Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-7868 State: PUBLISHED Published: 2018-03-08T18:00:00 Last Updated: 2024-08-05T06:37:59.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260 - https://lists.debian.org/debian-lts-announce/2018/04/msg00008.html - https://github.com/libming/libming/issues/113
CVE ID: CVE-2018-7869 State: PUBLISHED Published: 2018-03-08T18:00:00Z Last Updated: 2024-09-17T00:05:52.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a memory leak triggered in the function dcinit of util/decompile.c in libming 0.4.8, which will lead to a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260 - https://github.com/libming/libming/issues/119
CVE ID: CVE-2018-7870 State: PUBLISHED Published: 2018-03-08T18:00:00 Last Updated: 2024-08-05T06:37:59.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260 - https://github.com/libming/libming/issues/117 - https://lists.debian.org/debian-lts-announce/2018/04/msg00008.html
CVE ID: CVE-2018-7871 State: PUBLISHED Published: 2018-03-08T18:00:00 Last Updated: 2024-08-05T06:37:59.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT16 data. A crafted input will lead to a denial of service or possibly unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260 - https://lists.debian.org/debian-lts-announce/2018/04/msg00008.html - https://github.com/libming/libming/issues/120
CVE ID: CVE-2018-7872 State: PUBLISHED Published: 2018-03-08T18:00:00 Last Updated: 2024-08-05T06:37:59.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260 - https://lists.debian.org/debian-lts-announce/2018/04/msg00008.html - https://github.com/libming/libming/issues/114
CVE ID: CVE-2018-7873 State: PUBLISHED Published: 2018-03-08T18:00:00 Last Updated: 2024-08-05T06:37:59.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for INTEGER data. A Crafted input will lead to a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260 - https://github.com/libming/libming/issues/111 - https://lists.debian.org/debian-lts-announce/2018/05/msg00017.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/47KZ5RYWQMBN5DVDIT
ml - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/47KZ5RYWQMBN5DVDITBVRDNDCSFNBJ3V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LBFCINUX3XXAPPH77OH6NKACBPFBQXXW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CQNIJH5EQV2D6KEFGY2467ZS4I7TZLXP/
CVE ID: CVE-2018-7874 State: PUBLISHED Published: 2018-03-08T18:00:00Z Last Updated: 2024-09-16T19:04:20.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: An invalid memory address dereference was discovered in strlenext in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260 - https://github.com/libming/libming/issues/115
CVE ID: CVE-2018-7875 State: PUBLISHED Published: 2018-03-08T18:00:00 Last Updated: 2024-08-05T06:37:59.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer over-read in the getString function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260 - https://lists.debian.org/debian-lts-announce/2018/04/msg00008.html - https://github.com/libming/libming/issues/112
CVE ID: CVE-2018-7876 State: PUBLISHED Published: 2018-03-08T18:00:00 Last Updated: 2024-08-05T06:37:59.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libming 0.4.8, a memory exhaustion vulnerability was found in the function parseSWF_ACTIONRECORD in util/parser.c, which allows remote attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/109 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260 - https://lists.debian.org/debian-lts-announce/2018/05/msg00017.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/messa
e/2018/05/msg00017.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/47KZ5RYWQMBN5DVDITBVRDNDCSFNBJ3V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LBFCINUX3XXAPPH77OH6NKACBPFBQXXW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CQNIJH5EQV2D6KEFGY2467ZS4I7TZLXP/
