rainbutterfly/cve_corpus huggingface dataset:
CVE-2023-20819 
In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privilege needed. User interaction is not needed for exploitation. Patch ID: MOLY01068234; Issue ID: ALPS08010003.
Problem types: description: Elevation of Privilege
Affected products: vendor: MediaTek, Inc.
product: MT2731, MT6570, MT6580, MT6595, MT6732, MT6735, MT6737, MT6737M, MT6738, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6757, MT6758, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769T, MT6769Z, MT6771, MT6775, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6789, MT6795, MT6797, MT6799, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6895T, MT6896, MT6897, MT6983, MT6985, MT6989, MT8666, MT8666A, MT8667, MT8673, MT8675, MT8765, MT8766, MT8766Z, MT8768, MT8768A, MT8768B, MT8768T, MT8768Z, MT8781, MT8786, MT8788, MT8788T, MT8788X, MT8788Z, MT8791, MT8791T, MT8797, MT8798
Published: 2023-10-02T02:05:25.077Z
CVE-2023-20820 
In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00244189; Issue ID: WCNCR00244189.
Problem types: description: Elevation of Privilege
Affected products: vendor: MediaTek, Inc.
product: MT6890, MT7603, MT7612, MT7613, MT7615, MT7622, MT7626, MT7629, MT7915, MT7916, MT7981, MT7986, MT7990
Published: 2023-09-04T02:27:15.884Z
CVE-2023-20821 
In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07937113; Issue ID: ALPS07937113.
Problem types: description: Elevation of Privilege
Affected products: vendor: MediaTek, Inc.
product: MT2713, MT2735, MT6833, MT6835, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6980, MT6983, MT6985, MT6990, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8185, MT8188, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8395, MT8666, MT8673, MT8675, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797
Published: 2023-09-04T02:27:17.577Z
CVE-2023-20822 
In netdagent, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07944012; Issue ID: ALPS07944012.
Problem types: description: Elevation of Privilege
Affected products: vendor: MediaTek, Inc.
product: MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT8167, MT8167S, MT8168, MT8175, MT8195, MT8195Z, MT8362A
Published: 2023-09-04T02:27:19.136Z
CVE-2023-20823 
In cmdq, there is a possible out of bounds read due to an incorrect status check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08021592; Issue ID: ALPS08021592.
Problem types: description: Denial of Service
Affected products: vendor: MediaTek, Inc.
product: MT6768, MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6893, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8797
Published: 2023-09-04T02:27:20.756Z
CVE-2023-20824 
In duraspeed, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privilege needed. User interaction is not needed for exploitation. Patch ID: ALPS07951402; Issue ID: ALPS07951402.
Problem types: description: Information Disclosure
Affected products: vendor: MediaTek, Inc.
product: MT2713, MT6580, MT6735, MT6739, MT6761, MT6762, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6983, MT6985, MT8168, MT8175, MT8188, MT8195, MT8321, MT8365, MT8666, MT8667, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8791T, MT8797
Published: 2023-09-04T02:27:22.373Z
CVE-2023-20825 
In duraspeed, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privilege needed. User interaction is not needed for exploitation. Patch ID: ALPS07951402; Issue ID: ALPS07951413.
Problem types: description: Information Disclosure
Affected products: vendor: MediaTek, Inc.
product: MT2713, MT6580, MT6735, MT6739, MT6761, MT6762, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6983, MT6985, MT8168, MT8175, MT8188, MT8195, MT8321, MT8365, MT8666, MT8667, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8791T, MT8797
Published: 2023-09-04T02:27:23.998Z
CVE-2023-20826 
In cta, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privilege needed. User interaction is not needed for exploitation. Patch ID: ALPS07978550; Issue ID: ALPS07978550.
Problem types: description: Information Disclosure
Affected products: vendor: MediaTek, Inc.
product: MT6580, MT6761, MT6765, MT6779, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6895, MT6983, MT6985, MT8168, MT8175, MT8188, MT8195, MT8365, MT8673
Published: 2023-09-04T02:27:25.656Z
CVE-2023-20827 
In ims service, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07937105; Issue ID: ALPS07937105.
