rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-9429 
In profman, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-110035108
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2019-09-27T18:05:18.000Z
CVE-2019-9430 
In Bluetooth, there is a possible null pointer dereference due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-109838296
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2019-09-27T18:05:18.000Z
CVE-2019-9431 
In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with heap information written to the log with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-109755179
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2019-09-27T18:05:18.000Z
CVE-2019-9432 
In Bluetooth, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure in the Bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80546108
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2019-09-27T18:05:18.000Z
CVE-2019-9433 
In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2019-09-27T18:05:18.000Z
CVE-2019-9434 
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with heap information written to the log with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80432895
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2019-09-27T18:05:18.000Z
CVE-2019-9435 
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80146682
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2019-09-27T18:05:18.000Z
CVE-2019-9436 
In the Android kernel in the bootloader there is a possible secure boot bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation.
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2019-09-06T21:42:23.000Z
CVE-2019-9438 
In the Package Manager service, there is a possible information disclosure due to a confused deputy. This could lead to local disclosure of information about installed packages for other users with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-77821568
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2019-09-27T18:05:19.000Z
CVE-2019-9440 
In AOSP Email, there is a possible information disclosure due to a confused deputy. This could lead to local disclosure of the Email app's protected files with User execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-37637796
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2019-09-27T18:05:19.000Z
CVE-2019-9441 
In the Android kernel in the mnh driver there is a possible out of bounds write due to improper input validation. This could lead to escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2019-09-06T21:46:57.000Z
CVE-2019-9442 
In the Android kernel in the mnh driver there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System privileges required. User interaction is not needed for exploitation.
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2019-09-06T21:47:08.000Z
CVE-2019-9443 
In the Android kernel in the vl53L0 driver there is a possible out of bounds write due to a permissions bypass. This could lead to local escalation of privilege due to a set_fs() call without restoring the previous limit with System execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2019-09-06T21:47:27.000Z
CVE-2019-9444 
In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: information disclosure
Affected products: vendor: n/a
product: Android
Published: 2019-09-06T21:50:08.000Z
CVE-2019-9445 
In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: information disclosure
Affected products: vendor: n/a
product: Android
Published: 2019-09-06T21:50:34.000Z
CVE-2019-9446 
In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to improper input validation. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2019-09-06T21:47:42.000Z
CVE-2019-9447 
In the Android kernel in the FingerTipS touchscreen driver there is a possible use-after-free due to improper locking. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2019-09-06T21:47:57.000Z
CVE-2019-9448 
In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing bounds check. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2019-09-06T21:48:13.000Z
CVE-2019-9449 
In the Android kernel in FingerTipS touchscreen driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: information disclosure
Affected products: vendor: n/a
product: Android
Published: 2019-09-06T21:50:45.000Z
CVE-2019-9450 
In the Android kernel in the FingerTipS touchscreen driver there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2019-09-06T21:48:29.000Z
CVE-2019-9451 
In the Android kernel in the touchscreen driver there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2019-09-06T21:48:47.000Z
CVE-2019-9452 
In the Android kernel in SEC_TS touch driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: information disclosure
Affected products: vendor: n/a
product: Android
Published: 2019-09-06T21:50:55.000Z
CVE-2019-9453 
In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: information disclosure
Affected products: vendor: n/a
product: Android
Published: 2019-09-06T21:51:06.000Z
CVE-2019-9454 
In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2019-09-06T21:48:59.000Z
CVE-2019-9455 
In the Android kernel in the video driver there is a kernel pointer leak due to a WARN_ON statement. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: information disclosure
Affected products: vendor: n/a
product: Android
Published: 2019-09-06T21:51:21.000Z
CVE-2019-9456 
In the Android kernel in Pixel C USB monitor driver there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2019-09-06T21:49:15.000Z
CVE-2019-9458 
In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2019-09-06T21:49:41.000Z
CVE-2019-9459 
In libttspico, there is a possible OOB write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-79593569
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2019-09-27T18:05:19.000Z
CVE-2019-9461 
In the Android kernel in VPN routing there is a possible information disclosure. This could lead to remote information disclosure by an adjacent network attacker with no additional execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: In the Android kernel information disclosure
Affected products: vendor: n/a
product: Android
Published: 2019-09-06T21:43:01.000Z
CVE-2019-9462 
In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-91544774
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Android
Published: 2019-09-27T18:05:19.000Z
CVE-2019-9463 
In Platform, there is a possible bypass of user interaction requirements due to background app interception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113584607
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2019-09-27T18:05:19.000Z
CVE-2019-9464 
In various functions of RecentLocationApps.java, DevicePolicyManagerService.java, and RecognitionService.java, there is an incorrect warning indicating an app accessed the user's location. This could dissolve the trust in the platform's permission system, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141028068
