stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2018-20961 (severity: CRITICAL, weakness: CWE-415)
In the Linux kernel before 4.16.4, a double free vulnerability in the f_midi_set_alt function of drivers/usb/gadget/function/f_midi.c in the f_midi driver may allow attackers to cause a denial of service or possibly have unspecified other impact.
CVE-2018-20962 (severity: MEDIUM, weakness: CWE-79)
The Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type.
CVE-2018-20963 (severity: MEDIUM, weakness: CWE-79)
The contact-form-to-email plugin before 1.2.66 for WordPress has XSS.
CVE-2018-20964 (severity: HIGH, weakness: CWE-352)
The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF.
CVE-2018-20965 (severity: MEDIUM, weakness: CWE-79)
The ultimate-member plugin before 2.0.4 for WordPress has XSS.
CVE-2018-20966 (severity: MEDIUM, weakness: CWE-79)
The woocommerce-jetpack plugin before 3.8.0 for WordPress has XSS in the Products Per Page feature.
CVE-2018-20967 (severity: HIGH, weakness: CWE-352)
The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF.
CVE-2018-20968 (severity: HIGH, weakness: CWE-352)
The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF.
CVE-2018-20969 (severity: HIGH, weakness: CWE-78)
do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter.
CVE-2018-20970 (severity: MEDIUM, weakness: CWE-79)
The pdf-print plugin before 2.0.3 for WordPress has multiple XSS issues.
CVE-2018-20971 (severity: HIGH, weakness: CWE-352)
The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan.
CVE-2018-20972 (severity: HIGH, weakness: CWE-352)
The companion-auto-update plugin before 3.2.1 for WordPress has CSRF.
CVE-2018-20973 (severity: CRITICAL, weakness: CWE-20)
The companion-auto-update plugin before 3.2.1 for WordPress has local file inclusion.
CVE-2018-20974 (severity: HIGH, weakness: CWE-352)
The js-jobs plugin before 1.0.7 for WordPress has CSRF.
CVE-2018-20975 (severity: MEDIUM, weakness: CWE-79)
Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb.
CVE-2018-20976 (severity: HIGH, weakness: CWE-416)
An issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18. A use after free exists, related to xfs_fs_fill_super failure.
CVE-2018-20977 (severity: MEDIUM, weakness: CWE-79)
The all-in-one-schemaorg-rich-snippets plugin before 1.5.0 for WordPress has XSS on the settings page.
CVE-2018-20978 (severity: MEDIUM, weakness: CWE-79)
The wp-all-import plugin before 3.4.7 for WordPress has XSS.
CVE-2018-20979 (severity: CRITICAL, weakness: NVD-CWE-Other)
The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capability_type mishandling in register_post_type.
CVE-2018-20980 (severity: HIGH, weakness: CWE-20)
The ninja-forms plugin before 3.2.15 for WordPress has parameter tampering.
CVE-2018-20981 (severity: CRITICAL, weakness: CWE-20)
The ninja-forms plugin before 3.3.9 for WordPress has insufficient restrictions on submission-data retrieval during Export Personal Data requests.
CVE-2018-20982 (severity: MEDIUM, weakness: CWE-79)
The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant admin submenu screens.
CVE-2018-20983 (severity: MEDIUM, weakness: CWE-79)
The wp-retina-2x plugin before 5.2.3 for WordPress has XSS.
CVE-2018-20984 (severity: CRITICAL, weakness: CWE-502)
The patreon-connect plugin before 1.2.2 for WordPress has Object Injection.
CVE-2018-20985 (severity: CRITICAL, weakness: CWE-20)
The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec.
CVE-2018-20986 (severity: MEDIUM, weakness: CWE-79)
The advanced-custom-fields (aka Elliot Condon Advanced Custom Fields) plugin before 5.7.8 for WordPress has XSS by authors.
CVE-2018-20987 (severity: CRITICAL, weakness: CWE-502)
The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection.
CVE-2018-20988 (severity: HIGH, weakness: CWE-94)
The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation.
CVE-2018-20989 (severity: HIGH, weakness: CWE-191)
An issue was discovered in the untrusted crate before 0.6.2 for Rust. Error handling can trigger an integer underflow and panic.
CVE-2018-20990 (severity: HIGH, weakness: CWE-59)
An issue was discovered in the tar crate before 0.4.16 for Rust. Arbitrary file overwrite can occur via a symlink or hardlink in a TAR archive.
CVE-2018-20991 (severity: CRITICAL, weakness: CWE-415)
An issue was discovered in the smallvec crate before 0.6.3 for Rust. The Iterator implementation mishandles destructors, leading to a double free.
