deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-6184
Published: 2020-02-12
Description: Under certain conditions, ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS versions 7.50, 7.51, 7.52, 7.53, 7.54), does not sufficiently encode user-controlled inputs, resulting in Reflected Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2863397; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=537788812; https://launchpad.support.sap.com/#/notes/2863397
CVE: CVE-2020-6185
Published: 2020-02-12
Description: Under certain conditions ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS versions 7.50, 7.51, 7.52, 7.53, 7.54), allows an authenticated attacker to store a malicious payload which results in Stored Cross Site Scripting vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2880869; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=537788812; https://launchpad.support.sap.com/#/notes/2880869
CVE: CVE-2020-6186
Published: 2020-02-12
Description: SAP Host Agent, version 7.21, allows an attacker to cause a slowdown in processing of username/password-based authentication requests of the SAP Host Agent, leading to Denial of Service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://launchpad.support.sap.com/#/notes/2841053; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=537788812; https://launchpad.support.sap.com/#/notes/2841053
CVE: CVE-2020-6187
Published: 2020-02-12
Description: SAP NetWeaver (Guided Procedures), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate an XML document input from a compromised admin, leading to Denial of Service.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-611
References: https://launchpad.support.sap.com/#/notes/2864415; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=537788812; https://launchpad.support.sap.com/#/notes/2864415
CVE: CVE-2020-6188
Published: 2020-02-12
Description: VAT Pro-Rata reports in SAP ERP (SAP_APPL versions 600, 602, 603, 604, 605, 606, 616 and SAP_FIN versions 617, 618, 700, 720, 730) and SAP S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user leading to Missing Authorization Check.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://launchpad.support.sap.com/#/notes/2857511; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=537788812; https://launchpad.support.sap.com/#/notes/2857511
CVE: CVE-2020-6189
Published: 2020-02-12
Description: Certain settings page(s) in SAP Business Objects Business Intelligence Platform (CMC), version 4.2, generates error messages that can give enterprise private-network related information which would otherwise be restricted leading to Information Disclosure.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://launchpad.support.sap.com/#/notes/2695210; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=537788812; https://launchpad.support.sap.com/#/notes/2695210
CVE: CVE-2020-6190
Published: 2020-02-12
Description: Certain vulnerable endpoints in SAP NetWeaver AS Java (Heap Dump Application), versions 7.30, 7.31, 7.40, 7.50, provide valuable information about the system like hostname, server node and installation path that could be misused by an attacker leading to Information Disclosure.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-200
References: https://launchpad.support.sap.com/#/notes/2838835; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=537788812; https://launchpad.support.sap.com/#/notes/2838835
CVE: CVE-2020-6191
Published: 2020-02-12
Description: SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious executables with root privileges in SAP Host Agent via SAP Landscape Management due to Missing Input Validation.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: https://launchpad.support.sap.com/#/notes/2878030; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=537788812; https://launchpad.support.sap.com/#/notes/2878030
CVE: CVE-2020-6192
Published: 2020-02-12
Description: SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious commands with root privileges in SAP Host Agent via SAP Landscape Management.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: https://launchpad.support.sap.com/#/notes/2877968; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=537788812; https://launchpad.support.sap.com/#/notes/2877968
CVE: CVE-2020-6193
Published: 2020-02-12
Description: SAP NetWeaver (Knowledge Management ICE Service), versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to execute malicious scripts leading to Reflected Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2873012; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=537788812; https://launchpad.support.sap.com/#/notes/2873012
CVE: CVE-2020-8950
Published: 2020-02-12
Description: The AUEPLauncher service in Radeon AMD User Experience Program Launcher through 1.0.0.1 on Windows allows elevation of privilege by placing a crafted file in %PROGRAMDATA%\AMD\PPC\upload and then creating a symbolic link in %PROGRAMDATA%\AMD\PPC\temp that points to an arbitrary folder with an arbitrary file name.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://heynowyouseeme.blogspot.com/2020/02/another-privilege-escalation-filewrite.html; https://heynowyouseeme.blogspot.com/2020/02/privilege-escalation-filewrite-eop-in.html; https://heynowyouseeme.blogspot.com/2020/02/another-privilege-escalation-filewrite.html
CVE: CVE-2011-4906
Published: 2020-02-12
Description: Tiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://developer.joomla.org/security/news/[PII_REDACTED]2-core-file-upload.html; https://www.exploit-db.com/exploits/10183; https://www.openwall.com/lists/oss-security/2011/12/25/7
CVE: CVE-2020-5399
Published: 2020-02-12
Description: Cloud Foundry CredHub, versions prior to 2.5.10, connects to a MySQL database without TLS even when configured to use TLS. A malicious user with access to the network between CredHub and its MySQL database may eavesdrop on database connections and thereby gain unauthorized access to CredHub and other components.