Problem types: description: Elevation of Privilege
Affected products: vendor: MediaTek, Inc.
product: MT6761, MT6762, MT6763, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8673, MT8791T, MT8797
Published: 2023-09-04T02:27:27.371Z
CVE-2023-20828 
In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014144.
Problem types: description: Elevation of Privilege
Affected products: vendor: MediaTek, Inc.
product: MT2735, MT6761, MT6762, MT6765, MT6768, MT6769, MT6779, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6980, MT6983, MT6985, MT6990, MT8167, MT8167S, MT8168, MT8175, MT8362A, MT8365
Published: 2023-09-04T02:27:29.062Z
CVE-2023-20829 
In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014148.
Problem types: description: Elevation of Privilege
Affected products: vendor: MediaTek, Inc.
product: MT2735, MT6761, MT6762, MT6765, MT6768, MT6769, MT6779, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6980, MT6983, MT6985, MT6990, MT8167, MT8167S, MT8168, MT8175, MT8362A, MT8365
Published: 2023-09-04T02:27:30.694Z
CVE-2023-20830 
In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014156.
Problem types: description: Elevation of Privilege
Affected products: vendor: MediaTek, Inc.
product: MT2713, MT2735, MT6761, MT6762, MT6765, MT6768, MT6769, MT6779, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6980, MT6983, MT6985, MT6990, MT8167, MT8167S, MT8168, MT8173, MT8195, MT8362A, MT8365, MT8781
Published: 2023-09-04T02:27:32.386Z
CVE-2023-20831 
In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014162.
Problem types: description: Elevation of Privilege
Affected products: vendor: MediaTek, Inc.
product: MT2735, MT6761, MT6762, MT6765, MT6768, MT6769, MT6779, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6980, MT6983, MT6985, MT6990, MT8167, MT8167S, MT8175, MT8195, MT8362A, MT8365
Published: 2023-09-04T02:27:34.059Z
CVE-2023-20832 
In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08013530.
Problem types: description: Elevation of Privilege
Affected products: vendor: MediaTek, Inc.
product: MT2735, MT6761, MT6762, MT6765, MT6768, MT6769, MT6779, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6980, MT6983, MT6985, MT6990, MT8167, MT8167S, MT8168, MT8175, MT8195, MT8362A, MT8365
Published: 2023-09-04T02:27:35.686Z
CVE-2023-20833 
In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017764.
Problem types: description: Information Disclosure
Affected products: vendor: MediaTek, Inc.
product: MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8185, MT8321, MT8385, MT8666, MT8673, MT8675, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797
Published: 2023-09-04T02:27:37.358Z
CVE-2023-20834 
In pda, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608514; Issue ID: ALPS07608514.
Problem types: description: Elevation of Privilege
Affected products: vendor: MediaTek, Inc.
product: MT6879, MT6886, MT6895, MT6983, MT6985, MT8175, MT8188, MT8195, MT8365, MT8781
Published: 2023-09-04T02:27:38.962Z
CVE-2023-20835 
In camsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07341261; Issue ID: ALPS07326570.
Problem types: description: Elevation of Privilege
Affected products: vendor: MediaTek, Inc.
product: MT6895, MT6983, MT8188, MT8195, MT8395, MT8781
Published: 2023-09-04T02:27:40.600Z
CVE-2023-20836 
In camsys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07505629; Issue ID: ALPS07505629.
Problem types: description: Information Disclosure
Affected products: vendor: MediaTek, Inc.
product: MT6762, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6877, MT6885, MT6893, MT8768, MT8788
Published: 2023-09-04T02:27:42.196Z
CVE-2023-20837 
In seninf, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07992786; Issue ID: ALPS07992786.
Problem types: description: Elevation of Privilege
Affected products: vendor: MediaTek, Inc.
product: MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6877, MT6885, MT6893, MT8185, MT8385, MT8781, MT8788, MT8789, MT8797
Published: 2023-09-04T02:27:43.828Z
CVE-2023-20838 
In imgsys, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07326455; Issue ID: ALPS07326418.
