deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-41829
Published: 2024-03-04
Description: An improper export vulnerability was reported in the Motorola Carrier Services application that could allow a malicious, local application to read files without authorization.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-926
References: https://en-us.support.motorola.com/app/answers/detail/a_id/178272; https://en-us.support.motorola.com/app/answers/detail/a_id/178272
CVE: CVE-2024-1936
Published: 2024-03-04
Description: The encrypted subject of an email message could be incorrectly and permanently assigned to an arbitrary other email message in Thunderbird's local cache. Consequently, when replying to the contaminated email message, the user might accidentally leak the confidential subject to a third-party. While this update fixes the bug and avoids future message contamination, it does not automatically repair existing contaminations. Users are advised to use the repair folder functionality, which is available from the context menu of email folders, which will erase incorrect subject assignments. This vulnerability affects Thunderbird < 115.8.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-922
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1860977; https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html; https://www.mozilla.org/security/advisories/mfsa2024-11/
CVE: CVE-2023-49546
Published: 2024-03-05
Description: Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customer_support/ajax.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/geraldoalcantara/CVE-2023-49546; https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html; https://github.com/geraldoalcantara/CVE-2023-49546
CVE: CVE-2023-49547
Published: 2024-03-05
Description: Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customer_support/ajax.php?action=login.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/geraldoalcantara/CVE-2023-49547; https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html; https://github.com/geraldoalcantara/CVE-2023-49547
CVE: CVE-2023-49548
Published: 2024-03-05
Description: Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /customer_support/ajax.php?action=save_user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/geraldoalcantara/CVE-2023-49548; https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html; https://github.com/geraldoalcantara/CVE-2023-49548
CVE: CVE-2023-49968
Published: 2024-03-05
Description: Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/manage_department.php.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/geraldoalcantara/CVE-2023-49968; https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html; https://github.com/geraldoalcantara/CVE-2023-49968
CVE: CVE-2023-49969
Published: 2024-03-05
Description: Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/index.php?page=edit_customer.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/geraldoalcantara/CVE-2023-49969; https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html; https://github.com/geraldoalcantara/CVE-2023-49969
CVE: CVE-2023-49970
Published: 2024-03-05
Description: Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customer_support/ajax.php?action=save_ticket.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/geraldoalcantara/CVE-2023-49970; https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html; https://github.com/geraldoalcantara/CVE-2023-49970
CVE: CVE-2024-25164
Published: 2024-03-05
Description: iA Path Traversal vulnerability exists in iDURAR v2.0.0, that allows unauthenticated attackers to expose sensitive files via the download functionality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/idurar/idurar-erp-crm/tree/2.0.0/routes/erpRoutes/erpDownloadRouter.js; https://github.com/u32i/cve/tree/main/CVE-2024-25164; https://github.com/idurar/idurar-erp-crm/tree/2.0.0/routes/erpRoutes/erpDownloadRouter.js
CVE: CVE-2024-25731
Published: 2024-03-05
Description: The Elink Smart eSmartCam (com.cn.dq.ipc) application 2.1.5 for Android contains hardcoded AES encryption keys that can be extracted from a binary file. Thus, encryption can be defeated by an attacker who can observe packet data (e.g., over Wi-Fi).
CVSS Score: 7.5 (HIGH)
CWE: CWE-798, CWE-798
References: https://github.com/actuator/com.cn.dq.ipc; https://github.com/actuator/com.cn.dq.ipc/blob/main/CVE-2024-25731; https://github.com/actuator/com.cn.dq.ipc
CVE: CVE-2024-27718
Published: 2024-03-05
Description: SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privileges via the /importexport.php component.
CVSS Score: 7.8 (HIGH)
CWE: CWE-89
References: https://github.com/tldjgggg/cve/blob/main/sql.md; https://github.com/tldjgggg/cve/blob/main/sql.md
CVE: CVE-2024-25269
Published: 2024-03-05
Description: libheif <= 1.17.6 contains a memory leak in the function JpegEncoder::Encode. This flaw allows an attacker to cause a denial of service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/strukturag/libheif/issues/1073; https://github.com/strukturag/libheif/issues/1073
CVE: CVE-2024-0698
Published: 2024-03-05
Description: The Easy!Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'easyappointments' shortcode in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/easyappointments/trunk/public/class-easyappointments-public.php#L141; https://plugins.trac.wordpress.org/changeset/3043919; https://www.wordfence.com/threat-intel/vulnerabilities/id/4b002e40-712d-4c3f-b168-9132e7b77e60?source=cve
CVE: CVE-2024-0825
Published: 2024-03-05
Description: The Vimeography: Vimeo Video Gallery WordPress Plugin plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.3.2 via deserialization of untrusted input via the vimeography_duplicate_gallery_serialized in the duplicate_gallery function. This makes it possible for authenticated attackers attackers, with contributor access or higher, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://plugins.trac.wordpress.org/browser/vimeography/trunk/lib/api/galleries.php#L816; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3049222%40vimeography&new=3049222%40vimeography&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/853516b2-ec50-4937-89d3-d16042a6f71c?source=cve
CVE: CVE-2024-1088
Published: 2024-03-05
Description: The Password Protected Store for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2 via the REST API. This makes it possible for unauthenticated attackers to extract sensitive data including post titles and content.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3046244%40password-protected-woo-store&new=3046244%40password-protected-woo-store&sfp_email=&sfph_mail=; https://wordpress.org/plugins/password-protected-woo-store/; https://www.wordfence.com/threat-intel/vulnerabilities/id/7ae1e8fd-4d1b-4590-a141-f93d6347c0f2?source=cve