CVSS Score: 7.4 (HIGH)
CWE: CWE-319, CWE-319
References: https://www.cloudfoundry.org/blog/cve-2020-5399; https://www.cloudfoundry.org/blog/cve-2020-5399
CVE: CVE-2011-4908
Published: 2020-02-12
Description: TinyBrowser plugin for Joomla! before 1.5.13 allows arbitrary file upload via upload.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://vulmon.com/vulnerabilitydetails?qid=CVE-2011-4908; https://www.exploit-db.com/exploits/9926; https://www.openwall.com/lists/oss-security/2011/12/25/7
CVE: CVE-2013-4602
Published: 2020-02-12
Description: A Denial of Service (infinite loop) vulnerability exists in Avira AntiVir Engine before 8.2.12.58 via an unspecified function in the PDF Scanner Engine.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: http://www.securityfocus.com/bid/60552; http://www.securitytracker.com/id/1028666; https://exchange.xforce.ibmcloud.com/vulnerabilities/85099
CVE: CVE-2013-5106
Published: 2020-02-12
Description: A Code Execution vulnerability exists in select.py when using python-mode 2012-12-19.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://github.com/klen/python-mode/issues/162; http://github.com/klen/python-mode/issues/162
CVE: CVE-2013-6022
Published: 2020-02-12
Description: A Cross-Site Scripting (XSS) vulnerability exists in Tiki Wiki CMG Groupware 11.0 via the id paraZeroClipboard.swf, which could let a remote malicious user execute arbitrary code.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.kb.cert.org/vuls/id/450646; http://www.securityfocus.com/bid/63463; http://www.kb.cert.org/vuls/id/450646
CVE: CVE-2020-8955
Published: 2020-02-12
Description: irc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a malformed IRC message 324 (channel mode).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00032.html; https://github.com/weechat/weechat/commit/6f4f147d8e86adf9ad34a8ffd7e7f1f23a7e74da; https://lists.debian.org/debian-lts-announce/2020/03/msg00031.html
CVE: CVE-2020-1975
Published: 2020-02-12
Description: Missing XML validation vulnerability in the PAN-OS web interface on Palo Alto Networks PAN-OS software allows authenticated users to inject arbitrary XML that results in privilege escalation. This issue affects PAN-OS 8.1 versions earlier than PAN-OS 8.1.12 and PAN-OS 9.0 versions earlier than PAN-OS 9.0.6. This issue does not affect PAN-OS 7.1, PAN-OS 8.0, or PAN-OS 9.1 or later versions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-112, CWE-611
References: https://security.paloaltonetworks.com/CVE-2020-1975; https://security.paloaltonetworks.com/CVE-2020-1975
CVE: CVE-2020-1976
Published: 2020-02-12
Description: A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect software running on Mac OS allows authenticated local users to cause the Mac OS kernel to hang or crash. This issue affects GlobalProtect 5.0.5 and earlier versions of GlobalProtect 5.0 on Mac OS.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-642, CWE-20
References: https://security.paloaltonetworks.com/CVE-2020-1976; https://security.paloaltonetworks.com/CVE-2020-1976
CVE: CVE-2020-1977
Published: 2020-02-12
Description: Insufficient Cross-Site Request Forgery (XSRF) protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expedition Migration Tool 1.1.51 and earlier versions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-352, CWE-352
References: https://security.paloaltonetworks.com/CVE-2020-1977; https://www.tenable.com/security/research/tra-2020-11; https://security.paloaltonetworks.com/CVE-2020-1977
CVE: CVE-2020-6975
Published: 2020-02-12
Description: Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Successful exploitation of this vulnerability could allow an attacker to upload a malicious file to the application.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://www.us-cert.gov/ics/advisories/icsa-20-042-13; https://www.us-cert.gov/ics/advisories/icsa-20-042-13
CVE: CVE-2018-3987
Published: 2020-02-13
Description: An exploitable information disclosure vulnerability exists in the 'Secret Chats' functionality of Rakuten Viber on Android 9.3.0.6. The 'Secret Chats' functionality allows a user to delete all traces of a chat either by using a time trigger or by direct request. There is a bug in this functionality which leaves behind photos taken and shared on the secret chats, even after the chats are deleted. These photos will be stored in the device and accessible to all applications installed on the Android device.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0655; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0655
CVE: CVE-2019-18915
Published: 2020-02-13
Description: A potential security vulnerability has been identified with certain versions of HP System Event Utility prior to version 1.4.33. This vulnerability may allow a local attacker to execute arbitrary code via an HP System Event Utility system service.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: http://seclists.org/fulldisclosure/2020/Feb/8; https://support.hp.com/us-en/document/c06559359; http://seclists.org/fulldisclosure/2020/Feb/8
CVE: CVE-2019-5322
Published: 2020-02-13
Description: A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerability impacts firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007 and 16.10.* before 16.10.0003. The vulnerability allows an attacker to retrieve sensitive system information. This attack can be carried out without user authentication under very specific conditions.
