Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
gnu.org/cgit/freetype/freetype2.git/commit/?id=0e2f5d518c60e2978f26400d110eff178fa7e3c3 - https://security.gentoo.org/glsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://www.ubuntu.com/usn/USN-2739-1 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html - http://advisories.mageia.org/MGASA-2015-0083.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://rhn.redhat.com/errata/RHSA-2015-0696.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:055 - http://www.ubuntu.com/usn/USN-2510-1 - http://code.google.com/p/google-security-research/issues/detail?id=157
CVE ID: CVE-2014-9672 State: PUBLISHED Published: 2015-02-08T11:00:00 Last Updated: 2024-08-06T13:55:02.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the parse_fond function in base/ftmac.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information from process memory via a crafted FOND resource in a Mac font file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134395/FreeType-2.5.3-Mac-FOND-Resource-Parsing-Out-Of-Bounds-Read-From-Stack.html - http://www.debian.org/security/2015/dsa-3188 - https://security.gentoo.org/glsa/20150
t-Of-Bounds-Read-From-Stack.html - http://www.debian.org/security/2015/dsa-3188 - https://security.gentoo.org/glsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://www.ubuntu.com/usn/USN-2739-1 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html - http://advisories.mageia.org/MGASA-2015-0083.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:055 - http://code.google.com/p/google-security-research/issues/detail?id=155 - http://www.ubuntu.com/usn/USN-2510-1 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=18a8f0d9943369449bc4de92d411c78fb08d616c
CVE ID: CVE-2014-9673 State: PUBLISHED Published: 2015-02-08T11:00:00 Last Updated: 2024-08-06T13:55:04.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3188 - http://code.google.com/p/google-security-research/issues/detail?id=154 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=35252ae9aa1dd9343e9f4884e9
rch/issues/detail?id=154 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=35252ae9aa1dd9343e9f4884e9ddb1fee10ef415 - https://security.gentoo.org/glsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://www.ubuntu.com/usn/USN-2739-1 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html - http://advisories.mageia.org/MGASA-2015-0083.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://rhn.redhat.com/errata/RHSA-2015-0696.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:055 - http://www.ubuntu.com/usn/USN-2510-1
CVE ID: CVE-2014-9674 State: PUBLISHED Published: 2015-02-08T11:00:00 Last Updated: 2024-08-06T13:55:04.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with adding to length values without validating the original values, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font. Additional Analyst Notes: - CVE Program Container: References: - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=240c94a185cd8dae7d03059abec8a5662c35ecd3 - http://git.savannah.gnu.or
nah.gnu.org/cgit/freetype/freetype2.git/commit/?id=240c94a185cd8dae7d03059abec8a5662c35ecd3 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=cd4a5a26e591d01494567df9dec7f72d59551f6e - https://security.gentoo.org/glsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://www.ubuntu.com/usn/USN-2739-1 - http://www.debian.org/security/2016/dsa-3461 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html - http://advisories.mageia.org/MGASA-2015-0083.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://rhn.redhat.com/errata/RHSA-2015-0696.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/1
://rhn.redhat.com/errata/RHSA-2015-0696.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:055 - http://code.google.com/p/google-security-research/issues/detail?id=153 - http://www.ubuntu.com/usn/USN-2510-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html
CVE ID: CVE-2014-9675 State: PUBLISHED Published: 2015-02-08T11:00:00 Last Updated: 2024-08-06T13:55:04.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3188 - http://code.google.com/p/google-security-research/issues/detail?id=151 - https://security.gentoo.org/glsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://www.ubu
