rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-20486 
An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple pages (setup.cgi and adv_index.htm) within the web management console are vulnerable to stored XSS, as demonstrated by the configuration of the UI language.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-02T15:06:33.000Z
CVE-2019-20487 
An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple actions within the WNR1000V4 web management console are vulnerable to an unauthenticated GET request (exploitable directly or through CSRF), as demonstrated by the setup.cgi?todo=save_htp_account URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-02T15:06:06.000Z
CVE-2019-20488 
An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple actions within the web management interface (setup.cgi) are vulnerable to command injection, allowing remote attackers to execute arbitrary commands, as demonstrated by shell metacharacters in the sysDNSHost parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-02T15:06:24.000Z
CVE-2019-20489 
An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. The web management interface (setup.cgi) has an authentication bypass and other problems that ultimately allow an attacker to remotely compromise the device from a malicious webpage. The attacker sends an FW_remote.htm&todo=cfg_init request without a cookie, reads the Set-Cookie header in the 401 Unauthorized response, and then repeats the FW_remote.htm&todo=cfg_init request with the specified cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-02T15:06:16.000Z
CVE-2019-20490 
cPanel before 82.0.18 allows authentication bypass because webmail usernames are processed inconsistently (SEC-499).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-17T14:23:08.000Z
CVE-2019-20491 
cPanel before 82.0.18 allows attackers to leverage virtual mail accounts in order to bypass account suspensions (SEC-508).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T20:13:25.000Z
CVE-2019-20492 
cPanel before 82.0.18 allows authentication bypass because of misparsing of the format of the password file (SEC-516).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-17T14:23:54.000Z
CVE-2019-20493 
cPanel before 82.0.18 allows self-XSS because JSON string escaping is mishandled (SEC-520).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-17T14:24:47.000Z
CVE-2019-20494 
In cPanel before 82.0.18, Cpanel::Rand::Get can produce a predictable series of numbers (SEC-525).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-17T14:29:37.000Z
CVE-2019-20495 
cPanel before 82.0.18 allows attackers to read an arbitrary database via MySQL dump streaming (SEC-531).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-17T14:30:15.000Z
CVE-2019-20496 
cPanel before 82.0.18 allows attackers to conduct arbitrary chown operations as root during log processing (SEC-532).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-17T14:30:57.000Z
CVE-2019-20497 
cPanel before 82.0.18 allows stored XSS via WHM Backup Restoration (SEC-533).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-17T14:31:35.000Z
CVE-2019-20498 
cPanel before 82.0.18 allows WebDAV authentication bypass because the connection-sharing logic is incorrect (SEC-534).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-17T14:32:12.000Z
CVE-2019-20499 
D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_restore configRestore or configServerip parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-05T14:37:27.000Z
CVE-2019-20500 
D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_save configBackup or downloadServerip parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-05T14:37:00.000Z
CVE-2019-20501 
D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in the Web interface, using shell metacharacters in the admin.cgi?action=upgrade firmwareRestore or firmwareServerip parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-05T14:36:08.000Z
CVE-2019-20502 
An issue was discovered in EFS Easy Chat Server 3.1. There is a buffer overflow via a long body2.ghp message parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-05T19:14:09.000Z
CVE-2019-20503 
usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-06T00:00:00.000Z
CVE-2019-20504 
service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 (6.4.120822) allows a remote attacker to execute code via shell metacharacters in the kuid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-09T00:55:30.000Z
CVE-2019-20511 
ERPNext 11.1.47 allows blog?blog_category= Frame Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:41:04.000Z
CVE-2019-20512 
Open edX Ironwood.1 allows support/certificates?course_id= reflected XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:51:40.000Z
CVE-2019-20513 
Open edX Ironwood.1 allows support/certificates?user= reflected XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T17:35:57.000Z
CVE-2019-20514 
ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the address/ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T17:50:31.000Z
CVE-2019-20515 
ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the addresses/ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T17:50:47.000Z
CVE-2019-20516 
ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the blog/ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T17:51:46.000Z
CVE-2019-20517 
ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the contact/ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T17:52:07.000Z
CVE-2019-20518 
ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the project/ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T17:52:20.000Z
CVE-2019-20519 
ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the user/ URI, as demonstrated by a crafted e-mail address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T17:52:35.000Z
CVE-2019-20520 
ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the api/method/ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T17:52:46.000Z
CVE-2019-20521 
ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the api/ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T17:52:51.000Z
CVE-2019-20522 