CVSS Score: 7.5 (HIGH)
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-001.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-001.txt
CVE: CVE-2020-5241
Published: 2020-02-13
Description: matestack-ui-core (RubyGem) before 0.7.4 is vulnerable to XSS/Script injection. This vulnerability is patched in version 0.7.4.
CVSS Score: 7.7 (HIGH)
CWE: CWE-80, CWE-79
References: https://github.com/matestack/matestack-ui-core/security/advisories/GHSA-3jqw-vv45-mjhh; https://github.com/matestack/matestack-ui-core/security/advisories/GHSA-3jqw-vv45-mjhh
CVE: CVE-2020-6973
Published: 2020-02-13
Description: Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Multiple cross-site scripting vulnerabilities exist that could allow an attacker to cause a denial-of-service condition.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.us-cert.gov/ics/advisories/icsa-20-042-13; https://www.us-cert.gov/ics/advisories/icsa-20-042-13
CVE: CVE-2020-7208
Published: 2020-02-13
Description: LinuxKI v6.0-1 and earlier is vulnerable to an XSS which is resolved in release 6.0-2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/HewlettPackard/LinuxKI/releases/tag/v6.0-2; https://github.com/HewlettPackard/LinuxKI/releases/tag/v6.0-2
CVE: CVE-2020-7209
Published: 2020-02-13
Description: LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2.
CVSS Score: 9.8 (CRITICAL)
References: http://packetstormsecurity.com/files/157739/HP-LinuxKI-6.01-Remote-Command-Injection.html; http://packetstormsecurity.com/files/158025/LinuxKI-Toolset-6.01-Remote-Command-Execution.html; https://github.com/HewlettPackard/LinuxKI/releases/tag/v6.0-2
CVE: CVE-2020-5239
Published: 2020-02-13
Description: In Mailu before version 1.7, an authenticated user can exploit a vulnerability in Mailu fetchmail script and gain full access to a Mailu instance. Mailu servers that have open registration or untrusted users are most impacted. The master and 1.7 branches are patched on our git repository. All Docker images published on docker.io/mailu for tags 1.5, 1.6, 1.7 and master are patched. For detailed instructions about patching and securing the server afterwards, see https://github.com/Mailu/Mailu/issues/1354
CVSS Score: 8.7 (HIGH)
CWE: CWE-863
References: https://github.com/Mailu/Mailu/issues/1354; https://github.com/Mailu/Mailu/security/advisories/GHSA-2467-p5gv-58q6; https://github.com/Mailu/Mailu/issues/1354
CVE: CVE-2020-8963
Published: 2020-02-13
Description: TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007, T100 1.0.003, T300 1.0.003, and T550 1.0.003 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the t3.cgi srmodel or srtime parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://sku11army.blogspot.com/2020/02/timetools-sr-sc-series-network-time.html; https://sku11army.blogspot.com/2020/02/timetools-sr-sc-series-network-time.html
CVE: CVE-2020-8964
Published: 2020-02-13
Description: TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007, T100 1.0.003, T300 1.0.003, and T550 1.0.003 devices allow remote attackers to bypass authentication by placing t3axs=TiMEtOOlsj7G3xMm52wB in a t3.cgi request, aka a "hardcoded cookie."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://sku11army.blogspot.com/2020/02/timetools-sr-sc-series-network-time.html; https://sku11army.blogspot.com/2020/02/timetools-sr-sc-series-network-time.html
CVE: CVE-2020-8953
Published: 2020-02-13
Description: OpenVPN Access Server 2.8.x before 2.8.1 allows LDAP authentication bypass (except when a user is enrolled in two-factor authentication).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://openvpn.net/security-advisories/; https://openvpn.net/security-advisories/
CVE: CVE-2019-14652
Published: 2020-02-13
Description: explorer.js in Amazon AWS JavaScript S3 Explorer (aka aws-js-s3-explorer) v2 alpha before 2019-08-02 allows XSS in certain circumstances.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/awslabs/aws-js-s3-explorer/commit/7be671e858601455d6969e445d21a911632d6c94; https://github.com/awslabs/aws-js-s3-explorer/commit/87efa7d6885c4a9d8473ec5893adf8e4922a8a89; https://github.com/awslabs/aws-js-s3-explorer/pull/62
CVE: CVE-2020-8962
Published: 2020-02-13
Description: A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://ctrsec.io/index.php/2020/02/12/cve-2020-8962-d-link-dir-842-stack-based-buffer-overflow/; https://ctrsec.io/index.php/2020/02/12/cve-2020-8962-d-link-dir-842-stack-based-buffer-overflow/
CVE: CVE-2019-2200
Published: 2020-02-13