ues/detail?id=151 - https://security.gentoo.org/glsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://www.ubuntu.com/usn/USN-2739-1 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html - http://advisories.mageia.org/MGASA-2015-0083.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://rhn.redhat.com/errata/RHSA-2015-0696.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:055 - http://www.ubuntu.com/usn/USN-2510-1 - https://source.android.com/security/bulletin/2016-11-01.html - http://lists.fedoraproject.org/pipermail/package-a
10-1 - https://source.android.com/security/bulletin/2016-11-01.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=2c4832d30939b45c05757f0a05128ce64c4cacc7
CVE ID: CVE-2014-9676 State: PUBLISHED Published: 2015-02-28T01:00:00 Last Updated: 2024-08-06T13:55:04.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: The seg_write_packet function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory location, which allows remote attackers to cause a denial of service ("invalid memory handler") and possibly execute arbitrary code via a crafted video that triggers a use after free. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2015/q1/38 - https://security.gentoo.org/glsa/201606-09
CVE ID: CVE-2014-9677 State: PUBLISHED Published: 2017-10-17T14:00:00 Last Updated: 2024-08-06T13:55:04.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the Swfile parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/02/12/11 - http://www.theregister.co.uk/2014/12/23/wikileaks_pdf_viewer_vuln/
CVE ID: CVE-2014-9678 State: PUBLISHED Published: 2017-10-17T14:00:00 Last Updated: 2024-08-06T13:55:04.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to conduct content-spoofing attacks via the Swfile parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/02/12/11 - http://www.theregister.co.uk/2014/12/23/wikileaks_pdf_viewer_vuln/
CVE ID: CVE-2014-9679 State: PUBLISHED Published: 2015-02-19T15:00:00 Last Updated: 2024-08-06T13:55:04.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2 allows remote attackers to have unspecified impact via a malformed compressed raster file, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1123.html - https://www.cups.org/str.php?L4551 - http://www.openwall.com/lists/oss-security/2015/02/10/15 - http://www.ubuntu.com/usn/USN-2520-1 - http://www.oracle.com/technetwork/topics/security/bulletinapr
ity/2015/02/10/15 - http://www.ubuntu.com/usn/USN-2520-1 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2015-02/msg00098.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:049 - https://security.gentoo.org/glsa/201607-06 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150177.html - http://www.securitytracker.com/id/1031776 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150171.html - http://www.debian.org/security/2015/dsa-3172 - http://advisories.mageia.org/MGASA-2015-0067.html - http://www.openwall.com/lists/oss-security/2015/02/12/12 - http://w
http://advisories.mageia.org/MGASA-2015-0067.html - http://www.openwall.com/lists/oss-security/2015/02/12/12 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:108 - http://www.securityfocus.com/bid/72594
CVE ID: CVE-2014-9680 State: PUBLISHED Published: 2017-04-24T06:12:00 Last Updated: 2024-08-06T13:55:04.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arbitrary files for read access (but not view file contents) by running a program within an sudo session, as demonstrated by interfering with terminal output, discarding kernel-log messages, or repositioning tape drives. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201504-02 - http://www.securitytracker.com/id/1033158 - http://openwall.com/
erences: - https://security.gentoo.org/glsa/201504-02 - http://www.securitytracker.com/id/1033158 - http://openwall.com/lists/oss-security/2014/10/15/24 - http://www.sudo.ws/alerts/tz.html - http://rhn.redhat.com/errata/RHSA-2015-1409.html
CVE ID: CVE-2014-9681 State: REJECTED Published: 2017-04-23T23:00:00 Last Updated: 2017-04-23T22:57:01 Description: No description available.