CVE: CVE-2024-1093
Published: 2024-03-05
Description: The Change Memory Limit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the admin_logic() function hooked via admin_init in all versions up to, and including, 1.0. This makes it possible for unauthenticated attackers to update the memory limit.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/change-memory-limit/trunk/change-mem-limit.php#L104; https://www.wordfence.com/threat-intel/vulnerabilities/id/eee7344d-5459-4558-a557-d8c5935ecc30?source=cve; https://plugins.trac.wordpress.org/browser/change-memory-limit/trunk/change-mem-limit.php#L104
CVE: CVE-2024-1095
Published: 2024-03-05
Description: The Build & Control Block Patterns – Boost up Gutenberg Editor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the settings_export() function in all versions up to, and including, 1.3.5.4. This makes it possible for unauthenticated attackers to export the plugin's settings.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/control-block-patterns/trunk/classes/Settings/SettingsPage.php#L166; https://www.wordfence.com/threat-intel/vulnerabilities/id/38f09a45-2b11-47c7-af16-c7f9c3a46e0e?source=cve; https://plugins.trac.wordpress.org/browser/control-block-patterns/trunk/classes/Settings/SettingsPage.php#L166
CVE: CVE-2024-1178
Published: 2024-03-05
Description: The SportsPress – Sports Club & League Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the settings_save() function in all versions up to, and including, 2.7.17. This makes it possible for unauthenticated attackers to update the permalink structure for the clubs
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3043889%40sportspress&new=3043889%40sportspress&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/098dfee2-ba0b-420f-89ed-8ad1e41faec4?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3043889%40sportspress&new=3043889%40sportspress&sfp_email=&sfph_mail=
CVE: CVE-2024-1285
Published: 2024-03-05
Description: The Page Builder Sandwich – Front End WordPress Page Builder Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'gambit_builder_save_content' function in all versions up to, and including, 5.1.0. This makes it possible for authenticated attackers, with subscriber access and above, to insert arbitrary content into existing posts.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/page-builder-sandwich/tags/5.1.0/class-page-builder-sandwich.php#L958; https://www.wordfence.com/threat-intel/vulnerabilities/id/69d3d66c-5557-4fb4-8bd7-05d76d6b86ab?source=cve; https://plugins.trac.wordpress.org/browser/page-builder-sandwich/tags/5.1.0/class-page-builder-sandwich.php#L958
CVE: CVE-2024-1381
Published: 2024-03-05
Description: The Page Builder Sandwich – Front End WordPress Page Builder Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.1.0. This makes it possible for authenticated attackers, with subscriber access and higher, to extract sensitive user or configuration data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/page-builder-sandwich/trunk/class-inspector.php#L90; https://www.wordfence.com/threat-intel/vulnerabilities/id/8e98d92a-fe64-4591-972b-ed11542506b7?source=cve; https://plugins.trac.wordpress.org/browser/page-builder-sandwich/trunk/class-inspector.php#L90
CVE: CVE-2024-1478
Published: 2024-03-05
Description: The Maintenance Mode plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.1 via the REST API. This makes it possible for unauthenticated attackers to obtain post and page content via API thus bypassing the content protection provided by the plugin.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3044964%40hkdev-maintenance-mode&new=3044964%40hkdev-maintenance-mode&sfp_email=&sfph_mail=; https://wordpress.org/plugins/hkdev-maintenance-mode/; https://www.wordfence.com/threat-intel/vulnerabilities/id/36def628-e09e-4da0-ab14-35aefcb67f73?source=cve
CVE: CVE-2024-1731
Published: 2024-03-05
Description: The Auto Refresh Single Page plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.1 via deserialization of untrusted input from the arsp_options post meta option. This makes it possible for authenticated attackers, with contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://plugins.trac.wordpress.org/browser/auto-refresh-single-page/trunk/auto-refresh-single-page.php#L42; https://www.wordfence.com/threat-intel/vulnerabilities/id/5f8f8d46-d7e7-4b07-9b10-15e579973474?source=cve; https://plugins.trac.wordpress.org/browser/auto-refresh-single-page/trunk/auto-refresh-single-page.php#L42
CVE: CVE-2024-1769
Published: 2024-03-05
Description: The JM Twitter Cards plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 14 via the meta description data. This makes it possible for unauthenticated attackers to view password protected post content when viewing the page source.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3044066%40jm-twitter-cards&new=3044066%40jm-twitter-cards&sfp_email=&sfph_mail=; https://wordpress.org/plugins/jm-twitter-cards/; https://www.wordfence.com/threat-intel/vulnerabilities/id/b48e5973-6923-47cc-a660-ecc989f540f8?source=cve
CVE: CVE-2024-1782
Published: 2024-03-05
Description: The Blue Triad EZAnalytics plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'bt_webid' parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/blue-triad-ezanalytics/trunk/blue-triad-ezanalytics.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/0cae2bb8-33e7-47b0-861d-b976a67660ae?source=cve; https://plugins.trac.wordpress.org/browser/blue-triad-ezanalytics/trunk/blue-triad-ezanalytics.php
CVE: CVE-2024-22188
Published: 2024-03-05
Description: TYPO3 before 13.0.1 allows an authenticated admin user (with system maintainer privileges) to execute arbitrary shell commands (with the privileges of the web server) via a command injection vulnerability in form fields of the Install Tool. The fixed versions are 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, and 13.0.1.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://github.com/TYPO3/typo3/security/advisories/GHSA-5w2h-59j3-8x5w; https://typo3.org/security/advisory/typo3-core-sa-2024-002; https://github.com/TYPO3/typo3/security/advisories/GHSA-5w2h-59j3-8x5w
CVE: CVE-2024-21815
Published: 2024-03-05
Description: 
Insufficiently protected credentials (CWE-522) for third party DVR integrations to the Command Centre Server are accessible to authenticated but unprivileged users. 

