rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-20955 
Swann SWWHD-INTCAM-HD devices have the twipc root password, leading to FTP access as root. NOTE: all affected customers were migrated by 2020-08-31.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T20:10:19.000Z
CVE-2018-20956 
Swann SWWHD-INTCAM-HD devices leave the PSK in logs after a factory reset. NOTE: all affected customers were migrated by 2020-08-31.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T20:09:38.000Z
CVE-2018-20957 
The Bluetooth Low Energy (BLE) subsystem on Tapplock devices before 2018-06-12 allows replay attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T20:08:36.000Z
CVE-2018-20958 
The Bluetooth Low Energy (BLE) subsystem on Tapplock devices before 2018-06-12 relies on Key1 and SerialNo for unlock operations; however, these are derived from the MAC address, which is broadcasted by the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T12:43:00.000Z
CVE-2018-20959 
Jura E8 devices lack Bluetooth connection security.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T12:47:34.000Z
CVE-2018-20960 
Nespresso Prodigio devices lack Bluetooth connection security.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T20:07:16.000Z
CVE-2018-20961 
In the Linux kernel before 4.16.4, a double free vulnerability in the f_midi_set_alt function of drivers/usb/gadget/function/f_midi.c in the f_midi driver may allow attackers to cause a denial of service or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T14:48:50.000Z
CVE-2018-20962 
The Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T19:51:49.000Z
CVE-2018-20963 
The contact-form-to-email plugin before 1.2.66 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T16:46:45.000Z
CVE-2018-20964 
The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T16:46:13.000Z
CVE-2018-20965 
The ultimate-member plugin before 2.0.4 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-12T15:25:56.000Z
CVE-2018-20966 
The woocommerce-jetpack plugin before 3.8.0 for WordPress has XSS in the Products Per Page feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-12T15:19:19.000Z
CVE-2018-20967 
The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T15:21:49.000Z
CVE-2018-20968 
The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T15:21:13.000Z
CVE-2018-20969 
do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-16T03:36:12.000Z
CVE-2018-20970 
The pdf-print plugin before 2.0.3 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T18:15:39.000Z
CVE-2018-20971 
The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-16T20:21:56.000Z
CVE-2018-20972 
The companion-auto-update plugin before 3.2.1 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-16T20:21:25.000Z
CVE-2018-20973 
The companion-auto-update plugin before 3.2.1 for WordPress has local file inclusion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-16T20:21:00.000Z
CVE-2018-20974 
The js-jobs plugin before 1.0.7 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-16T20:15:17.000Z
CVE-2018-20975 
Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T12:14:26.000Z
CVE-2018-20976 
An issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18. A use after free exists, related to xfs_fs_fill_super failure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T01:52:55.000Z
CVE-2018-20977 
The all-in-one-schemaorg-rich-snippets plugin before 1.5.0 for WordPress has XSS on the settings page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T18:12:47.000Z
CVE-2018-20978 
The wp-all-import plugin before 3.4.7 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T15:01:07.000Z
CVE-2018-20979 
The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capability_type mishandling in register_post_type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T12:36:19.000Z
CVE-2018-20980 
The ninja-forms plugin before 3.2.15 for WordPress has parameter tampering.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T12:37:38.000Z
CVE-2018-20981 
The ninja-forms plugin before 3.3.9 for WordPress has insufficient restrictions on submission-data retrieval during Export Personal Data requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T12:40:46.000Z
CVE-2018-20982 
The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant admin submenu screens.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T12:58:07.000Z
CVE-2018-20983 
The wp-retina-2x plugin before 5.2.3 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T13:15:35.000Z
CVE-2018-20984 
The patreon-connect plugin before 1.2.2 for WordPress has Object Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T13:29:14.000Z
CVE-2018-20985 
The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T13:34:03.000Z
CVE-2018-20986 
The advanced-custom-fields (aka Elliot Condon Advanced Custom Fields) plugin before 5.7.8 for WordPress has XSS by authors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T19:38:42.000Z
CVE-2018-20987 
The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T19:04:34.000Z
CVE-2018-20988 
The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T18:53:29.000Z
CVE-2018-20989 
An issue was discovered in the untrusted crate before 0.6.2 for Rust. Error handling can trigger an integer underflow and panic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T17:17:57.000Z
CVE-2018-20990 
An issue was discovered in the tar crate before 0.4.16 for Rust. Arbitrary file overwrite can occur via a symlink or hardlink in a TAR archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T12:39:33.000Z
CVE-2018-20991 
An issue was discovered in the smallvec crate before 0.6.3 for Rust. The Iterator implementation mishandles destructors, leading to a double free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T14:23:19.000Z
CVE-2018-20992 