CVE ID: CVE-2014-9682 State: PUBLISHED Published: 2015-02-28T01:00:00 Last Updated: 2024-08-06T13:55:04.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/skoranga/node-dns-sync/issues/1 - http://www.openwall.com/lists/oss-security/2014/11/11/6 - https://github.com/skoranga/node-dns-sync/commit/d9abaae384b198db1095735ad9c1c73d7b890a0d
CVE ID: CVE-2014-9683 State: PUBLISHED Published: 2015-03-03T11:00:00 Last Updated: 2024-08-06T13:55:04.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the ecryptfs_decode_from_filename function in fs/ecryptfs/crypto.c in the eCryptfs subsystem in the Linux kernel before 3.18.2 allows local users to cause a denial of service (buffer overflow and system crash) or possibly gain privileges via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=942080643bce061c3dd9d5718d3b745dcb39a8bc - http://www.ubuntu.com/usn/USN-2515-1 - http://www.debian.org/s
3Ba=commit%3Bh=942080643bce061c3dd9d5718d3b745dcb39a8bc - http://www.ubuntu.com/usn/USN-2515-1 - http://www.debian.org/security/2015/dsa-3170 - http://www.ubuntu.com/usn/USN-2542-1 - https://github.com/torvalds/linux/commit/942080643bce061c3dd9d5718d3b745dcb39a8bc - http://www.ubuntu.com/usn/USN-2541-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.ubuntu.com/usn/USN-2518-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:058 - http://www.openwall.com/lists/oss-security/2015/02/17/9 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.2 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html - http:
/linux/kernel/v3.x/ChangeLog-3.18.2 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html - http://www.securityfocus.com/bid/72643 - http://www.ubuntu.com/usn/USN-2517-1 - http://www.ubuntu.com/usn/USN-2516-1 - http://www.securitytracker.com/id/1031860 - http://rhn.redhat.com/errata/RHSA-2015-1272.html - https://bugzilla.redhat.com/show_bug.cgi?id=1193830
CVE ID: CVE-2014-9684 State: PUBLISHED Published: 2015-02-24T15:00:00 Last Updated: 2024-08-06T13:55:04.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service (disk consumption) by creating a large number of images using the task v2 API and then deleting them before the uploads finish, a different vulnerability than CVE-2015-1881. Additional Analyst Notes: - CVE Program Container: References: - http://lists.openstack.org/pipermail/openstack-announce/2015-February/000336.html - https://bugs.launchpad.net/g
nces: - http://lists.openstack.org/pipermail/openstack-announce/2015-February/000336.html - https://bugs.launchpad.net/glance/+bug/1371118 - http://rhn.redhat.com/errata/RHSA-2015-0938.html - http://www.securityfocus.com/bid/72692
CVE ID: CVE-2014-9685 State: PUBLISHED Published: 2015-02-25T22:00:00 Last Updated: 2024-08-06T13:55:04.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Vanilla Forums before 2.0.18.13 and 2.1.x before 2.1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://vanillaforums.org/discussion/27540/vanilla-2-1-1-important-security-bug-release - http://www.securitytracker.com/id/1031822 - http://vanillaforums.org/discussion/27541/vanilla-2-0-18-12-security-release-for-old-2-0-18-installs
CVE ID: CVE-2014-9686 State: PUBLISHED Published: 2017-09-27T19:00:00 Last Updated: 2024-08-06T13:55:04.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Googlemaps plugin 3.2 and earlier for Joomla! allows remote attackers with control of a sub-domain belonging to a victim domain to cause a denial of service via the 'url' parameter to plugin_googlemap3_kmlprxy.php. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7428. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Feb/53 - http://websecurity.com.ua/6987/ - http://www.openwall.com/lists/oss-security/2015/02/26/11
