deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-20965
Published: 2023-08-14
Description: In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522, CWE-522
References: https://android.googlesource.com/platform/packages/modules/Wifi/+/0d3cb609b0851ea9e5745cc6101e57c2e5e739f2; https://android.googlesource.com/platform/packages/modules/Wifi/+/88a8a98934215f591605028e200b6eca8f7cc45a; https://android.googlesource.com/platform/packages/modules/Wifi/+/bd318b[PII_REDACTED]509f6fdb[PII_REDACTED]dd65ad
CVE: CVE-2023-21132
Published: 2023-08-14
Description: In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 6.8 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453; https://source.android.com/security/bulletin/2023-08-01; https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453
CVE: CVE-2023-21133
Published: 2023-08-14
Description: In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 6.8 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453; https://source.android.com/security/bulletin/2023-08-01; https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453
CVE: CVE-2023-21134
Published: 2023-08-14
Description: In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 6.8 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453; https://source.android.com/security/bulletin/2023-08-01; https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453
CVE: CVE-2023-21140
Published: 2023-08-14
Description: In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 6.8 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453; https://source.android.com/security/bulletin/2023-08-01; https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453
CVE: CVE-2023-21242
Published: 2023-08-14
Description: In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 9.8 (CRITICAL)
References: https://android.googlesource.com/platform/packages/modules/Wifi/+/72e903f258b5040b8f492cf18edd124b5a1ac770; https://source.android.com/security/bulletin/2023-08-01; https://android.googlesource.com/platform/packages/modules/Wifi/+/72e903f258b5040b8f492cf18edd124b5a1ac770
CVE: CVE-2023-21264
Published: 2023-08-14
Description: In multiple functions of mem_protect.c, there is a possible way to access hypervisor memory due to a memory access check in the wrong place. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 6.7 (MEDIUM)
CWE: CWE-119
References: https://android.googlesource.com/kernel/common/+/53625a846a7b4; https://android.googlesource.com/kernel/common/+/b35a06182451f; https://source.android.com/security/bulletin/2023-08-01
CVE: CVE-2023-21265
Published: 2023-08-14
Description: In multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.5 (HIGH)
CWE: CWE-295, CWE-295
References: https://android.googlesource.com/platform/system/ca-certificates/+/6065b4a4c7da9cc9ee01c2f[PII_REDACTED]d2724c4; https://source.android.com/security/bulletin/2023-08-01; https://android.googlesource.com/platform/system/ca-certificates/+/6065b4a4c7da9cc9ee01c2f[PII_REDACTED]d2724c4
CVE: CVE-2023-21267
Published: 2023-08-14
Description: In multiple functions of KeyguardViewMediator.java, there is a possible way to bypass lockdown mode with screen pinning due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://android.googlesource.com/platform/frameworks/base/+/cb7e9c7549a2a076ec00db15e3da0d21b31b0b1c; https://android.googlesource.com/platform/frameworks/base/+/cecddcd865f72d76f7aacb1cf[PII_REDACTED]299f9; https://android.googlesource.com/platform/frameworks/base/+/e205cd30e91d8eeadf562140c34c306ebf7d6394
CVE: CVE-2023-21268
Published: 2023-08-14
Description: In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/ca4c9a19635119d95900793e7a41b820cd1d94d9; https://source.android.com/security/bulletin/2023-08-01; https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/ca4c9a19635119d95900793e7a41b820cd1d94d9
CVE: CVE-2023-21269
Published: 2023-08-14
Description: In startActivityInner of ActivityStarter.java, there is a possible way to launch an activity into PiP mode from the background due to BAL bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-266
References: https://android.googlesource.com/platform/frameworks/base/+/70ec64dc5a2a816d6aa324190a726a85fd749b30; https://source.android.com/security/bulletin/2023-08-01; https://android.googlesource.com/platform/frameworks/base/+/70ec64dc5a2a816d6aa324190a726a85fd749b30
CVE: CVE-2023-38687
Published: 2023-08-14
Description: Svelecte is a flexible autocomplete/select component written in Svelte. Svelecte item names are rendered as raw HTML with no escaping. This allows the injection of arbitrary HTML into the Svelecte dropdown. This can be exploited to execute arbitrary JavaScript whenever a Svelecte dropdown is opened. Item names given to Svelecte appear to be directly rendered as HTML by the default item renderer. This means that any HTML tags in the name are rendered as HTML elements not as text. Note that the custom item renderer shown in https://mskocik.github.io/svelecte/#item-rendering is also vulnerable to the same exploit. Any site that uses Svelecte with dynamically created items either from an external source or from user-created content could be vulnerable to an XSS attack (execution of untrusted JavaScript), clickjacking or any other attack that can be performed with arbitrary HTML injection. The actual impact of this vulnerability for a specific application depends on how trustworthy the sources that provide Svelecte items are and the steps that the application has taken to mitigate XSS attacks. XSS attacks using this vulnerability are mostly mitigated by a Content Security Policy that blocks inline JavaScript. This issue has been addressed in version 3.16.3. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/mskocik/svelecte/security/advisories/GHSA-7h45-grc5-89wq; https://github.com/mskocik/svelecte/security/advisories/GHSA-7h45-grc5-89wq