This issue affects: Gallagher Command Centre 9.00 prior to vEL9.00.1774 (MR2), 8.90 prior to vEL8.90.1751 (MR3), 8.80 prior to vEL8.80.1526 (MR4), 8.70 prior to vEL8.70.2526 (MR6),  all version of 8.60 and prior.




CVSS Score: 9.1 (CRITICAL)
CWE: CWE-522, CWE-522
References: https://security.gallagher.com/Security-Advisories/CVE-2024-21815; https://security.gallagher.com/Security-Advisories/CVE-2024-21815
CVE: CVE-2024-21838
Published: 2024-03-05
Description: 
Improper neutralization of special elements in output (CWE-74) used by the email generation feature of the Command Centre Server could lead to HTML code injection in emails generated by Command Centre. 

This issue affects: Gallagher Command Centre 9.00 prior to vEL9.00.1774 (MR2), 8.90 prior to vEL8.90.1751 (MR3), 8.80 prior to vEL8.80.1526 (MR4), 8.70 prior to vEL8.70.2526 (MR6),  all version of 8.60 and prior.




CVSS Score: 6.8 (MEDIUM)
CWE: CWE-74, CWE-79
References: https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2024-21838; https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2024-21838
CVE: CVE-2024-22383
Published: 2024-03-05
Description: 
Missing release of resource after effective lifetime (CWE-772) in the Controller 7000 resulted in HBUS connected T-Series readers to not automatically recover after coming under attack over the RS-485 interface, resulting in a persistent denial of service. 