CVE ID: CVE-2018-7877 State: PUBLISHED Published: 2018-03-08T18:00:00Z Last Updated: 2024-09-16T18:59:12.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for DOUBLE data. A Crafted input will lead to a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/110 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260
CVE ID: CVE-2018-7884 State: PUBLISHED Published: 2018-06-05T21:00:00 Last Updated: 2024-08-05T06:37:59.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DisplayLink Core Software Cleaner Application 8.2.1956. When the drivers are updated to a newer version, the product launches a process as SYSTEM to uninstall the old version: cl_1956.exe is run as SYSTEM on the %systemroot%\Temp folder, where any user can write a DLL (e.g., version.dll) to perform DLL Hijacking and elevate privileges to SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Jun/1
CVE ID: CVE-2018-7886 State: PUBLISHED Published: 2018-03-15T02:00:00 Last Updated: 2024-08-05T06:37:59.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CloudMe 1.11.0. An unauthenticated local attacker that can connect to the "CloudMe Sync" client application listening on 127.0.0.1 port 8888 can send a malicious payload causing a buffer overflow condition. This will result in code execution, as demonstrated by a TCP reverse shell, or a crash. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-6892. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44470/ - https://0day4u.wordp
Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44470/ - https://0day4u.wordpress.com/2018/03/09/buffer-overflow-on-cloudme-sync-v1-11-0/
CVE ID: CVE-2018-7889 State: PUBLISHED Published: 2018-03-08T21:00:00Z Last Updated: 2024-09-17T00:51:35.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/calibre/+bug/1753870 - https://github.com/kovidgoyal/calibre/commit/aeb5b036a0bf657951756688b3c72bd68b6e4a7d
CVE ID: CVE-2018-7890 State: PUBLISHED Published: 2018-03-08T22:00:00 Last Updated: 2024-08-05T06:37:59.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution issue was discovered in Zoho ManageEngine Applications Manager before 13.6 (build 13640). The publicly accessible testCredential.do endpoint takes multiple user inputs and validates supplied credentials by accessing a specified system. This endpoint calls several internal classes, and then executes a PowerShell script. If the specified system is OfficeSharePointServer, then the username and password parameters to this script are not validated, leading to Command Injection. Additional Analyst Notes: - CV
e and password parameters to this script are not validated, leading to Command Injection. Additional Analyst Notes: - CVE Program Container: References: - https://pentest.blog/advisory-manageengine-applications-manager-remote-code-execution-sqli-and/ - https://www.exploit-db.com/exploits/44274/ - http://www.securityfocus.com/bid/103358 - https://github.com/rapid7/metasploit-framework/pull/9684 - https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2018-7890.html - https://pitstop.manageengine.com/portal/community/topic/security-vulnerability-issues-fixed-upgrade-to-the-latest-version-of-applications-manager
CVE ID: CVE-2018-7891 State: PUBLISHED Published: 2018-04-30T15:00:00 Last Updated: 2024-08-05T06:37:59.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Milestone XProtect Video Management Software (Corporate, Expert, Professional+, Express+, Essential+) 2016 R1 (10.0.a) to 2018 R1 (12.1a) contains .NET Remoting endpoints that are vulnerable to deserialization attacks resulting in remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://supportcommunity.milestonesys.com/s/article/XProtect-VMS-NET-security-vulnerability-hotfixes-for-2016-R1-2018-R1?language=en_US - http://www.securityfocus.com/bid/104120 - https://cert-portal.siemens.c
ty-hotfixes-for-2016-R1-2018-R1?language=en_US - http://www.securityfocus.com/bid/104120 - https://cert-portal.siemens.com/productcert/pdf/ssa-457058.pdf