CVE ID: CVE-2014-9687 State: PUBLISHED Published: 2015-03-16T14:00:00 Last Updated: 2024-08-06T13:55:04.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to obtain user passwords via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-01/msg00118.html - http://www.openwall.com/lists/oss-security/2015/02/28/3 - http://www.openwall.com/lists/oss-security/2015/02/17/7 - http://www.openwall.com/lists/oss-security/2015/02/10/16 - https://bugs.launchpad.net/ecryptfs/+bug/906550 - http://www
http://www.openwall.com/lists/oss-security/2015/02/10/16 - https://bugs.launchpad.net/ecryptfs/+bug/906550 - http://www.ubuntu.com/usn/USN-2524-1
CVE ID: CVE-2014-9688 State: PUBLISHED Published: 2015-03-05T16:00:00Z Last Updated: 2024-09-16T20:06:50.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Ninja Forms plugin before 2.8.10 for WordPress has unknown impact and remote attack vectors related to admin users. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/ninja-forms/changelog/
CVE ID: CVE-2014-9689 State: PUBLISHED Published: 2015-03-09T00:00:00 Last Updated: 2024-08-06T13:55:04.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: content/renderer/device_sensors/device_orientation_event_pump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate gyroscope data, which makes it easier for remote attackers to obtain speech signals from a device's physical environment via a crafted web site that listens for ondeviceorientation events, a different vulnerability than CVE-2015-1231. Additional Analyst Notes: - CVE Program Container: References: - https://crypto.stanford.edu/gyrophone/files/gyromic.pdf - http://googlechromereleas
CVE Program Container: References: - https://crypto.stanford.edu/gyrophone/files/gyromic.pdf - http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=421691 - https://www.usenix.org/conference/usenixsecurity14/technical-sessions/presentation/michalevsky - https://code.google.com/p/chromium/issues/detail?id=463349
CVE ID: CVE-2014-9690 State: PUBLISHED Published: 2017-04-02T20:00:00 Last Updated: 2024-08-06T13:55:04.314Z Vendors: n/a Products: WS318 V100R001C01B022 and earlier versions Problem Types: WPS PIN Offline Brute Force Crack Description: Huawei home gateways WS318 with software V100R001C01B022 and earlier versions are affected by the PIN offline brute force cracking vulnerability of the WPS protocol because the random number generator (RNG) used in the supplier's solution is not random enough. As a result, brute force cracking the PIN code is easier. After an attacker cracks the PIN, the attacker can access the Internet via the cracked device. Additional Analyst Notes: - CVE Program Container
the PIN, the attacker can access the Internet via the cracked device. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/hw-408091
CVE ID: CVE-2014-9691 State: PUBLISHED Published: 2017-04-02T20:00:00 Last Updated: 2024-08-06T13:55:04.381Z Vendors: n/a Products: Tecal RH1288 V2,Tecal RH2265 V2,Tecal RH2285 V2,Tecal RH2265 V2,Tecal RH2285H V2,Tecal RH2268 V2,Tecal RH2288 V2,Tecal RH2288H V2,Tecal RH2485 V2,Tecal RH5885 V2,Tecal RH5885 V3,Tecal RH5885H V3,Tecal XH310 V2,Tecal XH311 V2,Tecal XH320 V2,Tecal XH621 V2,Tecal DH310 V2,Tecal DH320 V2,Tecal DH620 V2,Tecal DH621 V2,Tecal DH628 V2,Tecal BH620 V2,Tecal BH621 V2,Tecal BH622 V2,Tecal BH640 V2,Tecal CH121,Tecal CH140,Tecal CH220,Tecal CH221,Tecal CH222,Tecal CH240,Tecal CH242,Tecal CH242 V3, Tecal RH1288 V2 V100R002C00SPC107 and earlier versions,Tecal RH2265 V2 V100R00
2,Tecal CH240,Tecal CH242,Tecal CH242 V3, Tecal RH1288 V2 V100R002C00SPC107 and earlier versions,Tecal RH2265 V2 V100R002C00,Tecal RH2285 V2 V100R002C00SPC115 and earlier versions,Tecal RH2265 V2 V100R002C00,Tecal RH2285H V2 V100R002C00SPC111 and earlier versions,Tecal RH2268 V2 V100R002C00,Tecal RH2288 V2 V100R002C00SPC117 and earlier versions,Tecal RH2288H V2 V100R002C00SPC115 and earlier versions,Tecal RH2485 V2 V100R002C00SPC502 and earlier versions,Tecal RH5885 V2 V100R001C02SPC109 and earlier versions,Tecal RH5885 V3 V100R003C01SPC102 and earlier versions,Tecal RH5885H V3 V100R003C00SPC102 and earlier versions,Tecal XH310 V2 V100R001C00SPC110 and earlier versions,Tecal XH311 V2 V100R00
