Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-1832 State: PUBLISHED Published: 2020-05-29T19:06:47 Last Updated: 2024-08-04T06:46:30.938Z Vendors: Huawei Products: E6878-370 Problem Types: Stack Buffer Overflow Description: E6878-370 products with versions of 10.0.3.1(H557SP27C233) and 10.0.3.1(H563SP1C00) have a stack buffer overflow vulnerability. The program copies an input buffer to an output buffer without verification. An attacker in the adjacent network could send a crafted message, successful exploit could lead to stack buffer overflow which may cause malicious code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-0
t Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-stack-en
CVE ID: CVE-2020-1833 State: PUBLISHED Published: 2020-05-29T19:55:27 Last Updated: 2024-08-04T06:46:30.896Z Vendors: Huawei Products: Honor 9X Problem Types: Improper Authorization Description: Honor 9X smartphones with versions earlier than 9.1.1.172(C00E170R8P1) have an improper authentication vulnerability. A logic error occurs when handling clock function, an attacker should do a series of crafted operations quickly before the phone is unlocked, successful exploit could allow the attacker to access clock information without unlock the phone. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-05-smartpho
CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-05-smartphone-en
CVE ID: CVE-2020-1834 State: PUBLISHED Published: 2020-06-18T13:57:07 Last Updated: 2024-08-04T06:46:30.899Z Vendors: n/a Products: HUAWEI P30;HUAWEI P30 Pro Problem Types: Insufficient Integrity Check Description: HUAWEI P30 and HUAWEI P30 Pro with versions earlier than 10.1.0.135(C00E135R2P11) and versions earlier than 10.1.0.135(C00E135R2P8) have an insufficient integrity check vulnerability. The system does not check certain software package's integrity sufficiently. Successful exploit could allow an attacker to load a crafted software package to the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-2020
Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200617-01-smartphone-en
CVE ID: CVE-2020-1835 State: PUBLISHED Published: 2020-06-18T13:51:21 Last Updated: 2024-08-04T06:46:31.062Z Vendors: n/a Products: HUAWEI Mate 30 Problem Types: Information Disclosure Description: HUAWEI Mate 30 with versions earlier than 10.1.0.126(C00E125R5P3) have an information disclosure vulnerability. A logic judgment error occurs when the system handling Bluetooth connections, an attacker could craft as an authenticated Bluetooth peer to launch the attack. Successful exploit could cause information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200617-02-smartphone-en
CVE ID: CVE-2020-1836 State: PUBLISHED Published: 2020-07-06T18:25:19 Last Updated: 2024-08-04T06:46:30.896Z Vendors: n/a Products: HUAWEI P30;HUAWEI P30 Pro Problem Types: Information Disclosure Description: HUAWEI P30 with versions earlier than 10.1.0.160(C00E160R2P11) and HUAWEI P30 Pro with versions earlier than 10.1.0.160(C00E160R2P8) have an information disclosure vulnerability. Certain function's default configuration in the system seems insecure, an attacker should craft a WI-FI hotspot to launch the attack. Successful exploit could cause information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei
itional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200624-01-smartphone-en
CVE ID: CVE-2020-1837 State: PUBLISHED Published: 2020-07-06T17:27:33 Last Updated: 2024-08-04T06:53:58.557Z Vendors: n/a Products: ChangXiang 8 Plus Problem Types: Denial of Service Description: ChangXiang 8 Plus with versions earlier than 9.1.0.136(C00E121R1P6T8) have a denial of service vulnerability. The device does not properly handle certain message from base station, the attacker could craft a fake base station to launch the attack. Successful exploit could cause a denial of signal service condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200624-01-dos-en
CVE ID: CVE-2020-1838 State: PUBLISHED Published: 2020-07-06T18:08:41 Last Updated: 2024-08-04T06:53:58.796Z Vendors: n/a Products: HUAWEI Mate 30 Pro Problem Types: Improper Authentication Description: HUAWEI Mate 30 Pro with versions earlier than 10.1.0.150(C00E136R5P3) have is an improper authentication vulnerability. The device does not sufficiently validate certain credential of user's face, an attacker could craft the credential of the user, successful exploit could allow the attacker to pass the authentication with the crafted credential. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200701-03-smartphon
CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200701-03-smartphone-en
CVE ID: CVE-2020-1839 State: PUBLISHED Published: 2020-07-06T18:29:42 Last Updated: 2024-08-04T06:53:58.519Z Vendors: n/a Products: HUAWEI Mate 30 Problem Types: Race Condition Description: HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a race condition vulnerability. There is a timing window exists in which certain pointer members can be modified by another process that is operating concurrently, an attacker should trick the user into running a crafted application with high privilege, successful exploit could cause code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200701-04
Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200701-04-smartphone-en
CVE ID: CVE-2020-1840 State: PUBLISHED Published: 2020-01-21T18:14:09 Last Updated: 2024-08-04T06:53:58.735Z Vendors: n/a Products: HUAWEI Mate 20 Problem Types: Insufficient Authentication Description: HUAWEI Mate 20 smart phones with versions earlier than 10.0.0.175(C00E70R3P8) have an insufficient authentication vulnerability. A local attacker with high privilege can execute a specific command to exploit this vulnerability. Successful exploitation may cause information leak and compromise the availability of the smart phones.Affected product versions include: HUAWEI Mate 20 versions Versions earlier than 10.0.0.175(C00E70R3P8) Additional Analyst Notes: - CVE Program Container: References:
20 versions Versions earlier than 10.0.0.175(C00E70R3P8) Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-smartphone-en
CVE ID: CVE-2020-1841 State: PUBLISHED Published: 2020-02-17T20:49:36 Last Updated: 2024-08-04T06:53:58.738Z Vendors: Huawei Products: CloudLink Board, DP300, RSE6500, TE60 Problem Types: Information Leak Description: Huawei CloudLink Board version 20.0.0; DP300 version V500R002C00; RSE6500 versions V100R001C00, V500R002C00, and V500R002C00SPC900; and TE60 versions V500R002C00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C10, V600R019C00, and V600R019C00SPC100 have an information leak vulnerability. An unauthenticated, remote attacker can make a large number of attempts to guess information. Successful exploitation may cause information leak. Additional Analyst Notes: - CVE Pr
of attempts to guess information. Successful exploitation may cause information leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200207-01-te-en
CVE ID: CVE-2020-1842 State: PUBLISHED Published: 2020-02-18T03:03:52 Last Updated: 2024-08-04T06:53:58.522Z Vendors: Huawei Products: HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, OSCA-550X Problem Types: Insufficient Authentication Description: Huawei HEGE-560 version 1.0.1.20(SP2); OSCA-550 and OSCA-550A version 1.0.0.71(SP1); and OSCA-550AX and OSCA-550X version 1.0.0.71(SP2) have an insufficient authentication vulnerability. An attacker can access the device physically and perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker obtain high privilege. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/p
acker obtain high privilege. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-osca-en
CVE ID: CVE-2020-1843 State: PUBLISHED Published: 2020-02-18T02:14:55 Last Updated: 2024-08-04T06:53:58.926Z Vendors: Huawei Products: HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, OSCA-550X Problem Types: Insufficient Authentication Description: Huawei HEGE-560 version 1.0.1.20(SP2), OSCA-550 version 1.0.0.71(SP1), OSCA-550A version 1.0.0.71(SP1), OSCA-550AX version 1.0.0.71(SP2), and OSCA-550X version 1.0.0.71(SP2) have an insufficient verification vulnerability. An attacker can perform specific operations to exploit this vulnerability by physical access methods. Successful exploitation may cause the attacker perform an illegal operation. Additional Analyst Notes: - CVE Program Container: Ref
exploitation may cause the attacker perform an illegal operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-02-osca-en
CVE ID: CVE-2020-1844 State: PUBLISHED Published: 2020-02-28T18:52:38 Last Updated: 2024-08-04T06:53:58.596Z Vendors: n/a Products: PCManager Problem Types: Privilege Escalation Description: PCManager with versions earlier than 10.0.5.51 have a privilege escalation vulnerability in Huawei PCManager products. An authenticated, local attacker can perform specific operation to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200221-01-pcmanager-en
CVE ID: CVE-2020-1845 State: PUBLISHED Published: 2020-04-27T14:26:45 Last Updated: 2024-08-04T06:53:59.906Z Vendors: Huawei Products: PCManager Problem Types: Local Privilege Escalation Description: Huawei PCManager product with versions earlier than 10.0.5.53 have a local privilege escalation vulnerability. An authenticated, local attacker can perform specific operation to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-01-pcmanager-en
CVE ID: CVE-2020-1847 State: PUBLISHED Published: 2020-11-13T14:50:23 Last Updated: 2024-08-04T06:53:58.650Z Vendors: n/a Products: NIP6300;NIP6600;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG9500 Problem Types: Denial of Service Description: There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthorized attackers can construct attack scenarios, which leads to denial of service.Affected product versions include:NIP6300 versions V500R001C30,V500R001C60;NIP6600 versions V500R001C30,V500R001C60;Secospace USG6300 versions V500R001C30,V500R001C60;Secospace USG6500 versions V500R001C30