An issue was discovered in the claxon crate before 0.4.1 for Rust. Uninitialized memory can be exposed because certain decode buffer sizes are mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T12:31:30.000Z
CVE-2018-20993 
An issue was discovered in the yaml-rust crate before 0.4.1 for Rust. There is uncontrolled recursion during deserialization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T12:32:43.000Z
CVE-2018-20994 
An issue was discovered in the trust-dns-proto crate before 0.5.0-alpha.3 for Rust. There is infinite recursion because DNS message compression is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T12:34:16.000Z
CVE-2018-20995 
An issue was discovered in the slice-deque crate before 0.1.16 for Rust. move_head_unchecked allows memory corruption because deque updates are mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T17:14:25.000Z
CVE-2018-20996 
An issue was discovered in the crossbeam crate before 0.4.1 for Rust. There is a double free because of destructor mishandling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T17:13:10.000Z
CVE-2018-20997 
An issue was discovered in the openssl crate before 0.10.9 for Rust. A use-after-free occurs in CMS Signing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T17:12:03.000Z
CVE-2018-20998 
An issue was discovered in the arrayfire crate before 3.6.0 for Rust. Addition of the repr() attribute to an enum is mishandled, leading to memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T17:11:29.000Z
CVE-2018-20999 
An issue was discovered in the orion crate before 0.11.2 for Rust. reset() calls cause incorrect results.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T14:25:58.000Z
CVE-2018-21000 
An issue was discovered in the safe-transmute crate before 0.10.1 for Rust. A constructor's arguments are in the wrong order, causing heap memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T14:29:49.000Z
CVE-2018-21001 
The anycomment plugin before 0.0.33 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T11:18:05.000Z
CVE-2018-21002 
The js-support-ticket plugin before 2.0.6 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T11:24:58.000Z
CVE-2018-21003 
The buddyforms plugin before 2.2.8 for WordPress has SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T11:26:17.000Z
CVE-2018-21004 
The rsvpmaker plugin before 5.6.4 for WordPress has SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T11:40:36.000Z
CVE-2018-21005 
The bbp-move-topics plugin before 1.1.6 for WordPress has code injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T11:54:00.000Z
CVE-2018-21006 
The bbp-move-topics plugin before 1.1.6 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T11:56:05.000Z
CVE-2018-21007 
The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders inside uploads.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-29T11:20:24.000Z
CVE-2018-21008 
An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-04T20:33:24.000Z
CVE-2018-21009 
Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-05T03:24:29.000Z
CVE-2018-21010 
OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-05T12:52:29.000Z
CVE-2018-21011 
The charitable plugin before 1.5.14 for WordPress has unauthorized access to user and donation details.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-09T12:03:43.000Z
CVE-2018-21012 
The cf7-invisible-recaptcha plugin before 1.3.2 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-09T12:04:56.000Z
CVE-2018-21013 
The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated by allowing new administrator accounts via vectors involving xmlPath to wp-admin/admin-ajax.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-09T12:07:11.000Z
CVE-2018-21014 
The buddyboss-media plugin through 3.2.3 for WordPress has stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-09T12:09:11.000Z
CVE-2018-21015 
AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. There is "cfg_new->AVCLevelIndication = cfg->AVCLevelIndication;" but cfg could be NULL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:58:44.000Z
CVE-2018-21016 
audio_sample_entry_AddBox() at isomedia/box_code_base.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:58:33.000Z
CVE-2018-21017 
GPAC 0.7.1 has a memory leak in dinf_Read in isomedia/box_code_base.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:58:00.000Z
CVE-2018-21018 
Mastodon before 2.6.3 mishandles timeouts of incompletely established sessions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-22T14:22:43.000Z
CVE-2018-21019 
Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via components/api.py.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-23T15:14:13.000Z
CVE-2018-21020 
In very rare cases, a PHP type juggling vulnerability in centreonAuth.class.php in Centreon Web before 2.8.27 allows attackers to bypass authentication mechanisms in place.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-08T12:08:47.000Z
CVE-2018-21021 
img_gantt.php in Centreon Web before 2.8.27 allows attackers to perform SQL injections via the host_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-08T12:11:52.000Z
CVE-2018-21022 
makeXML_ListServices.php in Centreon Web before 2.8.28 allows attackers to perform SQL injections via the host_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-08T12:14:26.000Z
CVE-2018-21023 
getStats.php in Centreon Web before 2.8.28 allows authenticated attackers to execute arbitrary code via the ns_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-08T12:17:15.000Z
CVE-2018-21024 
licenseUpload.php in Centreon Web before 2.8.27 allows attackers to upload arbitrary files via a POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-08T14:32:56.000Z
CVE-2018-21025 