Problem types: description: Information Disclosure
Affected products: vendor: MediaTek, Inc.
product: MT2713, MT6895, MT6897, MT6983, MT8188, MT8195, MT8395, MT8673
Published: 2023-09-04T02:27:45.442Z
CVE-2023-20839 
In imgsys, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07326455; Issue ID: ALPS07326409.
Problem types: description: Information Disclosure
Affected products: vendor: MediaTek, Inc.
product: MT2713, MT6895, MT6897, MT6983, MT8188, MT8195, MT8395, MT8673
Published: 2023-09-04T02:27:47.001Z
CVE-2023-20840 
In imgsys, there is a possible out of bounds read and write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07326430; Issue ID: ALPS07326430.
Problem types: description: Elevation of Privilege
Affected products: vendor: MediaTek, Inc.
product: MT6895, MT6897, MT6983, MT8188, MT8195, MT8395
Published: 2023-09-04T02:27:48.606Z
CVE-2023-20841 
In imgsys, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07326455; Issue ID: ALPS07326441.
Problem types: description: Elevation of Privilege
Affected products: vendor: MediaTek, Inc.
product: MT2713, MT6895, MT6897, MT6983, MT8188, MT8195, MT8395, MT8673
Published: 2023-09-04T02:27:50.280Z
CVE-2023-20842 
In imgsys_cmdq, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07354259; Issue ID: ALPS07340477.
Problem types: description: Elevation of Privilege
Affected products: vendor: MediaTek, Inc.
product: MT2713, MT6895, MT6897, MT6983, MT8188, MT8195, MT8395, MT8781
Published: 2023-09-04T02:27:51.965Z
CVE-2023-20843 
In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07340119; Issue ID: ALPS07340119.
Problem types: description: Information Disclosure
Affected products: vendor: MediaTek, Inc.
product: MT6895, MT6897, MT6983, MT8188, MT8195, MT8395, MT8781
Published: 2023-09-04T02:27:53.712Z
CVE-2023-20844 
In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07354058; Issue ID: ALPS07340121.
Problem types: description: Information Disclosure
Affected products: vendor: MediaTek, Inc.
product: MT6895, MT6897, MT6983, MT8188, MT8195, MT8395, MT8781
Published: 2023-09-04T02:27:55.388Z
CVE-2023-20845 
In imgsys, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07197795; Issue ID: ALPS07340357.
Problem types: description: Information Disclosure
Affected products: vendor: MediaTek, Inc.
product: MT6895, MT6897, MT6983, MT8188, MT8195, MT8395
Published: 2023-09-04T02:27:57.105Z
CVE-2023-20846 
In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07354023; Issue ID: ALPS07340098.
Problem types: description: Information Disclosure
Affected products: vendor: MediaTek, Inc.
product: MT6895, MT6897, MT6983, MT8188, MT8195, MT8395, MT8781
Published: 2023-09-04T02:27:58.838Z
CVE-2023-20847 
In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local denial of service with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07354025; Issue ID: ALPS07340108.
Problem types: description: Denial of Service
Affected products: vendor: MediaTek, Inc.
product: MT6895, MT6897, MT6983, MT8188, MT8195, MT8395, MT8781
Published: 2023-09-04T02:28:00.486Z
CVE-2023-20848 
In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07340433; Issue ID: ALPS07340433.
Problem types: description: Elevation of Privilege
Affected products: vendor: MediaTek, Inc.
product: MT2713, MT6895, MT6897, MT6983, MT8188, MT8195, MT8395, MT8781
Published: 2023-09-04T02:28:02.171Z
CVE-2023-20849 
In imgsys_cmdq, there is a possible use after free due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07340433; Issue ID: ALPS07340350.
Problem types: description: Elevation of Privilege
Affected products: vendor: MediaTek, Inc.
product: MT2713, MT6895, MT6897, MT6983, MT8188, MT8195, MT8395, MT8781
Published: 2023-09-04T02:28:03.822Z
CVE-2023-20850 
In imgsys_cmdq, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07340433; Issue ID: ALPS07340381.