CVE: CVE-2023-39827
Published: 2023-08-14
Description: Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the rule_info parameter in the formAddMacfilterRule function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/lst-oss/Vulnerability/tree/main/Tenda/A18/formAddMacfilterRule; https://github.com/lst-oss/Vulnerability/tree/main/Tenda/A18/formAddMacfilterRule
CVE: CVE-2023-39828
Published: 2023-08-14
Description: Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/lst-oss/Vulnerability/tree/main/Tenda/A18/formWifiBasicSet; https://github.com/lst-oss/Vulnerability/tree/main/Tenda/A18/formWifiBasicSet
CVE: CVE-2023-39829
Published: 2023-08-14
Description: Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the wpapsk_crypto2_4g parameter in the fromSetWirelessRepeat function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/lst-oss/Vulnerability/tree/main/Tenda/A18/fromSetWirelessRepeat; https://github.com/lst-oss/Vulnerability/tree/main/Tenda/A18/fromSetWirelessRepeat
CVE: CVE-2023-39950
Published: 2023-08-14
Description: efibootguard is a simple UEFI boot loader with support for safely switching between current and updated partition sets. Insufficient or missing validation and sanitization of input from untrustworthy bootloader environment files can cause crashes and probably also code injections into `bg_setenv`) or programs using `libebgenv`. This is triggered when the affected components try to modify a manipulated environment, in particular its user variables. Furthermore, `bg_printenv` may crash over invalid read accesses or report invalid results. Not affected by this issue is EFI Boot Guard's bootloader EFI binary. EFI Boot Guard release v0.15 contains required patches to sanitize and validate the bootloader environment prior to processing it in userspace. Its library and tools should be updated, so should programs statically linked against it. An update of the bootloader EFI executable is not required. The only way to prevent the issue with an unpatched EFI Boot Guard version is to avoid accesses to user variables, specifically modifications to them.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20
References: https://github.com/siemens/efibootguard/blob/master/docs/API.md; https://github.com/siemens/efibootguard/blob/master/docs/TOOLS.md; https://github.com/siemens/efibootguard/blob/master/docs/TOOLS.md#setting-user-variables
CVE: CVE-2023-40013
Published: 2023-08-14
Description: SVG Loader is a javascript library that fetches SVGs using XMLHttpRequests and injects the SVG code in the tag's place. According to the docs, svg-loader will strip all JS code before injecting the SVG file for security reasons but the input sanitization logic is not sufficient and can be trivially bypassed. This allows an attacker to craft a malicious SVG which can result in Cross-site Scripting (XSS). When trying to sanitize the svg the lib removes event attributes such as `onmouseover`, `onclick` but the list of events is not exhaustive.  Any website which uses external-svg-loader and allows its users to provide svg src, upload svg files would be susceptible to stored XSS attack. This issue has been addressed in commit `d3562fc08` which is included in releases from 1.6.9. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://github.com/shubhamjain/svg-loader/blob/main/svg-loader.js#L125-L128; https://github.com/shubhamjain/svg-loader/commit/d3562fc08497aec5f33eb82017fa1417b3319e2c; https://github.com/shubhamjain/svg-loader/security/advisories/GHSA-xc2r-jf2x-gjr8
CVE: CVE-2023-40020
Published: 2023-08-14
Description: PrivateUploader is an open source image hosting server written in Vue and TypeScript. In affected versions `app/routes/v3/admin.controller.ts` did not correctly verify whether the user was an administrator (High Level) or moderator (Low Level) causing the request to continue processing. The response would be a 403 with ADMIN_ONLY, however, next() would call leading to any updates/changes in the route to process. This issue has been addressed in version 3.2.49. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS Score: 9.9 (CRITICAL)
CWE: CWE-287
References: https://github.com/PrivateUploader/PrivateUploader/commit/869657d61e3c7a518177106fe63ea483082b0d3e; https://github.com/PrivateUploader/PrivateUploader/security/advisories/GHSA-vhrw-2472-rrjx; https://github.com/PrivateUploader/PrivateUploader/commit/869657d61e3c7a518177106fe63ea483082b0d3e
CVE: CVE-2023-21229
Published: 2023-08-14
Description: In registerServiceLocked of ManagedServices.java, there is a possible bypass of background activity launch restrictions due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/wear/2023-08-01; https://source.android.com/security/bulletin/wear/2023-08-01
CVE: CVE-2023-21230
Published: 2023-08-14
Description: In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged apps to receive a broadcast about WiFi access point change and its BSSID or SSID due to a precondition check failure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-754
References: https://source.android.com/security/bulletin/wear/2023-08-01; https://source.android.com/security/bulletin/wear/2023-08-01
CVE: CVE-2023-21231
Published: 2023-08-14