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T13:53:22.000Z
CVE-2019-20523 
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T13:52:29.000Z
CVE-2019-20524 
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T13:50:19.000Z
CVE-2019-20525 
Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp driver parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T17:56:30.000Z
CVE-2019-20526 
Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp password parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T17:56:48.000Z
CVE-2019-20527 
Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp serverURL parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T13:51:57.000Z
CVE-2019-20528 
Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T18:36:38.000Z
CVE-2019-20529 
In core/doctype/prepared_report/prepared_report.py in Frappe 11 and 12, data files generated with Prepared Report were being stored as public files (no authentication is required to access; having a link is sufficient) instead of private files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T17:30:31.000Z
CVE-2019-20530 
An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), P(9.0), and Q(10.0) software. Arbitrary code execution is possible on the lock screen. The Samsung ID is SVE-2019-15266 (December 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T17:39:14.000Z
CVE-2019-20531 
An issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software. The Wi-Fi kernel drivers have an out-of-bounds Read. The Samsung IDs are SVE-2019-15692, SVE-2019-15693 (December 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T17:40:22.000Z
CVE-2019-20532 
An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Attackers can access the Developer options without authentication. The Samsung ID is SVE-2019-15800 (December 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T17:41:14.000Z
CVE-2019-20533 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (released in China or India) software. The S Secure app can launch masked apps without a password. The Samsung ID is SVE-2019-13996 (December 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T17:42:14.000Z
CVE-2019-20534 
An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can view home-screen wallpaper by adjusting the brightness of a locked screen. The Samsung ID is SVE-2019-15540 (December 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T17:43:17.000Z
CVE-2019-20535 
An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) software. A connection to a new Bluetooth devices can be established from the lock screen. The Samsung ID is SVE-2019-15533 (December 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T17:44:16.000Z
CVE-2019-20536 
An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) (released in China) software. The Firewall application mishandles the PermissionWhiteLists protection mechanism. The Samsung ID is SVE-2019-14299 (November 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T17:45:35.000Z
CVE-2019-20537 
An issue was discovered on Samsung mobile devices with P(9.0) (TEEGRIS and Qualcomm chipsets). There is arbitrary memory overwrite in the SEM Trustlet, leading to arbitrary code execution. The Samsung IDs are SVE-2019-14651, SVE-2019-14666 (November 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T17:47:33.000Z
CVE-2019-20538 
An issue was discovered on Samsung mobile devices with P(9.0) software. There is a heap overflow in the knox_kap driver. The Samsung ID is SVE-2019-14857 (November 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T17:48:34.000Z
CVE-2019-20539 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Broadcom chipsets) software. An out-of-bounds Read in the Wi-Fi vendor command leads to an information leak. The Samsung ID is SVE-2019-14869 (November 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T17:50:25.000Z
CVE-2019-20540 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. There is a buffer over-read and possible information leak in the core touch screen driver. The Samsung ID is SVE-2019-14942 (November 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T17:51:34.000Z
CVE-2019-20541 
An issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software. The Wi-Fi kernel drivers have a stack overflow. The Samsung IDs are SVE-2019-14965, SVE-2019-14966, SVE-2019-14968, SVE-2019-14969, SVE-2019-14970, SVE-2019-14980, SVE-2019-14981, SVE-2019-14982, SVE-2019-14983, SVE-2019-14984, SVE-2019-15122, SVE-2019-15123 (November 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T17:53:23.000Z
CVE-2019-20542 
An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) (Exynos chipsets) software. There is a stack overflow in the kernel driver. The Samsung ID is SVE-2019-15034 (November 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T17:54:13.000Z
CVE-2019-20543 
An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can bypass Factory Reset Protection (FRP) via SamsungPay mini. The Samsung ID is SVE-2019-15090 (November 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T17:55:10.000Z
CVE-2019-20544 
An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos chipsets) software. There is an out-of-bounds write in the ICCC Trustlet. The Samsung ID is SVE-2019-15274 (November 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T17:56:07.000Z
CVE-2019-20545 
An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos chipsets) software. A buffer overflow in the HDCP Trustlet affects secure TEEGRIS memory. The Samsung ID is SVE-2019-15283 (November 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T17:57:16.000Z
CVE-2019-20546 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Broadcom Wi-Fi chipsets) software. A denial-of-service attack can leverage a shared interface between Broadcom Bluetooth and Broadcom Wi-Fi. The Samsung ID is SVE-2019-15350 (November 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:01:37.000Z
CVE-2019-20547 
An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) software. Data may leak via a Bluetooth debug command. The Samsung ID is SVE-2019-15398 (November 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:08:20.000Z
CVE-2019-20548 
