deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-0493
Published: 2020-12-15
Description: In CPDF_SampledFunc::v_Call of cpdf_sampledfunc.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150615407
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0494
Published: 2020-12-15
Description: In ih264d_parse_ave of ih264d_sei.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-152895390
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0495
Published: 2020-12-15
Description: In decode_Huffman of JBig2_SddProc.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155473137
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190, CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0496
Published: 2020-12-15
Description: In CPDF_RenderStatus::LoadSMask of cpdf_renderstatus.cpp, there is a possible memory corruption due to a use-after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-149481220
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0497
Published: 2020-12-15
Description: In canUseBiometric of BiometricServiceBase, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-158481661
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0498
Published: 2020-12-15
Description: In decode_packed_entry_number of codebook.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160633884
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-0499
Published: 2020-12-15
Description: In FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156076070
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E; https://lists.debian.org/debian-lts-announce/2021/01/msg00001.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33W6XZAAEJYRGU3XYHRO7XSYEA7YACUB/
CVE: CVE-2020-0500
Published: 2020-12-15
Description: In startInputUncheckedLocked of InputMethodManager.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154913391
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27021
Published: 2020-12-15
Description: In avrc_ctrl_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-168712245
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27023
Published: 2020-12-15
Description: In setErrorPlaybackState of BluetoothMediaBrowserService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156009462
CVSS Score: 4.4 (MEDIUM)
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27024
Published: 2020-12-15
Description: In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure triggered by a malformed Bluetooth packet, with no additional execution privileges needed. User interaction is not needed for exploitation. Bounds Sanitizer mitigates this in the default configuration.Product: AndroidVersions: Android-11Android ID: A-162327732
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27025
Published: 2020-12-15
Description: In EapFailureNotifier.java and SimRequiredNotifier.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156008365
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27026
Published: 2020-12-15
Description: During boot, the device unlock interface behaves differently depending on if a fingerprint registered to the device is present. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-79776455
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-203
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27027
Published: 2020-12-15
Description: In nfc_ncif_proc_get_routing of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-122358602
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27028
Published: 2020-12-15
Description: In filter_incoming_event of hci_layer.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-141618611
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27029
Published: 2020-12-15
Description: In TextView of TextView.java, there is a possible app hang due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-140218875
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-770
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27030
Published: 2020-12-15
Description: In onCreate of HandleApiCalls.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege that allows an app to set or dismiss the alarm with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150612638
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27031
Published: 2020-12-15
Description: In nfc_data_event of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151313205
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27032
Published: 2020-12-15
Description: In getRadioAccessFamily of PhoneInterfaceManager.java, there is a possible read of privileged data due to a missing permission check. This could lead to local information disclosure of radio data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150857259
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27033
Published: 2020-12-15
Description: In nfc_ncif_proc_get_routing of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153655153
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27034
Published: 2020-12-15
Description: In createSimSelectNotification of SimSelectNotification.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153556754
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27035
Published: 2020-12-15
Description: In priorLinearAllocation of C2AllocatorIon.cpp, there is a possible use-after-free due to improper locking. This could lead to local information disclosure in the media codec with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-152239213
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-667
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-28456
Published: 2020-12-15
Description: The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting (XSS) via the admin panel.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79
References: https://github.com/s-cart/core/commit/f4b[PII_REDACTED]a3a2bb497b2512d8a18bd202219; https://github.com/s-cart/s-cart/issues/52; https://github.com/s-cart/s-cart/releases/tag/v4.4
CVE: CVE-2020-28457
Published: 2020-12-15
Description: This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79
References: https://github.com/s-cart/s-cart/commit/4406d407ad363ee7e4795ee290c9d2430b0413f8; https://github.com/s-cart/s-cart/issues/51; https://github.com/s-cart/s-cart/releases/tag/v4.4
CVE: CVE-2020-35395
Published: 2020-12-15
Description: XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://nikhilkumar01.medium.com/cve-2020-35395-cd393ac8371c; https://www.exploit-db.com/exploits/49146; https://nikhilkumar01.medium.com/cve-2020-35395-cd393ac8371c
CVE: CVE-2020-35396
Published: 2020-12-15
Description: EGavilan Barcodes generator 1.0 is affected by: Cross Site Scripting (XSS) via the index.php. An Attacker is able to inject the XSS payload in the web application each time a user visits the website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://egavilanmedia.com/; https://nikhilkumar01.medium.com/cve-2020-35396-f4b5675fb168; https://www.exploit-db.com/exploits/49227
CVE: CVE-2020-25712
Published: 2020-12-15
Description: A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://bugzilla.redhat.com/show_bug.cgi?id=1887276; https://lists.x.org/archives/xorg-announce/2020-December/003066.html; https://bugzilla.redhat.com/show_bug.cgi?id=1887276
CVE: CVE-2020-27036
Published: 2020-12-15
Description: In phNxpNciHal_send_ext_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153731369
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-125, CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27037
Published: 2020-12-15
Description: In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153731335
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27038
Published: 2020-12-15
Description: In process of C2SoftVorbisDec.cpp, there is a possible resource exhaustion due to a memory leak. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154302257
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27039
Published: 2020-12-15
Description: In postNotification of ServiceRecord.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153878498
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27040
Published: 2020-12-15
Description: In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153731880
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27041
Published: 2020-12-15
Description: In showProvisioningNotification of ConnectivityService.java, there is an unsafe PendingIntent. This could lead to local information disclosure of notification data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154928507
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27043
Published: 2020-12-15
Description: In nfc_enabled of nfc_main.cc, there is a possible out of bounds read due to an incorrect increment. This could lead to local information disclosure via firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155234594
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27044
Published: 2020-12-15
Description: In restartWrite of Parcel.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157066561
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27045
Published: 2020-12-15
Description: In CE_SendRawFrame of ce_main.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157649398
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27046
Published: 2020-12-15
Description: In nfc_ncif_proc_ee_action of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157649306
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27047
Published: 2020-12-15
Description: In ce_t4t_update_binary of ce_t4t.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157649298
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27048
Published: 2020-12-15
Description: In RW_SendRawFrame of rw_main.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157650117
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27049
Published: 2020-12-15
Description: In rw_t3t_send_raw_frame of rw_t3t.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157649467
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27050
Published: 2020-12-15
Description: In rw_i93_send_cmd_write_multi_blocks of rw_i93.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157650365
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27051
Published: 2020-12-15
Description: In NFA_RwI93WriteMultipleBlocks of nfa_rw_api.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157650338
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27052
Published: 2020-12-15
Description: In getLockTaskLaunchMode of ActivityRecord.java, there is a possible way for any app to start in Lock Task Mode due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-158833495
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27053
Published: 2020-12-15
Description: In broadcastWifiCredentialChanged of ClientModeImpl.java, there is a possible location permission bypass due to a missing permission check. This could lead to local information disclosure of the WiFi network name with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-159371448
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01
CVE: CVE-2020-27054
Published: 2020-12-15
Description: In onFactoryReset of BluetoothManagerService.java, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-159061926
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/pixel/2020-12-01; https://source.android.com/security/bulletin/pixel/2020-12-01