Problem types: description: Elevation of Privilege
Affected products: vendor: MediaTek, Inc.
product: MT2713, MT6895, MT6897, MT6983, MT8188, MT8195, MT8395, MT8781
Published: 2023-09-04T02:28:05.423Z
CVE-2023-20851 
In stc, there is a possible out of bounds read due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08048635; Issue ID: ALPS08048635.
Problem types: description: Elevation of Privilege
Affected products: vendor: MediaTek, Inc.
product: MT8188
Published: 2023-09-04T02:28:07.214Z
CVE-2023-20852 aEnrich a+HRD - Deserialization of Untrusted Data
aEnrich Technology a+HRD has a vulnerability of Deserialization of Untrusted Data within its MSMQ interpreter. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands to perform arbitrary system operation or disrupt service.
Problem types: cwe_id: CWE-502
description: CWE-502 Deserialization of Untrusted Data
Affected products: vendor: aEnrich
product: a+HRD
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
Published: 2023-04-27T00:00:00.000Z
CVE-2023-20853 aEnrich a+HRD - Deserialization of Untrusted Data
aEnrich Technology a+HRD has a vulnerability of Deserialization of Untrusted Data within its MSMQ asynchronized message process. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands to perform arbitrary system operation or disrupt service.
Problem types: cwe_id: CWE-502
description: CWE-502 Deserialization of Untrusted Data
Affected products: vendor: aEnrich
product: a+HRD
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
Published: 2023-04-27T00:00:00.000Z
CVE-2023-20854 
VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit this vulnerability to delete arbitrary files from the file system of the machine on which Workstation is installed.
Problem types: description: Arbitrary file deletion vulnerability
Affected products: vendor: n/a
product: VMware Workstation
Published: 2023-02-03T00:00:00.000Z
CVE-2023-20855 
VMware vRealize Orchestrator contains an XML External Entity (XXE) vulnerability. A malicious actor, with non-administrative access to vRealize Orchestrator, may be able to use specially crafted input to bypass XML parsing restrictions leading to access to sensitive information or possible escalation of privileges.
Problem types: description: XML External Entity (XXE) Vulnerability
Affected products: vendor: n/a
product: VMware vRealize Orchestrator, VMware vRealize Automation, VMware Cloud Foundation
Published: 2023-02-21T00:00:00.000Z
CVE-2023-20856 
VMware vRealize Operations (vROps) contains a CSRF bypass vulnerability. A malicious user could execute actions on the vROps platform on behalf of the authenticated victim user.
Problem types: description: VMware vRealize Operations (vROps) update addresses a CSRF bypass vulnerability
Affected products: vendor: n/a
product: VMware vRealize Operations (vROps)
Published: 2023-02-01T00:00:00.000Z
CVE-2023-20857 
VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted device, may be able to bypass the VMware Workspace ONE Content passcode.
Problem types: description: Passcode bypass vulnerability.
Affected products: vendor: n/a
product: VMware Workspace ONE Content
Published: 2023-02-28T00:00:00.000Z
CVE-2023-20858 
VMware Carbon Black App Control 8.7.x prior to 8.7.8, 8.8.x prior to 8.8.6, and 8.9.x.prior to 8.9.4 contain an injection vulnerability. A malicious actor with privileged access to the App Control administration console may be able to use specially crafted input allowing access to the underlying server operating system.
Problem types: description: Injection vulnerability
Affected products: vendor: n/a
product: VMware Carbon Black App Control
Published: 2023-02-21T00:00:00.000Z
CVE-2023-20859 
In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is vulnerable to insertion of sensitive information into a log file when it attempts to revoke a Vault batch token.
Problem types: description: Information disclosure vulnerability
Affected products: vendor: n/a
product: Spring Vault, Spring Cloud Vault, Spring Cloud Config
Published: 2023-03-23T00:00:00.000Z