This issue affects: All variants of the Gallagher Controller 7000 9.00 prior to vCR9.00.231204b (distributed in 9.00.1507(MR1)), 8.90 prior to vCR8.90.240209b (distributed in 8.90.1751 (MR3)), 8.80 prior to vCR8.80.240209a (distributed in 8.80.1526 (MR4)), 8.70 prior to vCR8.70.240209a (distributed in 8.70.2526 (MR6)).




CVSS Score: 6.2 (MEDIUM)
CWE: CWE-772
References: https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2024-22383; https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2024-22383
CVE: CVE-2023-52432
Published: 2024-03-05
Description: Improper input validation in IpcTxSndSetLoopbackCtrl in libsec-ril prior to SMR Sep-2023 Release 1 allows local attackers to write out-of-bounds memory.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09
CVE: CVE-2024-20829
Published: 2024-03-05
Description: Missing proper interaction for opening deeplink in Samsung Internet prior to version v24.0.0.0 allows remote attackers to open an application without proper interaction.
CVSS Score: 5.4 (MEDIUM)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03; https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03
CVE: CVE-2024-20830
Published: 2024-03-05
Description: Incorrect default permission in AppLock prior to SMR MAr-2024 Release 1 allows local attackers to configure AppLock settings.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-276
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=03; https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=03
CVE: CVE-2024-20831
Published: 2024-03-05
Description: Stack overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows local privileged attackers to execute arbitrary code.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=03; https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=03
CVE: CVE-2024-20832
Published: 2024-03-05
Description: Heap overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows local privileged attackers to execute arbitrary code.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=03; https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=03
CVE: CVE-2024-20834
Published: 2024-03-05
Description: The sensitive information exposure vulnerability in WlanTest prior to SMR Mar-2024 Release 1 allows local attackers to access MAC address without proper permission.
CVSS Score: 3.3 (LOW)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=03; https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=03
CVE: CVE-2024-20835
Published: 2024-03-05
Description: Improper access control vulnerability in CustomFrequencyManagerService prior to SMR Mar-2024 Release 1 allows local attackers to execute privileged behaviors.
CVSS Score: 4.0 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=03; https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=03
CVE: CVE-2024-20836
Published: 2024-03-05
Description: Out of bounds Read vulnerability in ssmis_get_frm in libsubextractor.so prior to SMR Mar-2024 Release 1 allows local attackers to read out of bounds memory.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=03; https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=03
CVE: CVE-2024-20837
Published: 2024-03-05
Description: Improper handling of granting permission for Trusted Web Activities in Samsung Internet prior to version 24.0.0.41 allows local attackers to grant permission to their own TWA WebApps without user interaction.
CVSS Score: 5.3 (MEDIUM)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03; https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03
CVE: CVE-2024-20838
Published: 2024-03-05
Description: Improper validation vulnerability in Samsung Internet prior to version 24.0.3.2 allows local attackers to execute arbitrary code.
CVSS Score: 6.8 (MEDIUM)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03; https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03
CVE: CVE-2024-20839
Published: 2024-03-05
Description: Improper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and Android 13, 21.4.51.02 in Android 14 allows physical attackers to access recording files on the lock screen.
CVSS Score: 4.6 (MEDIUM)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03; https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03
CVE: CVE-2024-20840
Published: 2024-03-05
Description: Improper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and Android 13, 21.4.51.02 in Android 14 allows physical attackers using hardware keyboard to use VoiceRecorder on the lock screen.
CVSS Score: 5.7 (MEDIUM)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03; https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03
CVE: CVE-2024-20841
Published: 2024-03-05
Description: Improper Handling of Insufficient Privileges in Samsung Account prior to version 14.8.00.3 allows local attackers to access data.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-276
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03; https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03
CVE: CVE-2023-42419
Published: 2024-03-05
Description: Maintenance Server, in Cybellum's QCOW air-gapped distribution (China Edition), versions 2.15.5 through 2.27, was compiled with a hard-coded private cryptographic key.


An attacker with administrative privileges & access to the air-gapped server could potentially use this key to run commands on the server.
The issue was resolved in version 2.28.
Earlier versions, including all Cybellum 1.x versions, and distributions for the rest of the world remain unaffected.


CVSS Score: 3.8 (LOW)
References: https://cybellum.com/; https://cybellum.com/