rsions V500R001C30,V500R001C60;Secospace USG6300 versions V500R001C30,V500R001C60;Secospace USG6500 versions V500R001C30,V500R001C60;Secospace USG6600 versions V500R001C30,V500R001C60;USG9500 versions V500R001C30,V500R001C60. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201111-02-dos-en
CVE ID: CVE-2020-1848 State: PUBLISHED Published: 2020-12-29T17:55:19 Last Updated: 2024-08-04T06:53:58.511Z Vendors: Huawei Products: Jackman-AL00D Problem Types: Resource Management Errors Description: There is a resource management error vulnerability in Jackman-AL00D versions 8.2.0.185(C00R2P1). Local attackers construct malicious application files, causing system applications to run abnormally. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201216-02-smartphone-en
CVE ID: CVE-2020-1853 State: PUBLISHED Published: 2020-02-17T20:55:38 Last Updated: 2024-08-04T06:53:58.553Z Vendors: Huawei Products: GaussDB 200 Problem Types: Path Traversal Description: GaussDB 200 with version of 6.5.1 have a path traversal vulnerability. Due to insufficient input path validation, an authenticated attacker can traverse directories and download files to a specific directory. Successful exploit may cause information leakage. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200120-01-path-en
CVE ID: CVE-2020-1855 State: PUBLISHED Published: 2020-02-18T02:28:18 Last Updated: 2024-08-04T06:53:58.916Z Vendors: Huawei Products: HEGE-570, HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, OSCA-550X Problem Types: Insufficient Verification Description: Huawei HEGE-570 version 1.0.1.22(SP3); and HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X version 1.0.1.21(SP3) have an insufficient verification vulnerability. An attacker can access the device physically and exploit this vulnerability to tamper with device information. Successful exploit may cause service abnormal. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/hua
Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-03-osca-en
CVE ID: CVE-2020-1856 State: PUBLISHED Published: 2020-02-17T20:27:50 Last Updated: 2024-08-04T06:53:58.787Z Vendors: Huawei Products: NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, USG9500 Problem Types: Information leakage Description: Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C60, and V500R005C00 have an information leakage vulnerability. An attacker can exploit this vulnerability by sending specific request packets to affected devices. Successful exploit may lead to information leakage. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-a
tion leakage. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-firewall-en
CVE ID: CVE-2020-1857 State: PUBLISHED Published: 2020-02-17T20:01:03 Last Updated: 2024-08-04T06:53:58.616Z Vendors: Huawei Products: NIP6800, Secospace USG6600, USG9500 Problem Types: Information leakage Description: Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have an information leakage vulnerability. Due to improper processing of some data, a local authenticated attacker can exploit this vulnerability through a series of operations. Successful exploitation may cause information leakage. Additional Analyst Notes: - CVE Program Contain
es of operations. Successful exploitation may cause information leakage. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-leakage-en
CVE ID: CVE-2020-1858 State: PUBLISHED Published: 2020-02-17T19:30:02 Last Updated: 2024-08-04T06:53:58.976Z Vendors: Huawei Products: NIP6800, Secospace USG6600, USG9500 Problem Types: Denial of Service Description: Huawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; Secospace USG6600 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100; and USG9500 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have a denial of service vulnerability. Attackers need to perform a series of operations in a special scenario to exploit this vulnerability. Successful exploit may cause the new connections can't be established, result in a d
ario to exploit this vulnerability. Successful exploit may cause the new connections can't be established, result in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-dos-en - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-04-dos-en
CVE ID: CVE-2020-1860 State: PUBLISHED Published: 2020-02-28T18:28:16 Last Updated: 2024-08-04T06:53:58.749Z Vendors: n/a Products: NIP6800;Secospace USG6600;USG9500 Problem Types: Access Control Bypass Description: NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an access control bypass vulnerability. Attackers that can access to the internal network can exploit this vulnerability with careful deployment. Successful exploit may cause the access control to be bypassed, and attackers can directly access the Internet. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advis
nternet. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-02-firewall-en
