deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-15410
Published: 2019-11-14
Description: The Asus ZenFone 5Q Android device with a build fingerprint of asus/WW_Phone/ASUS_X017D_2:7.1.1/NGI77B/14.0400.[PII_REDACTED]1016:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=[PII_REDACTED], versionName=7.0.0.4_170901) that allows other pre-installed apps to perform command execution via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
CVSS Score: 7.8 (HIGH)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15411
Published: 2019-11-14
Description: The Asus ZenFone 3 Laser Android device with a build fingerprint of asus/WW_msm8937/msm8937:7.1.1/NMF26F/WW_32.40.106.114_20180928:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=[PII_REDACTED], versionName=7.0.0.4_170901) that allows other pre-installed apps to perform command execution via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
CVSS Score: 7.8 (HIGH)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15412
Published: 2019-11-14
Description: The Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WW_Z01M/ASUS_Z01M_1:7.1.1/NMF26F/WW_71.50.395.57_20180913:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=[PII_REDACTED], versionName=7.0.0.4_170901) that allows other pre-installed apps to perform command execution via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
CVSS Score: 7.8 (HIGH)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15413
Published: 2019-11-14
Description: The Asus ZenFone 3 Ultra Android device with a build fingerprint of asus/WW_Phone/ASUS_A001:7.0/NRD90M/14.1010.1804.75-20180612:user/release-keys contains a pre-installed app with a package name of com.asus.splendidcommandagent app (versionCode=[PII_REDACTED], versionName=1.2.0.21_180605) that allows other pre-installed apps to perform command execution via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
CVSS Score: 7.8 (HIGH)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15414
Published: 2019-11-14
Description: The Asus ZenFone AR Android device with a build fingerprint of asus/WW_ASUS_A002/ASUS_A002:7.0/NRD90M/14.1600.1805.51-20180626:user/release-keys contains a pre-installed app with a package name of com.asus.splendidcommandagent app (versionCode=[PII_REDACTED], versionName=1.2.0.21_180605) that allows other pre-installed apps to perform command execution via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
CVSS Score: 7.8 (HIGH)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15415
Published: 2019-11-14
Description: The Xiaomi Redmi 5 Android device with a build fingerprint of xiaomi/vince/vince:7.1.2/N2G47H/V9.5.4.0.NEGMIFA:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app (versionCode=1, versionName=QL1711_[PII_REDACTED]45) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device.
CVSS Score: 3.3 (LOW)
CWE: CWE-610
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15416
Published: 2019-11-14
Description: The Sony keyaki_kddi Android device with a build fingerprint of Sony/keyaki_kddi/keyaki_kddi:7.1.1/TONE3-3.0.0-KDDI[PII_REDACTED]/1:user/dev-keys contains a pre-installed app with a package name of com.kddi.android.packageinstaller app (versionCode=70008, versionName=08.10.03) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
CVSS Score: 7.8 (HIGH)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15417
Published: 2019-11-14
Description: The Tecno Spark Pro Android device with a build fingerprint of TECNO/H3722/TECNO-K8:7.0/NRD90M/K8-H3722ABCDE-N-171229V96:user/release-keys contains a pre-installed app with a package name of com.lovelyfont.defcontainer app (versionCode=7, versionName=7.0.5) that allows unauthorized dynamic code loading via a confused deputy attack. This capability can be accessed by any app co-located on the device.
CVSS Score: 7.8 (HIGH)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15418
Published: 2019-11-14
Description: The Asus ASUS_X00K_1 Android device with a build fingerprint of asus/CN_X00K/ASUS_X00K_1:7.0/NRD90M/CN_X00K-14.01.1711.27-20180420:user/release-keys contains a pre-installed app with a package name of com.lovelyfont.defcontainer app (versionCode=5, versionName=5.0.1) that allows unauthorized command execution via a confused deputy attack. This capability can be accessed by any app co-located on the device.
CVSS Score: 7.8 (HIGH)
CWE: CWE-610
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15419
Published: 2019-11-14
Description: The Asus ASUS_X015_1 Android device with a build fingerprint of asus/CN_X015/ASUS_X015_1:7.0/NRD90M/CN_X015-14.00.1709.35-20171215:user/release-keys contains a pre-installed app with a package name of com.lovelyfont.defcontainer app (versionCode=5, versionName=5.0.1) that allows unauthorized command execution via a confused deputy attack. This capability can be accessed by any app co-located on the device.