CVE-2018-20992 (severity: MEDIUM, weakness: CWE-908)
An issue was discovered in the claxon crate before 0.4.1 for Rust. Uninitialized memory can be exposed because certain decode buffer sizes are mishandled.
CVE-2018-20993 (severity: HIGH, weakness: CWE-674)
An issue was discovered in the yaml-rust crate before 0.4.1 for Rust. There is uncontrolled recursion during deserialization.
CVE-2018-20994 (severity: HIGH, weakness: CWE-674)
An issue was discovered in the trust-dns-proto crate before 0.5.0-alpha.3 for Rust. There is infinite recursion because DNS message compression is mishandled.
CVE-2018-20995 (severity: CRITICAL, weakness: CWE-119)
An issue was discovered in the slice-deque crate before 0.1.16 for Rust. move_head_unchecked allows memory corruption because deque updates are mishandled.
CVE-2018-20996 (severity: CRITICAL, weakness: CWE-415)
An issue was discovered in the crossbeam crate before 0.4.1 for Rust. There is a double free because of destructor mishandling.
CVE-2018-20997 (severity: CRITICAL, weakness: CWE-416)
An issue was discovered in the openssl crate before 0.10.9 for Rust. A use-after-free occurs in CMS Signing.
CVE-2018-20998 (severity: CRITICAL, weakness: CWE-119)
An issue was discovered in the arrayfire crate before 3.6.0 for Rust. Addition of the repr() attribute to an enum is mishandled, leading to memory corruption.
CVE-2018-20999 (severity: HIGH, weakness: CWE-682)
An issue was discovered in the orion crate before 0.11.2 for Rust. reset() calls cause incorrect results.
CVE-2018-21000 (severity: CRITICAL, weakness: CWE-119)
An issue was discovered in the safe-transmute crate before 0.10.1 for Rust. A constructor's arguments are in the wrong order, causing heap memory corruption.
CVE-2018-21001 (severity: MEDIUM, weakness: CWE-79)
The anycomment plugin before 0.0.33 for WordPress has XSS.
CVE-2018-21002 (severity: HIGH, weakness: CWE-352)
The js-support-ticket plugin before 2.0.6 for WordPress has CSRF.
CVE-2018-21003 (severity: CRITICAL, weakness: CWE-89)
The buddyforms plugin before 2.2.8 for WordPress has SQL injection.
CVE-2018-21004 (severity: CRITICAL, weakness: CWE-89)
The rsvpmaker plugin before 5.6.4 for WordPress has SQL injection.
CVE-2018-21005 (severity: CRITICAL, weakness: CWE-94)
The bbp-move-topics plugin before 1.1.6 for WordPress has code injection.
CVE-2018-21006 (severity: HIGH, weakness: CWE-352)
The bbp-move-topics plugin before 1.1.6 for WordPress has CSRF.
CVE-2018-21007 (severity: CRITICAL, weakness: CWE-284)
The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders inside uploads.
CVE-2018-21008 (severity: MEDIUM, weakness: CWE-416)
An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c.
CVE-2018-21009 (severity: HIGH, weakness: CWE-190)
Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.
CVE-2018-21010 (severity: HIGH, weakness: CWE-787)
OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.
CVE-2018-21011 (severity: HIGH, weakness: CWE-200)
The charitable plugin before 1.5.14 for WordPress has unauthorized access to user and donation details.
CVE-2018-21012 (severity: MEDIUM, weakness: CWE-79)
The cf7-invisible-recaptcha plugin before 1.3.2 for WordPress has XSS.
CVE-2018-21013 (severity: CRITICAL, weakness: CWE-269)
The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated by allowing new administrator accounts via vectors involving xmlPath to wp-admin/admin-ajax.php.
CVE-2018-21014 (severity: MEDIUM, weakness: CWE-79)
The buddyboss-media plugin through 3.2.3 for WordPress has stored XSS.
CVE-2018-21015 (severity: MEDIUM, weakness: CWE-476)
AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. There is "cfg_new->AVCLevelIndication = cfg->AVCLevelIndication;" but cfg could be NULL.
CVE-2018-21016 (severity: MEDIUM, weakness: CWE-125)
audio_sample_entry_AddBox() at isomedia/box_code_base.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
CVE-2018-21017 (severity: MEDIUM, weakness: CWE-401)
GPAC 0.7.1 has a memory leak in dinf_Read in isomedia/box_code_base.c.
CVE-2018-21018 (severity: CRITICAL, weakness: CWE-613)
Mastodon before 2.6.3 mishandles timeouts of incompletely established sessions.
