: In btu_ble_proc_ltk_req of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-254445961
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21200
Published: 2023-06-28
Description: In on_remove_iso_data_path of btm_iso_impl.h, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-236688764
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21201
Published: 2023-06-28
Description: In on_create_record_event of btif_sdp_server.cc, there is a possible out of bounds read due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-263545186
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21202
Published: 2023-06-28
Description: In btm_delete_stored_link_key_complete of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure over Bluetooth with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260568359
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21203
Published: 2023-06-28
Description: In startWpsPbcInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262246082
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21204
Published: 2023-06-28
Description: In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262246231
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21205
Published: 2023-06-28
Description: In startWpsPinDisplayInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262245376
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-502
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21206
Published: 2023-06-28
Description: In initiateVenueUrlAnqpQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262245630
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-502, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21207
Published: 2023-06-28
Description: In initiateTdlsSetupInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262236670
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21208
Published: 2023-06-28
Description: In setCountryCodeInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262245254
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21209
Published: 2023-06-28
Description: In multiple functions of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262236273
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-502
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21210
Published: 2023-06-28
Description: In initiateHs20IconQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262236331
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21211
Published: 2023-06-28
Description: In multiple files, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262235998
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21212
Published: 2023-06-28
Description: In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262236031
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21213
Published: 2023-06-28
Description: In initiateTdlsTeardownInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262235951
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21214
Published: 2023-06-28
Description: In addGroupWithConfigInternal of p2p_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262235736
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21219
Published: 2023-06-28
Description: there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264698379References: N/A
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21220
Published: 2023-06-28
Description: there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264590585References: N/A
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21222
Published: 2023-06-28
Description: In load_dt_data of storage.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-266977723References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21223
Published: 2023-06-28
Description: In LPP_ConvertGNSS_DataBitAssistance of LPP_CommonUtil.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-256047000References: N/A
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21224
Published: 2023-06-28
Description: In ss_ProcessReturnResultComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-265276966References: N/A
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21225
Published: 2023-06-28
Description: there is a possible way to bypass the protected confirmation screen due to Failure to lock display power. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-270403821References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21226
Published: 2023-06-28
Description: In SAEMM_RetrieveTaiList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-240728187References: N/A
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21236
Published: 2023-06-28
Description: In aoc_service_set_read_blocked of aoc.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-270148537References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01
CVE: CVE-2023-21237
Published: 2023-06-28
Description: In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251586912
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://source.android.com/security/bulletin/pixel/2023-06-01; https://source.android.com/security/bulletin/pixel/2023-06-01; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21237
CVE: CVE-2023-3449
Published: 2023-06-28
Description: A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects the function actionExport of the file ?r=recruit/interview/export&interviews=x of the component Interview Management Export. The manipulation of the argument interviews leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-232546 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/MinimoAgoni/cve/blob/main/iboa%20oa.md; https://vuldb.com/?ctiid.232546; https://vuldb.com/?id.232546
CVE: CVE-2023-3450
Published: 2023-06-28
Description: A vulnerability was found in Ruijie RG-BCR860 2.5.13 and classified as critical. This issue affects some unknown processing of the component Network Diagnostic Page. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-232547. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-78
References: https://github.com/RCEraser/cve/blob/main/RG-BCR860.md; https://vuldb.com/?ctiid.232547; https://vuldb.com/?id.232547
CVE: CVE-2021-25827
Published: 2023-06-28
Description: Emby Server < 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For header to a local IP-address.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-290
References: https://emby.media/community/index.php?/topic/98191-emby-server-46-released/; https://github.com/EmbySupport/security/security/advisories/GHSA-fffj-6fr6-3fgf; https://github.com/MediaBrowser/Emby/issues/3784
CVE: CVE-2021-25828
Published: 2023-06-28
Description: Emby Server versions < 4.6.0.50 is vulnerable to Cross Site Scripting (XSS) vulnerability via a crafted GET request to /web.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/MediaBrowser/Emby/issues/3785; https://github.com/MediaBrowser/Emby/issues/3785
CVE: CVE-2023-33570
Published: 2023-06-28
Description: Bagisto v1.5.1 is vulnerable to Server-Side Template Injection (SSTI).
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://siltonrenato02.medium.com/a-brief-summary-about-a-ssti-to-rce-in-bagisto-e900ac450490; https://siltonrenato02.medium.com/a-brief-summary-about-a-ssti-to-rce-in-bagisto-e900ac450490
CVE: CVE-2023-33592
Published: 2023-06-28
Description: Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lfis/admin/?page=system_info/contact_information.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/173331/Lost-And-Found-Information-System-1.0-SQL-Injection.html; https://github.com/DARSHANAGUPTA10/CVE/blob/main/CVE-2023-33592; https://www.sourcecodester.com/php/16525/lost-and-found-information-system-using-php-and-mysql-db-source-code-free-download.html