CVSS Score: 7.8 (HIGH)
CWE: CWE-610
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15420
Published: 2019-11-14
Description: The Blackview BV9000Pro-F Android device with a build fingerprint of Blackview/BV9000Pro-F/BV9000Pro-F:7.1.1/N4F26M/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app (versionCode=1, versionName=1) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device.
CVSS Score: 3.3 (LOW)
CWE: CWE-610
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15421
Published: 2019-11-14
Description: The Blackview BV7000_Pro Android device with a build fingerprint of Blackview/BV7000_Pro/BV7000_Pro:7.0/NRD90M/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app (versionCode=1, versionName=1) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device.
CVSS Score: 3.3 (LOW)
CWE: CWE-610
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15422
Published: 2019-11-14
Description: The Doogee Mix Android device with a build fingerprint of DOOGEE/MIX/MIX:7.0/NRD90M/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app (versionCode=1, versionName=1) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device.
CVSS Score: 3.3 (LOW)
CWE: CWE-610
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15423
Published: 2019-11-14
Description: The Bluboo Bluboo_S1 Android device with a build fingerprint of BLUBOO/Bluboo_S1/Bluboo_S1:7.0/NRD90M/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app (versionCode=1, versionName=1) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device.
CVSS Score: 3.3 (LOW)
CWE: CWE-610
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15424
Published: 2019-11-14
Description: The Doogee BL5000 Android device with a build fingerprint of DOOGEE/BL5000/BL5000:7.0/NRD90M/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app (versionCode=1, versionName=1) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device.
CVSS Score: 3.3 (LOW)
CWE: CWE-610
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15425
Published: 2019-11-14
Description: The Kata M4s Android device with a build fingerprint of alps/full_hct6750_66_n/hct6750_66_n:7.0/NRD90M/[PII_REDACTED]:user/test-keys contains a pre-installed app with a package name of com.mediatek.factorymode app (versionCode=1, versionName=1) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device.
CVSS Score: 3.3 (LOW)
CWE: CWE-610
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15426
Published: 2019-11-14
Description: The Xiaomi 5S Plus Android device with a build fingerprint of Xiaomi/natrium/natrium:6.0.1/MXB48T/7.1.5:user/release-keys contains a pre-installed app with a package name of com.miui.powerkeeper app (versionCode=40000, versionName=4.0.00) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device.
CVSS Score: 3.3 (LOW)
CWE: CWE-610
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15427
Published: 2019-11-14
Description: The Xiaomi Mi Mix Android device with a build fingerprint of Xiaomi/lithium/lithium:6.0.1/MXB48T/7.1.5:user/release-keys contains a pre-installed app with a package name of com.miui.powerkeeper app (versionCode=40000, versionName=4.0.00) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device.
CVSS Score: 3.3 (LOW)
CWE: CWE-610
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15428
Published: 2019-11-14
Description: The Xiaomi Mi Note 2 Android device with a build fingerprint of Xiaomi/scorpio/scorpio:6.0.1/MXB48T/7.1.5:user/release-keys contains a pre-installed app with a package name of com.miui.powerkeeper app (versionCode=40000, versionName=4.0.00) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device.
CVSS Score: 3.3 (LOW)
CWE: CWE-610
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15429
Published: 2019-11-14
Description: The Panasonic ELUGA_I9 Android device with a build fingerprint of Panasonic/ELUGA_I9/ELUGA_I9:7.0/NRD90M/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.ovvi.modem app (versionCode=1, versionName=1) that allows unauthorized attacker-controlled at command via a confused deputy attack. This capability can be accessed by any app co-located on the device.