CVE-2018-21019 (severity: HIGH, weakness: CWE-200)
Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via components/api.py.
CVE-2018-21020 (severity: HIGH, weakness: CWE-20)
In very rare cases, a PHP type juggling vulnerability in centreonAuth.class.php in Centreon Web before 2.8.27 allows attackers to bypass authentication mechanisms in place.
CVE-2018-21021 (severity: HIGH, weakness: CWE-89)
img_gantt.php in Centreon Web before 2.8.27 allows attackers to perform SQL injections via the host_id parameter.
CVE-2018-21022 (severity: HIGH, weakness: CWE-89)
makeXML_ListServices.php in Centreon Web before 2.8.28 allows attackers to perform SQL injections via the host_id parameter.
CVE-2018-21023 (severity: HIGH, weakness: CWE-94)
getStats.php in Centreon Web before 2.8.28 allows authenticated attackers to execute arbitrary code via the ns_id parameter.
CVE-2018-21024 (severity: CRITICAL, weakness: CWE-434)
licenseUpload.php in Centreon Web before 2.8.27 allows attackers to upload arbitrary files via a POST request.
CVE-2018-21025 (severity: CRITICAL, weakness: CWE-269)
In Centreon VM through 19.04.3, centreon-backup.pl allows attackers to become root via a crafted script, due to incorrect rights of sourced configuration files.
CVE-2018-21026 (severity: HIGH, weakness: CWE-200)
A vulnerability in Hitachi Command Suite 7.x and 8.x before 8.6.5-00 allows an unauthenticated remote user to read internal information.
CVE-2018-21027 (severity: CRITICAL, weakness: CWE-119)
Boa through 0.94.14rc21 allows remote attackers to trigger an out-of-memory (OOM) condition because malloc is mishandled.
CVE-2018-21028 (severity: HIGH, weakness: CWE-772)
Boa through 0.94.14rc21 allows remote attackers to trigger a memory leak because of missing calls to the free function.
CVE-2018-21029 (severity: CRITICAL, weakness: CWE-295)
systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication (SNI) is not sent, and there is no hostname validation with the GnuTLS backend. NOTE: This has been disputed by the developer as not a vulnerability since hostname validation does not have anything to do with this issue (i.e. there is no hostname to be sent)
CVE-2018-21030 (severity: MEDIUM, weakness: CWE-79)
Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin. Thus, for example, an XSS payload can be placed in an SVG document.
CVE-2018-21031 (severity: MEDIUM, weakness: CWE-522)
Tautulli versions 2.1.38 and below allows remote attackers to bypass intended access control in Plex Media Server because the X-Plex-Token is mishandled and can be retrieved from Tautulli. NOTE: Initially, this id was associated with Plex Media Server 1.18.2.2029-36236cc4c as the affected product and version. Further research indicated that Tautulli is the correct affected product.
CVE-2018-21032 (severity: MEDIUM, weakness: CWE-209)
A vulnerability in Hitachi Command Suite prior to 8.7.1-00 and Hitachi Automation Director prior to 8.5.0-00 allow authenticated remote users to expose technical information through error messages. Hitachi Command Suite includes Hitachi Device Manager and Hitachi Compute Systems Manager.
CVE-2018-21033 (severity: MEDIUM, weakness: CWE-20)
A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director prior to 8.6.2-00 and Hitachi Infrastructure Analytics Advisor prior to 4.2.0-00 allow authenticated remote users to load an arbitrary Cascading Style Sheets (CSS) token sequence. Hitachi Command Suite includes Hitachi Device Manager, Hitachi Tiered Storage Manager, Hitachi Replication Manager, Hitachi Tuning Manager, Hitachi Global Link Manager and Hitachi Compute Systems Manager.
CVE-2018-21034 (severity: MEDIUM, weakness: CWE-200)
In Argo versions prior to v1.5.0-rc1, it was possible for authenticated Argo users to submit API calls to retrieve secrets and other manifests which were stored within git.
CVE-2018-21035 (severity: HIGH, weakness: CWE-770)
In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service (memory consumption).
CVE-2018-21036 (severity: HIGH, weakness: CWE-20)
Sails.js before v1.0.0-46 allows attackers to cause a denial of service with a single request because there is no error handler in sails-hook-sockets to handle an empty pathname in a WebSocket request.
CVE-2018-21037 (severity: HIGH, weakness: CWE-352)
Subrion CMS 4.1.5 (and possibly earlier versions) allow CSRF to change the administrator password via the panel/members/edit/1 URI.
CVE-2018-21038 (severity: CRITICAL, weakness: CWE-287)
An issue was discovered on Samsung mobile devices with N(7.x) software. The Secure Folder app's startup logic allows authentication bypass. The Samsung ID is SVE-2018-11628 (December 2018).