CVE ID: CVE-2020-1861 State: PUBLISHED Published: 2020-02-28T18:37:30 Last Updated: 2024-08-04T06:53:58.945Z Vendors: n/a Products: CloudEngine 12800 Problem Types: Information Leakage Description: CloudEngine 12800 with versions of V200R001C00SPC600,V200R001C00SPC700,V200R002C01,V200R002C50SPC800,V200R002C50SPC800PWE,V200R003C00SPC810,V200R003C00SPC810PWE,V200R005C00SPC600,V200R005C00SPC800,V200R005C00SPC800PWE,V200R005C10,V200R005C10SPC300 have an information leakage vulnerability in some Huawei products. In some special cases, an authenticated attacker can exploit this vulnerability because the software processes data improperly. Successful exploitation may lead to information leakage. Ad
ulnerability because the software processes data improperly. Successful exploitation may lead to information leakage. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-01-leak-en
CVE ID: CVE-2020-1862 State: PUBLISHED Published: 2020-03-20T14:45:37 Last Updated: 2024-08-04T06:53:59.689Z Vendors: n/a Products: CampusInsight;ManageOne Problem Types: Double Free Description: There is a double free vulnerability in some Huawei products. A local attacker with low privilege may perform some operations to exploit the vulnerability. Due to doubly freeing memory, successful exploit may cause some service abnormal. Affected product versions include:CampusInsight versions V100R019C00;ManageOne versions 6.5.RC2.B050. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-01-free-en
CVE ID: CVE-2020-1863 State: PUBLISHED Published: 2020-03-12T22:01:20 Last Updated: 2024-08-04T06:53:58.774Z Vendors: Huawei Products: Huawei USG6000V Problem Types: Out of Bounds Read Description: Huawei USG6000V with versions V500R001C20SPC300, V500R003C00SPC100, and V500R005C00SPC100 have an out-of-bounds read vulnerability. Due to a logical flaw in a JSON parsing routine, a remote, unauthenticated attacker could exploit this vulnerability to disrupt service in the affected products. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200311-01-buffer-en
CVE ID: CVE-2020-1864 State: PUBLISHED Published: 2020-03-20T14:58:57 Last Updated: 2024-08-04T06:53:59.881Z Vendors: n/a Products: Secospace AntiDDoS8000 Problem Types: Improper Authentication Description: Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit the vulnerability to connect to affected devices and execute a series of commands.Affected product versions include:Secospace AntiDDoS8000 versions V500R001C00,V500R001C20,V500R001C60,V500R005C00
mmands.Affected product versions include:Secospace AntiDDoS8000 versions V500R001C00,V500R001C20,V500R001C60,V500R005C00. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-01-authentication-en
CVE ID: CVE-2020-1865 State: PUBLISHED Published: 2021-01-13T22:20:20 Last Updated: 2024-08-04T06:53:58.691Z Vendors: n/a Products: CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800 Problem Types: Out-of-Bounds Read Description: There is an out-of-bounds read vulnerability in Huawei CloudEngine products. The software reads data past the end of the intended buffer when parsing certain PIM message, an adjacent attacker could send crafted PIM messages to the device, successful exploit could cause out of bounds read when the system does the certain operation. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/hu
Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201230-02-cloudengine-en
CVE ID: CVE-2020-1866 State: PUBLISHED Published: 2021-01-13T22:22:04 Last Updated: 2024-08-04T06:53:59.744Z Vendors: n/a Products: NIP6800;S12700;S2700;S5700;S6700;S7700;S9700;Secospace USG6600;USG9500 Problem Types: Out of Bounds Read Description: There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could cause certain service abnormal. Affected product versions include:NIP6800 versions V500R001C30,V500R001C60SPC500,V500R005C00;S12700 versions V200R008C00;S2700 versions V200R008C00;S5700 versions V200R008C00;S6700 versions V200R008C00;S7700 versions V200R0
sions V200R008C00;S2700 versions V200R008C00;S5700 versions V200R008C00;S6700 versions V200R008C00;S7700 versions V200R008C00;S9700 versions V200R008C00;Secospace USG6600 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00;USG9500 versions V500R001C30SPC300,V500R001C30SPC600,V500R001C60SPC500,V500R005C00. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-09-eudemon-en
CVE ID: CVE-2020-1870 State: PUBLISHED Published: 2020-05-29T19:13:26 Last Updated: 2024-08-04T06:53:58.990Z Vendors: Huawei Products: CloudEngine 12800, CloudEngine 5800, CloudEngine 6800, CloudEngine 7800, NE40E, NE40E-F, NE40E-M Problem Types: Denial of Service Description: There is a denial of service vulnerability in some Huawei products. Due to improper memory management, memory leakage may occur in some special cases. Attackers can perform a series of operations to exploit this vulnerability. Successful exploit may cause a denial of service. Affected product versions include: CloudEngine 12800 versions V200R019C00SPC800; CloudEngine 5800 versions V200R019C00SPC800; CloudEngine 6800 ve