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2019-12-06T22:40:39.000Z
CVE-2019-9465 
In the Titan M handling of cryptographic operations, there is a possible information disclosure due to an unusual root cause. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10 Android ID: A-133258003
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-01-07T18:07:47.000Z
CVE-2019-9467 
In the Bootloader, there is a possible kernel command injection due to missing command sanitization. This could lead to a local elevation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-80316910
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2019-11-13T19:48:07.000Z
CVE-2019-9468 
In export_key_der of export_key.cpp, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10 Android ID: A-139683471
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-01-06T17:26:00.000Z
CVE-2019-9469 
In km_compute_shared_hmac of km4.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-130246677
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-01-06T17:25:56.000Z
CVE-2019-9470 
In dma_sblk_start of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-144167528
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-01-06T17:25:48.000Z
CVE-2019-9471 
In set_outbound_iatu of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-144168326
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android
Published: 2020-01-06T17:25:42.000Z
CVE-2019-9472 
In DCRYPTO_equals of compare.c, there is a possible timing attack due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-130237611
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-01-06T17:25:37.000Z
CVE-2019-9473 
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10 Android ID: A-115363533
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-15T21:17:24.000Z
CVE-2019-9474 
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10 Android ID: A-79996267
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2020-03-15T21:17:56.000Z
CVE-2019-9475 
In /proc/net of the kernel filesystem, there is a possible information leak due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-9496886
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android
Published: 2021-06-11T16:36:52.000Z
CVE-2019-9482 
In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires access to the event that has received the sighting. The issue affects instances with restrictive sighting settings (event only / sighting reported only).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-01T05:00:00.000Z
CVE-2019-9483 
Amazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio and video data, or insert spoofed video that does not correspond to the actual person at the door.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-01T05:00:00.000Z
CVE-2019-9484 
The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obtain access via an HTTP session on port 10000, as demonstrated by reading the modem password (which is 1234), or reconfiguring "party mode" or "vacation mode."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-01T06:00:00.000Z
CVE-2019-9485 
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Insecure Permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-29T16:08:14.000Z
CVE-2019-9486 
STRATO HiDrive Desktop Client 5.0.1.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the HiDriveMaintenanceService service. This service establishes a NetNamedPipe endpoint that allows applications to connect and call publicly exposed methods. An attacker can inject and execute code by hijacking the insecure communications with the service. This vulnerability also affects Telekom MagentaCLOUD through 5.7.0.0 and 1&1 Online Storage through 6.1.0.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-30T18:27:33.000Z
CVE-2019-9488 
Trend Micro Deep Security Manager (10.x, 11.x) and Vulnerability Protection (2.0) are vulnerable to a XML External Entity Attack. However, for the attack to be possible, the attacker must have root/admin access to a protected host which is authorized to communicate with the Deep Security Manager (DSM).
Problem types: description: XXE Attack
Affected products: vendor: Trend Micro
product: Trend Micro Deep Security
vendor: Trend Micro
product: Trend Micro Vulnerability Protection
Published: 2019-09-11T18:00:08.000Z
CVE-2019-9489 
A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free Business Security (versions 10.0, 9.5 and 9.0) could allow an attacker to modify arbitrary files on the affected product's management console.
Problem types: description: Directory Traversal
Affected products: vendor: Trend Micro
product: Apex One, OfficeScan, Worry-Free Business Security
Published: 2019-04-05T22:46:14.000Z
CVE-2019-9490 
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 could allow an non-authorized user to disclose administrative credentials. An attacker must be an authenticated user in order to exploit the vulnerability.
Problem types: description: Admin Credential Disclosure
Affected products: vendor: Trend Micro
product: InterScan Web Security Virtual Appliance
Published: 2019-04-05T22:46:11.000Z
CVE-2019-9491 
Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution (RCE) when executed.
Problem types: description: Arbitrary RCE
Affected products: vendor: Trend Micro
product: Trend Micro Anti-Threat Toolkit (ATTK)
Published: 2019-10-21T18:35:49.000Z
CVE-2019-9492 
A DLL side-loading vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow an authenticated attacker to gain code execution and terminate the product's process - disabling endpoint protection. The attacker must have already gained authentication and have local access to the vulnerable system.
Problem types: description: DLL Side-loading
Affected products: vendor: Trend Micro
product: Trend Micro OfficeScan
Published: 2019-07-26T13:42:05.000Z
CVE-2019-9493 MyCar Controls uses hard-coded credentials
The MyCar Controls of AutoMobility Distribution Inc., mobile application contains hard-coded admin credentials. A remote unauthenticated attacker may be able to send commands to and retrieve data from a target MyCar unit. This may allow the attacker to learn the location of a target, or gain unauthorized physical access to a vehicle. This issue affects AutoMobility MyCar versions prior to 3.4.24 on iOS and versions prior to 4.1.2 on Android. This issue has additionally been fixed in Carlink, Link, Visions MyCar, and MyCar Kia.
Problem types: cwe_id: CWE-798
description: CWE-798 Use of Hard-coded Credentials
Affected products: vendor: AutoMobility Distribution Inc.
product: MyCar Controls
vendor: AutoMobility Distribution Inc.
product: MyCar Controls
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
version: 3.1
Published: 2020-01-15T17:05:27.083Z