CVE-2018-21039 (severity: HIGH, weakness: CWE-863)
An issue was discovered on Samsung mobile devices with N(7.0) software. With the Location permission for the compass feature in Quick Tools (aka QuickTools), an attacker can bypass the lockscreen. The Samsung ID is SVE-2018-12053 (December 2018).
CVE-2018-21040 (severity: HIGH, weakness: CWE-362)
An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 9810 chipsets) software. There is a race condition with a resultant use-after-free in the g2d driver. The Samsung ID is SVE-2018-12959 (December 2018).
CVE-2018-21041 (severity: HIGH, weakness: CWE-306)
An issue was discovered on Samsung mobile devices with O(8.x) software. Access to Gallery in the Secure Folder can occur without authentication. The Samsung ID is SVE-2018-13057 (December 2018).
CVE-2018-21042 (severity: CRITICAL, weakness: CWE-862)
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. Dual Messenger allows installation of an arbitrary APK with resultant privileged code execution. The Samsung ID is SVE-2018-13299 (December 2018).
CVE-2018-21043 (severity: LOW, weakness: CWE-200)
An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 9810 chipsets) software. There is information disclosure about a kernel pointer in the g2d_drv driver because of logging. The Samsung ID is SVE-2018-13035 (December 2018).
CVE-2018-21044 (severity: CRITICAL, weakness: CWE-120)
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.0) software. The sem Trustlet has a buffer overflow that leads to arbitrary TEE code execution. The Samsung IDs are SVE-2018-13230, SVE-2018-13231, SVE-2018-13232, SVE-2018-13233 (December 2018).
CVE-2018-21045 (severity: MEDIUM, weakness: CWE-200)
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. There is Clipboard access in the lockscreen state via a copy-and-paste action. The Samsung ID is SVE-2018-13381 (December 2018).
CVE-2018-21046 (severity: LOW, weakness: CWE-862)
An issue was discovered on Samsung mobile devices with O(8.x) software. There is clipboard Data Exposure via the Emergency Dialer upon connecting a USB device. The Samsung ID is SVE-2018-12911 (November 2018).
CVE-2018-21047 (severity: HIGH, weakness: CWE-862)
An issue was discovered on Samsung mobile devices with O(8.x) software. There is a Factory Reset Protection (FRP) bypass via the voice assistant because Internet access begins before the Setup Wizard finishes. The Samsung ID is SVE-2018-12894 (November 2018).
CVE-2018-21048 (severity: MEDIUM, weakness: CWE-200)
An issue was discovered on Samsung mobile devices with O(8.x) software. There is a Notification leak on a locked device in Standalone Dex mode. The Samsung ID is SVE-2018-12925 (November 2018).
CVE-2018-21049 (severity: CRITICAL, weakness: CWE-787)
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.X) (Exynos chipsets) software. There is an arbitrary memory write in a Trustlet because a secure driver allows access to sensitive APIs. The Samsung ID is SVE-2018-12881 (November 2018).
CVE-2018-21050 (severity: CRITICAL, weakness: CWE-120)
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.X) (Exynos chipsets) software. There is a Buffer overflow in the esecomm Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2018-12852 (October 2018).
CVE-2018-21051 (severity: CRITICAL, weakness: CWE-74)
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) (Exynos chipsets) software. There is an invalid free in the fingerprint Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2018-12853 (October 2018).
CVE-2018-21052 (severity: CRITICAL, weakness: CWE-119)
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.X) (Exynos chipsets) software. There is incorrect usage of shared memory in the vaultkeeper Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2018-12855 (October 2018).
CVE-2018-21053 (severity: MEDIUM, weakness: CWE-200)
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. There is Clipboard access in the lockscreen state via a physical keyboard. The Samsung ID is SVE-2018-12684 (October 2018).
CVE-2018-21054 (severity: CRITICAL, weakness: CWE-190)
An issue was discovered on Samsung mobile devices with M(6.0), N(7.x) and O(8.x) except exynos9610/9820 in all Platforms, M(6.0) except MSM8909 SC77xx/9830 exynos3470/5420, N(7.0) except MSM8939, N(7.1) except MSM8996 SDM6xx/M6737T software. There is an integer underflow with a resultant buffer overflow in eCryptFS. The Samsung ID is SVE-2017-11857 (September 2018).
CVE-2018-21055 (severity: CRITICAL, weakness: CWE-20)
An issue was discovered on Samsung mobile devices with N(7.0) (Qualcomm models using MSM8996 chipsets) software. A device can be rooted with a custom image to execute arbitrary scripts in the INIT context. The Samsung ID is SVE-2018-11940 (September 2018).
