deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-34880
Published: 2023-06-15
Description: cmseasy v7.7.7.7 20230520 was discovered to contain a path traversal vulnerability via the add_action method at lib/admin/language_admin.php. This vulnerability allows attackers to execute arbitrary code and perform a local file inclusion.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://blog.pumpk1n.com/2023/06/06/cmseasy-v7-7-7-7-20230520-path-traversal/; https://blog.pumpk1n.com/2023/06/06/cmseasy-v7-7-7-7-20230520-path-traversal/
CVE: CVE-2023-34455
Published: 2023-06-15
Description: snappy-java is a fast compressor/decompressor for Java. Due to use of an unchecked chunk length, an unrecoverable fatal error can occur in versions prior to 1.1.10.1.

The code in the function hasNextChunk in the fileSnappyInputStream.java checks if a given stream has more chunks to read. It does that by attempting to read 4 bytes. If it wasn’t possible to read the 4 bytes, the function returns false. Otherwise, if 4 bytes were available, the code treats them as the length of the next chunk.

In the case that the `compressed` variable is null, a byte array is allocated with the size given by the input data. Since the code doesn’t test the legality of the `chunkSize` variable, it is possible to pass a negative number (such as 0xFFFFFFFF which is -1), which will cause the code to raise a `java.lang.NegativeArraySizeException` exception. A worse case would happen when passing a huge positive value (such as 0x7FFFFFFF), which would raise the fatal `java.lang.OutOfMemoryError` error.