H V3 V100R003C00SPC102 and earlier versions,Tecal XH310 V2 V100R001C00SPC110 and earlier versions,Tecal XH311 V2 V100R001C00SPC110 and earlier versions,Tecal XH320 V2 V100R001C00SPC110 and earlier versions,Tecal XH621 V2 V100R001C00SPC106 and earlier versions,Tecal DH310 V2 V100R001C00SPC110 and earlier versions,Tecal DH320 V2 V100R001C00SPC106 and earlier versions,Tecal DH620 V2 V100R001C00SPC106 and earlier versions,Tecal DH621 V2 V100R001C00SPC107 and earlier versions,Tecal DH628 V2 V100R001C00SPC107 and earlier versions,Tecal BH620 V2 V100R002C00SPC107 and earlier versions,Tecal BH621 V2 V100R002C00SPC106 and earlier versions,Tecal BH622 V2 V100R002C00SPC110 ?and earlier versions,Tecal B
ons,Tecal BH621 V2 V100R002C00SPC106 and earlier versions,Tecal BH622 V2 V100R002C00SPC110 ?and earlier versions,Tecal BH640 V2 V100R002C00SPC108 and earlier versions,Tecal CH121 V100R001C00SPC180 and earlier versions,Tecal CH140 V100R001C00SPC110 and earlier versions,Tecal CH220 V100R001C00SPC180 and earlier versions,Tecal CH221 V100R001C00SPC180 and earlier versions,Tecal CH222 V100R002C00SPC180 and earlier versions,Te ...[truncated*] Problem Types: unspecified Description: Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285 V2 V100R002C00SPC115 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285H V2 V100R002C00SPC111 and ear
H2285 V2 V100R002C00SPC115 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285H V2 V100R002C00SPC111 and earlier versions, Tecal RH2268 V2 V100R002C00, Tecal RH2288 V2 V100R002C00SPC117 and earlier versions, Tecal RH2288H V2 V100R002C00SPC115 and earlier versions, Tecal RH2485 V2 V100R002C00SPC502 and earlier versions, Tecal RH5885 V2 V100R001C02SPC109 and earlier versions, Tecal RH5885 V3 V100R003C01SPC102 and earlier versions, Tecal RH5885H V3 V100R003C00SPC102 and earlier versions, Tecal XH310 V2 V100R001C00SPC110 and earlier versions, Tecal XH311 V2 V100R001C00SPC110 and earlier versions, Tecal XH320 V2 V100R001C00SPC110 and earlier versions, Tecal XH621 V2 V100R001C00SPC106
C00SPC110 and earlier versions, Tecal XH320 V2 V100R001C00SPC110 and earlier versions, Tecal XH621 V2 V100R001C00SPC106 and earlier versions, Tecal DH310 V2 V100R001C00SPC110 and earlier versions, Tecal DH320 V2 V100R001C00SPC106 and earlier versions, Tecal DH620 V2 V100R001C00SPC106 and earlier versions, Tecal DH621 V2 V100R001C00SPC107 and earlier versions, Tecal DH628 V2 V100R001C00SPC107 and earlier versions, Tecal BH620 V2 V100R002C00SPC107 and earlier versions, Tecal BH621 V2 V100R002C00SPC106 and earlier versions, Tecal BH622 V2 V100R002C00SPC110 and earlier versions, Tecal BH640 V2 V100R002C00SPC108 and earlier versions, Tecal CH121 V100R001C00SPC180 and earlier versions, Tecal CH140
, Tecal BH640 V2 V100R002C00SPC108 and earlier versions, Tecal CH121 V100R001C00SPC180 and earlier versions, Tecal CH140 V100R001C00SPC110 and earlier versions, Tecal CH220 V100R001C00SPC180 and earlier versions, Tecal CH221 V100R001C00SPC180 and earlier versions, Tecal CH222 V100R002C00SPC180 and earlier versions, Tecal CH240 V100R001C00SPC180 and earlier versions, Tecal CH242 V100R001C00SPC180 and earlier versions, Tecal CH242 V3 V100R001C00SPC110 and earlier versions could allow users who log in to the products to view the sessions IDs of all online users on the Online Users page of the web UI. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt
sers page of the web UI. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/hw-408100