CVE-2018-21056 (severity: MEDIUM, weakness: CWE-200)
An issue was discovered on Samsung mobile devices with O(8.x) software. The Smartwatch displays Secure Folder Notification content. The Samsung ID is SVE-2018-12458 (September 2018).
CVE-2018-21057 (severity: CRITICAL, weakness: CWE-787)
An issue was discovered on Samsung mobile devices with N(7.x) O(8.x, and P(9.0) (Exynos chipsets) software. There is a stack-based buffer overflow in the Shannon Baseband. The Samsung ID is SVE-2018-12757 (September 2018).
CVE-2018-21058 (severity: CRITICAL, weakness: CWE-327)
An issue was discovered on Samsung mobile devices with N(7.0), O(8.0) (exynos7420 or Exynos 8890/8996 chipsets) software. Cache attacks can occur against the Keymaster AES-GCM implementation because T-Tables are used; the Cryptography Extension (CE) is not used. The Samsung ID is SVE-2018-12761 (September 2018).
CVE-2018-21059 (severity: HIGH, weakness: CWE-200)
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. There is Clipboard content visibility in the locked state via the emergency contact picker. The Samsung ID is SVE-2018-11806 (September 2018).
CVE-2018-21060 (severity: HIGH, weakness: CWE-200)
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. There is a Keyboard learned words leak in the locked state via the emergency contact picker. The Samsung IDs are SVE-2018-11989, SVE-2018-11990 (September 2018).
CVE-2018-21061 (severity: MEDIUM, weakness: CWE-276)
An issue was discovered on Samsung mobile devices with N(7.1) and O(8.x) software. A fake charger can execute critical functions in the locked state. The Samsung ID is SVE-2016-6341 (August 2018).
CVE-2018-21062 (severity: MEDIUM, weakness: CWE-287)
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. When biometric authentication is disabled, an attacker can view Streams content (e.g., a Gallery slideshow) of a locked Secure Folder via a connection to an external device. The Samsung ID is SVE-2018-11766 (August 2018).
CVE-2018-21063 (severity: CRITICAL, weakness: NVD-CWE-Other)
An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.x) (Exynos chipsets) software. Keymaster has an architectural problem because tlApi in TEE is not properly protected. The Samsung ID is SVE-2018-11792 (August 2018).
CVE-2018-21064 (severity: CRITICAL, weakness: CWE-120)
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. There is an array overflow in a driver's input booster. The Samsung ID is SVE-2017-11816 (August 2018).
CVE-2018-21065 (severity: CRITICAL, weakness: CWE-191)
An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.x) software. There is an integer underflow in eCryptFS because of a missing size check. The Samsung ID is SVE-2017-11855 (August 2018).
CVE-2018-21066 (severity: CRITICAL, weakness: CWE-120)
An issue was discovered on Samsung mobile devices with M(6.0) (Exynos or MediaTek chipsets) software. There is a buffer overflow in a Trustlet that can cause memory corruption. The Samsung ID is SVE-2018-11599 (July 2018).
CVE-2018-21067 (severity: MEDIUM, weakness: CWE-200)
An issue was discovered on Samsung mobile devices with M(6.0) software. There is an information disclosure in a Trustlet because an address is logged. The Samsung ID is SVE-2018-11600 (July 2018).
CVE-2018-21068 (severity: MEDIUM, weakness: CWE-20)
An issue was discovered on Samsung mobile devices with O(8.0) software. Execution of an application in a locked Secure Folder can occur without a password via a split screen. The Samsung ID is SVE-2018-11669 (July 2018).
CVE-2018-21069 (severity: HIGH, weakness: CWE-200)
An issue was discovered on Samsung mobile devices with N(7.x) (MediaTek chipsets) software. There is information disclosure (of kernel stack memory) in a MediaTek driver. The Samsung ID is SVE-2018-11852 (July 2018).
CVE-2018-21070 (severity: HIGH, weakness: CWE-354)
An issue was discovered on Samsung mobile devices with N(7.x), O(8.0) devices (MSM8998 or SDM845 chipsets) software. An attacker can bypass Secure Boot and obtain root access because of a missing Bootloader integrity check. The Samsung ID is SVE-2018-11552 (May 2018).
CVE-2018-21071 (severity: HIGH, weakness: CWE-200)
An issue was discovered on Samsung mobile devices with M(6.0) software. Because of an unprotected intent, an attacker can read arbitrary files and emails, and take over an email account. The Samsung ID is SVE-2018-11633 (May 2018).