CVE ID: CVE-2018-7893 State: PUBLISHED Published: 2018-03-12T03:00:00 Last Updated: 2024-08-05T06:37:59.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple (CMSMS) 2.2.6 has stored XSS in admin/moduleinterface.php via the metadata parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ibey0nd/CVE/blob/master/CMS%20Made%20Simple%20Stored%20XSS.md
CVE ID: CVE-2018-7894 State: PUBLISHED Published: 2018-03-09T15:00:00Z Last Updated: 2024-09-17T03:07:06.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advanced_filter parameter (aka the Search Parameter). Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/stolabs/security-issues-on-eramba-cf887bc0a069
CVE ID: CVE-2018-7899 State: PUBLISHED Published: 2018-04-19T14:00:00Z Last Updated: 2024-09-16T23:06:01.087Z Vendors: Huawei Technologies Co., Ltd. Products: Berkeley-AL20, Berkeley-BD Problem Types: double free Description: The Mali Driver of Huawei Berkeley-AL20 and Berkeley-BD smart phones with software Berkeley-AL20 8.0.0.105(C00), 8.0.0.111(C00), 8.0.0.112D(C00), 8.0.0.116(C00), 8.0.0.119(C00), 8.0.0.119D(C00), 8.0.0.122(C00), 8.0.0.132(C00), 8.0.0.132D(C00), 8.0.0.142(C00), 8.0.0.151(C00), Berkeley-BD 1.0.0.21, 1.0.0.22, 1.0.0.23, 1.0.0.24, 1.0.0.26, 1.0.0.29 has a double free vulnerability. An attacker can trick a user to install a malicious application and exploit this vulnerability
ouble free vulnerability. An attacker can trick a user to install a malicious application and exploit this vulnerability when in the exception handling process. Successful exploitation may cause system reboot. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-01-smartphone
CVE ID: CVE-2018-7900 State: PUBLISHED Published: 2019-01-02T16:00:00 Last Updated: 2024-08-05T06:37:59.608Z Vendors: Huawei Technologies Co., Ltd. Products: some HG products Problem Types: information leak Description: There is an information leak vulnerability in some Huawei HG products. An attacker may obtain information about the HG device by exploiting this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://blog.newskysecurity.com/information-disclosure-vulnerability-cve-2018-7900-makes-it-easy-for-attackers-to-find-huawei-3e7039b6f44f - http://www.huawei.com/en/psirt/security-notices/huawei-sn-20181219-01-hg-en
CVE ID: CVE-2018-7901 State: PUBLISHED Published: 2018-04-30T14:00:00 Last Updated: 2024-08-05T06:37:59.620Z Vendors: Huawei Technologies Co., Ltd. Products: ALP-AL00B, BLA-AL00B Problem Types: remote control Description: RCS module in Huawei ALP-AL00B smart phones with software versions earlier than 8.0.0.129, BLA-AL00B smart phones with software versions earlier than 8.0.0.129 has a remote control vulnerability. An attacker can trick a user to install a malicious application. When the application connects with RCS for the first time, it needs user to manually click to agree. In addition, the attacker needs to obtain the key that RCS uses to authenticate the application. Successful exploita
ee. In addition, the attacker needs to obtain the key that RCS uses to authenticate the application. Successful exploitation may cause the attacker to control keyboard remotely. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180425-01-rcs-en
CVE ID: CVE-2018-7902 State: PUBLISHED Published: 2018-05-24T14:00:00 Last Updated: 2024-08-05T06:37:59.561Z Vendors: Huawei Technologies Co., Ltd. Products: 1288H V5; 2288H V5 Problem Types: JSON injection Description: Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management privilege of the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180523-01-json-en
CVE ID: CVE-2018-7903 State: PUBLISHED Published: 2018-05-24T14:00:00 Last Updated: 2024-08-05T06:37:59.644Z Vendors: Huawei Technologies Co., Ltd. Products: 1288H V5; 2288H V5 Problem Types: JSON injection Description: Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management privilege of the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180523-01-json-en