Description: In getIntentForButton of ButtonManager.java, there is a possible way for an unprivileged application to start a non-exported or permission-protected activity due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/wear/2023-08-01; https://source.android.com/security/bulletin/wear/2023-08-01
CVE: CVE-2023-21232
Published: 2023-08-14
Description: In multiple locations, there is a possible way to retrieve sensor data without permissions due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 3.3 (LOW)
References: https://source.android.com/security/bulletin/wear/2023-08-01; https://source.android.com/security/bulletin/wear/2023-08-01
CVE: CVE-2023-21233
Published: 2023-08-14
Description: In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.5 (HIGH)
CWE: CWE-908
References: https://source.android.com/security/bulletin/wear/2023-08-01; https://source.android.com/security/bulletin/wear/2023-08-01
CVE: CVE-2023-21234
Published: 2023-08-14
Description: In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options without the lockscreen PIN due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/wear/2023-08-01; https://source.android.com/security/bulletin/wear/2023-08-01
CVE: CVE-2023-21235
Published: 2023-08-14
Description: In onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN without entering the existing PIN due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.8 (HIGH)
References: https://source.android.com/docs/security/bulletin/wear/2023/2023-08-01; https://source.android.com/docs/security/bulletin/wear/2023/2023-08-01
CVE: CVE-2023-21271
Published: 2023-08-14
Description: In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/e44e1064ccec2aa09fc66bd750d66919129ae6b4; https://source.android.com/security/bulletin/2023-08-01; https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/e44e1064ccec2aa09fc66bd750d66919129ae6b4
CVE: CVE-2023-21272
Published: 2023-08-14
Description: In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-269
References: https://android.googlesource.com/platform/frameworks/base/+/4dea696369a309cf39daa3e94fec7156c290a9c2; https://source.android.com/security/bulletin/2023-08-01; https://android.googlesource.com/platform/frameworks/base/+/4dea696369a309cf39daa3e94fec7156c290a9c2
CVE: CVE-2023-21273
Published: 2023-08-14
Description: In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/1e27ef69755a0735278a1c6af130c71a92b94e3f; https://source.android.com/security/bulletin/2023-08-01; https://android.googlesource.com/platform/packages/modules/Bluetooth/+/1e27ef69755a0735278a1c6af130c71a92b94e3f
CVE: CVE-2023-21274
Published: 2023-08-14
Description: In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/2bffd7f5e66dd0cf7e5668fb65c4f2b2e9f87cf7; https://source.android.com/security/bulletin/2023-08-01; https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/2bffd7f5e66dd0cf7e5668fb65c4f2b2e9f87cf7
CVE: CVE-2023-21275
Published: 2023-08-14
Description: In decideCancelProvisioningDialog of AdminIntegratedFlowPrepareActivity.java, there is a possible way to bypass factory reset protections due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.8 (HIGH)
References: https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/8277a2a946e617a7ea65056e4cedeb1fecf3a5f5; https://source.android.com/security/bulletin/2023-08-01; https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/8277a2a946e617a7ea65056e4cedeb1fecf3a5f5
CVE: CVE-2023-21276
Published: 2023-08-14
Description: In writeToParcel of CursorWindow.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://android.googlesource.com/platform/frameworks/base/+/1272eec833fb49c30a4d8bdc432765e7c4413b3f; https://source.android.com/security/bulletin/2023-08-01; https://android.googlesource.com/platform/frameworks/base/+/1272eec833fb49c30a4d8bdc432765e7c4413b3f
CVE: CVE-2023-21277
Published: 2023-08-14
Description: In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 5.5 (MEDIUM)
References: https://android.googlesource.com/platform/frameworks/base/+/9b58aee2a4528c60b0aa2540bd0f48d2871d2dc7; https://source.android.com/security/bulletin/2023-08-01; https://android.googlesource.com/platform/frameworks/base/+/9b58aee2a4528c60b0aa2540bd0f48d2871d2dc7
CVE: CVE-2023-21278
Published: 2023-08-14
Description: In multiple locations, there is a possible way to obscure the microphone privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 3.3 (LOW)
References: https://android.googlesource.com/platform/frameworks/base/+/49773f9d871dd8975128fccf71513928a5a97345; https://source.android.com/security/bulletin/2023-08-01; https://android.googlesource.com/platform/frameworks/base/+/49773f9d871dd8975128fccf71513928a5a97345
CVE: CVE-2023-21279
Published: 2023-08-14
Description: In visitUris of RemoteViews.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 5.5 (MEDIUM)
References: https://android.googlesource.com/platform/frameworks/base/+/155b14600fb13553a47b4e45fe0acd163da07453; https://source.android.com/security/bulletin/2023-08-01; https://android.googlesource.com/platform/frameworks/base/+/155b14600fb13553a47b4e45fe0acd163da07453
CVE: CVE-2023-21280
Published: 2023-08-14
Description: In setMediaButtonBroadcastReceiver of MediaSessionRecord.java, there is a possible permanent DoS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://android.googlesource.com/platform/frameworks/base/+/06e772e05514af4aa427641784c5eec39a892ed3; https://source.android.com/security/bulletin/2023-08-01; https://android.googlesource.com/platform/frameworks/base/+/06e772e05514af4aa427641784c5eec39a892ed3