In Centreon VM through 19.04.3, centreon-backup.pl allows attackers to become root via a crafted script, due to incorrect rights of sourced configuration files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-08T12:18:39.000Z
CVE-2018-21026 
A vulnerability in Hitachi Command Suite 7.x and 8.x before 8.6.5-00 allows an unauthenticated remote user to read internal information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-12T17:42:33.000Z
CVE-2018-21027 
Boa through 0.94.14rc21 allows remote attackers to trigger an out-of-memory (OOM) condition because malloc is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-11T19:28:42.000Z
CVE-2018-21028 
Boa through 0.94.14rc21 allows remote attackers to trigger a memory leak because of missing calls to the free function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-11T19:29:33.000Z
CVE-2018-21029 
systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication (SNI) is not sent, and there is no hostname validation with the GnuTLS backend. NOTE: This has been disputed by the developer as not a vulnerability since hostname validation does not have anything to do with this issue (i.e. there is no hostname to be sent)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-30T21:46:51.000Z
CVE-2018-21030 
Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin. Thus, for example, an XSS payload can be placed in an SVG document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-31T14:52:45.000Z
CVE-2018-21031 
Tautulli versions 2.1.38 and below allows remote attackers to bypass intended access control in Plex Media Server because the X-Plex-Token is mishandled and can be retrieved from Tautulli. NOTE: Initially, this id was associated with Plex Media Server 1.18.2.2029-36236cc4c as the affected product and version. Further research indicated that Tautulli is the correct affected product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-18T16:30:56.000Z
CVE-2018-21032 
A vulnerability in Hitachi Command Suite prior to 8.7.1-00 and Hitachi Automation Director prior to 8.5.0-00 allow authenticated remote users to expose technical information through error messages. Hitachi Command Suite includes Hitachi Device Manager and Hitachi Compute Systems Manager.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-14T15:51:21.000Z
CVE-2018-21033 
A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director prior to 8.6.2-00 and Hitachi Infrastructure Analytics Advisor prior to 4.2.0-00 allow authenticated remote users to load an arbitrary Cascading Style Sheets (CSS) token sequence. Hitachi Command Suite includes Hitachi Device Manager, Hitachi Tiered Storage Manager, Hitachi Replication Manager, Hitachi Tuning Manager, Hitachi Global Link Manager and Hitachi Compute Systems Manager.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-14T15:51:17.000Z
CVE-2018-21034 
In Argo versions prior to v1.5.0-rc1, it was possible for authenticated Argo users to submit API calls to retrieve secrets and other manifests which were stored within git.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-09T16:18:37.000Z
CVE-2018-21035 
In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service (memory consumption).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-28T19:17:43.000Z
CVE-2018-21036 
Sails.js before v1.0.0-46 allows attackers to cause a denial of service with a single request because there is no error handler in sails-hook-sockets to handle an empty pathname in a WebSocket request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-21T13:14:55.000Z
CVE-2018-21037 
Subrion CMS 4.1.5 (and possibly earlier versions) allow CSRF to change the administrator password via the panel/members/edit/1 URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-17T14:53:17.000Z
CVE-2018-21038 
An issue was discovered on Samsung mobile devices with N(7.x) software. The Secure Folder app's startup logic allows authentication bypass. The Samsung ID is SVE-2018-11628 (December 2018).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-08T16:18:53.000Z
CVE-2018-21039 
An issue was discovered on Samsung mobile devices with N(7.0) software. With the Location permission for the compass feature in Quick Tools (aka QuickTools), an attacker can bypass the lockscreen. The Samsung ID is SVE-2018-12053 (December 2018).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-08T16:22:21.000Z
CVE-2018-21040 
An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 9810 chipsets) software. There is a race condition with a resultant use-after-free in the g2d driver. The Samsung ID is SVE-2018-12959 (December 2018).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-08T16:24:07.000Z
CVE-2018-21041 
An issue was discovered on Samsung mobile devices with O(8.x) software. Access to Gallery in the Secure Folder can occur without authentication. The Samsung ID is SVE-2018-13057 (December 2018).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-08T16:44:13.000Z
CVE-2018-21042 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. Dual Messenger allows installation of an arbitrary APK with resultant privileged code execution. The Samsung ID is SVE-2018-13299 (December 2018).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-08T17:05:55.000Z
CVE-2018-21043 
An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 9810 chipsets) software. There is information disclosure about a kernel pointer in the g2d_drv driver because of logging. The Samsung ID is SVE-2018-13035 (December 2018).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-08T17:08:04.000Z
CVE-2018-21044 
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.0) software. The sem Trustlet has a buffer overflow that leads to arbitrary TEE code execution. The Samsung IDs are SVE-2018-13230, SVE-2018-13231, SVE-2018-13232, SVE-2018-13233 (December 2018).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-08T17:09:13.000Z