Version 1.1.10.1 contains a patch for this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770, CWE-770
References: https://github.com/xerial/snappy-java/blob/05c39b2ca9b5b7b39611529cc302d3d796329611/src/main/java/org/xerial/snappy/SnappyInputStream.java#L388; https://github.com/xerial/snappy-java/blob/master/src/main/java/org/xerial/snappy/SnappyInputStream.java; https://github.com/xerial/snappy-java/commit/3bf67857fcf70d9eea56eed4af7c925671e8eaea
CVE: CVE-2023-34833
Published: 2023-06-15
Description: An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows attackers to execute arbitrary code via a crafted file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-434
References: https://note.youdao.com/s/3tge43wH; https://note.youdao.com/s/3tge43wH
CVE: CVE-2021-0701
Published: 2023-06-15
Description: In PVRSRVBridgeSyncPrimOpCreate of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2021-0945
Published: 2023-06-15
Description: In _PMRCreate of the PowerVR kernel driver, a missing bounds check means it is possible to overwrite heap memory via PhysmemNewRamBackedPMR. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21095
Published: 2023-06-15
Description: In canStartSystemGesture of RecentsAnimationDeviceState.java, there is a possible partial lockscreen bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12L Android-13Android ID: A-242704576
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21101
Published: 2023-06-15
Description: In multiple functions of WVDrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-258189255
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21105
Published: 2023-06-15
Description: In multiple functions of ChooserActivity.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-261036568
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-918
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21108
Published: 2023-06-15
Description: In sdpu_build_uuid_seq of sdp_discovery.cc, there is a possible out of bounds write due to a use after free. This could lead to remote code execution over Bluetooth, if HFP support is enabled, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-239414876
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21115
Published: 2023-06-15
Description: In btm_sec_encrypt_change of btm_sec.cc, there is a possible way to downgrade the link key type due to improperly used crypto. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-258834033
CVSS Score: 8.8 (HIGH)
CWE: CWE-327
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21120
Published: 2023-06-15
Description: In multiple functions of cdm_engine.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-258188673
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-667
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21121
Published: 2023-06-15
Description: In onResume of AppManagementFragment.java, there is a possible way to prevent users from forgetting a previously connected VPN due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-205460459
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-276
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21122
Published: 2023-06-15
Description: In various functions of various files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for tracing due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-270050191
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21123
Published: 2023-06-15
Description: In multiple functions of multiple files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for tracing due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-270050064
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21124
Published: 2023-06-15
Description: In run of multiple files, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-265798353
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21126
Published: 2023-06-15
Description: In bindOutputSwitcherAndBroadcastButton of MediaControlPanel.java, there is a possible launch arbitrary activity under SysUI due to Unsafe Intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-271846393
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21127
Published: 2023-06-15
Description: In readSampleData of NuMediaExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-275418191
CVSS Score: 8.8 (HIGH)
CWE: CWE-908
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21128
Published: 2023-06-15
Description: In various functions of AppStandbyController.java, there is a possible way to break manageability scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-272042183
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21129
Published: 2023-06-15
Description: In getFullScreenIntentDecision of NotificationInterruptStateProviderImpl.java, there is a possible activity launch while the app is in the background due to a BAL bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-274759612
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21130
Published: 2023-06-15
Description: In btm_ble_periodic_adv_sync_lost of btm_ble_gap.cc, there is a possible remote code execution due to a buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-273502002
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21131
Published: 2023-06-15
Description: In checkKeyIntentParceledCorrectly() of ActivityManagerService.java, there is a possible bypass of Parcel Mismatch mitigations due to a logic error in the code. This could lead to local escalation of privilege and the ability to launch arbitrary activities in settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-265015796
CVSS Score: 7.8 (HIGH)
CWE: CWE-639
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21135
Published: 2023-06-15
Description: In onCreate of NotificationAccessSettings.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-260570119
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-120
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21136
Published: 2023-06-15
Description: In multiple functions of JobStore.java, there is a possible way to cause a crash on startup due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-246542285
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-120
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21137
Published: 2023-06-15
Description: In several methods of JobStore.java, uncaught exceptions in job map parsing could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-246541702
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-754
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21138
Published: 2023-06-15
Description: In onNullBinding of CallRedirectionProcessor.java, there is a possible long lived connection due to improper input validation. This could lead to local escalation of privilege and background activity launches with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-273260090
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-276
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21139
Published: 2023-06-15
Description: In bindPlayer of MediaControlPanel.java, there is a possible launch arbitrary activity in SysUI due to Unsafe Intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-271845008
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21141
Published: 2023-06-15
Description: In several functions of several files, there is a possible way to access developer mode traces due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-262244249
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21142
Published: 2023-06-15
Description: In multiple files, there is a possible way to access traces in the dev mode due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-262243665
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21143
Published: 2023-06-15
Description: In multiple functions of multiple files, there is a possible way to make the device unusable due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-268193777
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-120
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21144
Published: 2023-06-15
Description: In doInBackground of NotificationContentInflater.java, there is a possible temporary denial or service due to long running operations. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-252766417
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://source.android.com/security/bulletin/2023-06-01; https://source.android.com/security/bulletin/2023-06-01
CVE: CVE-2023-21618
Published: 2023-06-15
Description: Adobe Substance 3D Designer version 12.4.1 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-824
References: https://helpx.adobe.com/security/products/substance3d_designer/apsb23-39.html; https://helpx.adobe.com/security/products/substance3d_designer/apsb23-39.html
CVE: CVE-2023-22248
Published: 2023-06-15
Description: Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to leak another user's data. Exploitation of this issue does not require user interaction.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://helpx.adobe.com/security/products/magento/apsb23-35.html; https://helpx.adobe.com/security/products/magento/apsb23-35.html
CVE: CVE-2023-28809
Published: 2023-06-15
Description: Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operation permissions by forging the IP and session ID of an authenticated user.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284, CWE-384
References: http://packetstormsecurity.com/files/174506/Hikvision-Access-Control-Session-Hijacking.html; https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-access-control-intercom/; http://packetstormsecurity.com/files/174506/Hikvision-Access-Control-Session-Hijacking.html
CVE: CVE-2023-29287
Published: 2023-06-15
Description: Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Information Exposure vulnerability that could lead to a security feature bypass. An attacker could leverage this vulnerability to leak minor user data. Exploitation of this issue does not require user interaction..
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://helpx.adobe.com/security/products/magento/apsb23-35.html; https://helpx.adobe.com/security/products/magento/apsb23-35.html
CVE: CVE-2023-29288
Published: 2023-06-15
Description: Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A privileged attacker could leverage this vulnerability to modify a minor functionality of another user's data. Exploitation of this issue does not require user interaction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://helpx.adobe.com/security/products/magento/apsb23-35.html; https://helpx.adobe.com/security/products/magento/apsb23-35.html
CVE: CVE-2023-29289
Published: 2023-06-15
Description: Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an XML Injection vulnerability. An attacker with low privileges can trigger a specially crafted script to a security feature bypass. Exploitation of this issue does not require user interaction.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-91
References: https://helpx.adobe.com/security/products/magento/apsb23-35.html; https://helpx.adobe.com/security/products/magento/apsb23-35.html
CVE: CVE-2023-29290
Published: 2023-06-15
Description: Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to bypass a minor functionality. Exploitation of this issue does not require user interaction.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-353
References: https://helpx.adobe.com/security/products/magento/apsb23-35.html; https://helpx.adobe.com/security/products/magento/apsb23-35.html
CVE: CVE-2023-29291
Published: 2023-06-15
Description: Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. An admin-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-918
References: https://helpx.adobe.com/security/products/magento/apsb23-35.html; https://helpx.adobe.com/security/products/magento/apsb23-35.html
CVE: CVE-2023-29292
Published: 2023-06-15
Description: Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. An admin-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-918
References: https://helpx.adobe.com/security/products/magento/apsb23-35.html; https://helpx.adobe.com/security/products/magento/apsb23-35.html
CVE: CVE-2023-29293
Published: 2023-06-15
Description: Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An admin privileged attacker could leverage this vulnerability to impact the availability of a user's minor feature. Exploitation of this issue does not require user interaction.
CVSS Score: 2.7 (LOW)
CWE: CWE-20
References: https://helpx.adobe.com/security/products/magento/apsb23-35.html; https://helpx.adobe.com/security/products/magento/apsb23-35.html