CVSS Score: 7.8 (HIGH)
CWE: CWE-610
References: https://mobile.panasonic.com/in/advisory; https://www.kryptowire.com/android-firmware-2019/; https://mobile.panasonic.com/in/advisory
CVE: CVE-2019-15430
Published: 2019-11-14
Description: The Bluboo D3 Pro Android device with a build fingerprint of BLUBOO/Bluboo_D2_Pro/Bluboo_D2_Pro:7.0/NRD90M/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.qiku.cleaner app (versionCode=2, versionName=2.0.0_VER_[PII_REDACTED]5515) that allows other pre-installed apps to perform system properties modification via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15431
Published: 2019-11-14
Description: The Evercoss U50A Android device with a build fingerprint of EVERCOSS/U50A./EVERCOSS:7.0/NRD90M/[PII_REDACTED]:eng/test-keys contains a pre-installed app with a package name of com.qiku.cleaner app (versionCode=2, versionName=2.0_VER_2017.04.21_17:55:55) that allows other pre-installed apps to perform system properties modification via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15432
Published: 2019-11-14
Description: The Evercoss U6 Android device with a build fingerprint of EVERCOSS/U6/U6:7.0/NRD90M/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.qiku.cleaner app (versionCode=2, versionName=2.0.0_VER_[PII_REDACTED]4094) that allows other pre-installed apps to perform system properties modification via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
CVSS Score: 7.8 (HIGH)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15433
Published: 2019-11-14
Description: The Samsung A3 Android device with a build fingerprint of samsung/a3y17ltedx/a3y17lte:8.0.0/R16NW/A320YDXU4CSB3:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000000, versionName=7.0.0.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
CVSS Score: 7.8 (HIGH)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15434
Published: 2019-11-14
Description: The Samsung A5 Android device with a build fingerprint of samsung/a5y17ltexx/a5y17lte:8.0.0/R16NW/A520FXXS8CSC5:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000000, versionName=7.0.0.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
CVSS Score: 7.8 (HIGH)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15435
Published: 2019-11-14
Description: The Samsung A7 Android device with a build fingerprint of samsung/a7y17ltexx/a7y17lte:8.0.0/R16NW/A720FXXU7CSC2:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000000, versionName=7.0.0.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
CVSS Score: 7.8 (HIGH)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15436
Published: 2019-11-14
Description: The Samsung A8+ Android device with a build fingerprint of samsung/jackpot2ltexx/jackpot2lte:8.0.0/R16NW/A730FXXS4BSC2:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000000, versionName=7.0.0.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
CVSS Score: 7.8 (HIGH)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15437
Published: 2019-11-14
Description: The Samsung XCover4 Android device with a build fingerprint of samsung/xcover4ltexx/xcover4lte:8.1.0/M1AJQ/G390FXXU3BSA2:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000100, versionName=7.0.1.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
CVSS Score: 7.8 (HIGH)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15438
Published: 2019-11-14
Description: The Samsung XCover4 Android device with a build fingerprint of samsung/xcover4ltedo/xcover4lte:8.1.0/M1AJQ/G390YDXU2BSA1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000100, versionName=7.0.1.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
CVSS Score: 7.8 (HIGH)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15439
Published: 2019-11-14
Description: The Samsung XCover4 Android device with a build fingerprint of samsung/xcover4ltedo/xcover4lte:8.1.0/M1AJQ/G390YDXU2BSA1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000100, versionName=7.0.1.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
CVSS Score: 7.8 (HIGH)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15440
Published: 2019-11-14
Description: The Samsung J5 Android device with a build fingerprint of samsung/on5xeltedx/on5xelte:8.0.0/R16NW/G570YDXU2CRL1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=6010000, versionName=6.1.0.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
CVSS Score: 7.8 (HIGH)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15441
Published: 2019-11-14
Description: The Samsung on7xeltelgt Android device with a build fingerprint of samsung/on7xeltelgt/on7xeltelgt:8.1.0/M1AJQ/G610LKLU2CSB1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000100, versionName=7.0.1.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
CVSS Score: 7.8 (HIGH)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15442
Published: 2019-11-14
Description: The Samsung on7xelteskt Android device with a build fingerprint of samsung/on7xelteskt/on7xelteskt:8.1.0/M1AJQ/G610SKSU2CSB1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000100, versionName=7.0.1.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
CVSS Score: 7.8 (HIGH)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15443
Published: 2019-11-14
Description: The Samsung J7 Max Android device with a build fingerprint of samsung/j7maxlteins/j7maxlte:8.1.0/M1AJQ/G615FXXU2BSB1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000100, versionName=7.0.1.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
CVSS Score: 7.8 (HIGH)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/