An issue was discovered on Samsung mobile devices with P(9.0) devices (Qualcomm chipsets) software. There is a buffer overflow in the bootloader. The Samsung ID is SVE-2019-15399 (November 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:11:13.000Z
CVE-2019-20549 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Broadcom chipsets) software. A heap out-of-bounds access can occur during LE Packet reception in Broadcom Bluetooth. The Samsung ID is SVE-2019-15724 (November 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:12:54.000Z
CVE-2019-20550 
An issue was discovered on Samsung mobile devices with O(8.x) (released in China and India) software. The S Secure app can access the content of a locked app without a password. The Samsung ID is SVE-2019-13805 (October 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:15:52.000Z
CVE-2019-20551 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. Attackers can bypass Factory Reset Protection (FRP) via a Class 0 Type Message. The Samsung ID is SVE-2019-14941 (October 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:18:01.000Z
CVE-2019-20552 
An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can bypass Factory Reset Protection (FRP) via an RCS call. The Samsung ID is SVE-2019-15035 (October 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:19:09.000Z
CVE-2019-20553 
An issue was discovered on Samsung mobile devices with P(9.0) (SM6150, SM8150, SM8150_FUSION, exynos7885, exynos9610, and exynos9820 chipsets) software. Arbitrary memory read and write operations can occur in RKP. The Samsung ID is SVE-2019-15143 (October 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:20:22.000Z
CVE-2019-20554 
An issue was discovered on Samsung mobile devices with O(8.x) software. Attackers can bypass Factory Reset Protection (FRP) via an external keyboard. The Samsung ID is SVE-2019-15164 (October 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:21:36.000Z
CVE-2019-20555 
An issue was discovered on Samsung mobile devices with N(7.x) software. The Gallery app allows attackers to view all pictures of a locked device. The Samsung ID is SVE-2019-15189 (October 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:22:37.000Z
CVE-2019-20556 
An issue was discovered on Samsung mobile devices with P(9.0) (SM6150, SM8150, SM8150_FUSION, exynos7885, exynos9610, and exynos9820 chipsets) software. RKP memory corruption allows attackers to control the effective address in EL2. The Samsung ID is SVE-2019-15221 (October 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:23:48.000Z
CVE-2019-20557 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. Attackers can bypass Factory Reset Protection (FRP) via a SIM card by blocking the PUK code. The Samsung ID is SVE-2019-15262 (October 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:24:44.000Z
CVE-2019-20558 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. There is a Buffer Overflow in the Touch Screen Driver. The Samsung ID is SVE-2019-14990 (October 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:25:43.000Z
CVE-2019-20559 
An issue was discovered on Samsung mobile devices with P(9.0) software. Gallery allows viewing of photos on the lock screen. The Samsung ID is SVE-2019-15055 (October 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:26:26.000Z
CVE-2019-20560 
An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. The BIOSUB Trustlet has an out of bounds write. The Samsung ID is SVE-2019-15261 (October 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:27:21.000Z
CVE-2019-20561 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. The bootloader has an integer signedness error. The Samsung ID is SVE-2019-15230 (October 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:28:10.000Z
CVE-2019-20562 
An issue was discovered on Samsung mobile devices with P(9.0) (with TEEGRIS) software. There is a buffer overflow in the BIOSUB Trustlet. The Samsung ID is SVE-2019-15264 (October 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:28:55.000Z
CVE-2019-20563 
An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. The SEC_FR trustlet has an out of bounds write. The Samsung ID is SVE-2019-15272 (October 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:30:01.000Z
CVE-2019-20564 
An issue was discovered on Samsung mobile devices with any (before October 2019 for S9 or Note9) software. Attackers can manipulate the IMEI. The Samsung ID is SVE-2019-15435 (October 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:30:59.000Z
CVE-2019-20565 
An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) software. Attackers can change the USB configuration without authentication. The Samsung ID is SVE-2018-13300 (September 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:32:04.000Z
CVE-2019-20566 
An issue was discovered on Samsung mobile devices with any (before September 2019 for SMP1300 Exynos modem chipsets) software. Attackers can trigger stack corruption in the Shannon modem via a crafted RP-Originator/Destination address. The Samsung ID is SVE-2019-14858 (September 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:33:10.000Z
CVE-2019-20567 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. A up_parm heap overflow leads to code execution in the bootloader. The Samsung ID is SVE-2019-14993 (September 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:34:10.000Z
CVE-2019-20568 
An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) devices (Exynos and Qualcomm chipsets) software. A race condition causes a Use-After-Free. The Samsung ID is SVE-2019-15067 (September 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:35:07.000Z
CVE-2019-20569 
An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can bypass Factory Reset Protection (FRP) via the status bar. The Samsung ID is SVE-2019-15089 (September 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:36:01.000Z
CVE-2019-20570 
An issue was discovered on Samsung mobile devices with P(9.0), O(8.0), and N(7.1) software. Attackers can bypass Factory Reset Protection (FRP) via Smart Switch. The Samsung ID is SVE-2019-15138 (September 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:36:58.000Z