Description: In updatePermissions of PermissionManagerService.java, it may be possible for a malicious app to obtain a custom permission from another app due to a permission bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-67319274
CVSS Score: 7.3 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/2020-02-01; https://source.android.com/security/bulletin/2020-02-01
CVE: CVE-2020-0005
Published: 2020-02-13
Description: In btm_read_remote_ext_features_complete of btm_acl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-141552859
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-02-01; https://source.android.com/security/bulletin/2020-02-01
CVE: CVE-2020-0014
Published: 2020-02-13
Description: It is possible for a malicious application to construct a TYPE_TOAST window manually and make that window clickable. This could lead to a local escalation of privilege with no additional execution privileges needed. User action is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-128674520
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-1021
References: https://source.android.com/security/bulletin/2020-02-01; https://source.android.com/security/bulletin/2020-02-01
CVE: CVE-2020-0015
Published: 2020-02-13
Description: In onCreate of CertInstaller.java, there is a possible way to overlay the Certificate Installation dialog by a malicious application. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-139017101
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/2020-02-01; https://source.android.com/security/bulletin/2020-02-01
CVE: CVE-2020-0017
Published: 2020-02-13
Description: In multiple places, it was possible for the primary user’s dictionary to be visible to and modifiable by secondary users. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-123232892
CVSS Score: 4.4 (MEDIUM)
References: https://source.android.com/security/bulletin/2020-02-01; https://source.android.com/security/bulletin/2020-02-01
CVE: CVE-2020-0018
Published: 2020-02-13
Description: In MotionEntry::appendDescription of InputDispatcher.cpp, there is a possible log information disclosure. This could lead to local disclosure of user input with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-139945049
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-532
References: https://source.android.com/security/bulletin/2020-02-01; https://source.android.com/security/bulletin/2020-02-01
CVE: CVE-2020-0020
Published: 2020-02-13
Description: In getAttributeRange of ExifInterface.java, there is a possible failure to redact location information from media files due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143118731
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://source.android.com/security/bulletin/2020-02-01; https://source.android.com/security/bulletin/2020-02-01
CVE: CVE-2020-0021
Published: 2020-02-13
Description: In removeUnusedPackagesLPw of PackageManagerService.java, there is a possible permanent denial-of-service due to a missing package dependency test. This could lead to remote denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141413692
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://source.android.com/security/bulletin/2020-02-01; https://source.android.com/security/bulletin/2020-02-01
CVE: CVE-2020-0022
Published: 2020-02-13
Description: In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143894715
CVSS Score: 8.8 (HIGH)
CWE: CWE-682, CWE-682
References: http://packetstormsecurity.com/files/156891/Android-Bluetooth-Remote-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2020/Feb/10; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200513-03-smartphone-en
CVE: CVE-2020-0023
Published: 2020-02-13
Description: In setPhonebookAccessPermission of AdapterService.java, there is a possible disclosure of user contacts over bluetooth due to a missing permission check. This could lead to local information disclosure if a malicious app enables contacts over a bluetooth connection, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145130871
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2020-02-01; https://source.android.com/security/bulletin/2020-02-01
CVE: CVE-2020-0026
Published: 2020-02-13
Description: In Parcel::continueWrite of Parcel.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-140419401
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-787
References: https://source.android.com/security/bulletin/2020-02-01; https://source.android.com/security/bulletin/2020-02-01