CVE ID: CVE-2018-7904 State: PUBLISHED Published: 2018-05-24T14:00:00 Last Updated: 2024-08-05T06:37:59.664Z Vendors: Huawei Technologies Co., Ltd. Products: 1288H V5; 2288H V5 Problem Types: JSON injection Description: Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management privilege of the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180523-01-json-en
CVE ID: CVE-2018-7905 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7906 State: PUBLISHED Published: 2018-09-12T15:00:00 Last Updated: 2024-08-05T06:37:59.582Z Vendors: Huawei Technologies Co., Ltd. Products: Leland-AL00, Leland-AL00A Problem Types: denial of service Description: Some Huawei smart phones with software of Leland-AL00 8.0.0.114(C636), Leland-AL00A 8.0.0.171(C00) have a denial of service (DoS) vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the parameter, successful exploitation can cause the smartphone black screen until restarting the phone. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en
en until restarting the phone. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180905-01-smartphone-en
CVE ID: CVE-2018-7907 State: PUBLISHED Published: 2018-09-26T13:00:00 Last Updated: 2024-08-05T06:37:59.653Z Vendors: Huawei Technologies Co., Ltd. Products: Agassi-L09,Agassi-W09,Baggio2-U01A,Bond-AL00C,Bond-AL10B,Bond-TL10B,Bond-TL10C,Haydn-L1JB,Kobe-L09A,Kobe-L09AHN,Kobe-W09C,LelandP-L22C,LelandP-L22D,Rhone-AL00,Selina-L02,Stanford-L09S,Toronto-AL00,Toronto-AL00A,Toronto-TL10 Problem Types: sensitive information leak Description: Some Huawei products Agassi-L09 AGS-L09C100B257CUSTC100D001, AGS-L09C170B253CUSTC170D001, AGS-L09C199B251CUSTC199D001, AGS-L09C229B003CUSTC229D001, Agassi-W09 AGS-W09C100B257CUSTC100D001, AGS-W09C128B252CUSTC128D001, AGS-W09C170B252CUSTC170D001, AGS-W09C229B251CU
001, Agassi-W09 AGS-W09C100B257CUSTC100D001, AGS-W09C128B252CUSTC128D001, AGS-W09C170B252CUSTC170D001, AGS-W09C229B251CUSTC229D001, AGS-W09C331B003CUSTC331D001, AGS-W09C794B001CUSTC794D001, Baggio2-U01A BG2-U01C100B160CUSTC100D001, BG2-U01C170B160CUSTC170D001, BG2-U01C199B162CUSTC199D001, BG2-U01C209B160CUSTC209D001, BG2-U01C333B160CUSTC333D001, Bond-AL00C Bond-AL00CC00B201, Bond-AL10B Bond-AL10BC00B201, Bond-TL10B Bond-TL10BC01B201, Bond-TL10C Bond-TL10CC01B131, Haydn-L1JB HDN-L1JC137B068, Kobe-L09A KOB-L09C100B252CUSTC100D001, KOB-L09C209B002CUSTC209D001, KOB-L09C362B001CUSTC362D001, Kobe-L09AHN KOB-L09C233B226, Kobe-W09C KOB-W09C128B251CUSTC128D001, LelandP-L22C 8.0.0.101(C675CUSTC675D2),
USTC362D001, Kobe-L09AHN KOB-L09C233B226, Kobe-W09C KOB-W09C128B251CUSTC128D001, LelandP-L22C 8.0.0.101(C675CUSTC675D2), LelandP-L22D 8.0.0.101(C675CUSTC675D2), Rhone-AL00 Rhone-AL00C00B186, Selina-L02 Selina-L02C432B153, Stanford-L09S Stanford-L09SC432B183, Toronto-AL00 Toronto-AL00C00B223, Toronto-AL00A Toronto-AL00AC00B223, Toronto-TL10 Toronto-TL10C01B223 have a sensitive information leak vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the input, successful exploitation can cause sensitive information leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.co
cause sensitive information leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180919-02-smartphone-en
CVE ID: CVE-2018-7908 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7909 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7910 State: PUBLISHED Published: 2018-11-13T19:00:00 Last Updated: 2024-08-05T06:37:59.598Z Vendors: Huawei Technologies Co., Ltd. Products: ALP-AL00B, ALP-TL00B, BLA-AL00B, BLA-L09C, BLA-L29C Problem Types: authentication bypass Description: Some Huawei smartphones ALP-AL00B 8.0.0.118D(C00), ALP-TL00B 8.0.0.118D(C01), BLA-AL00B 8.0.0.118D(C00), BLA-L09C 8.0.0.127(C432), 8.0.0.128(C432), 8.0.0.137(C432), BLA-L29C 8.0.0.129(C432), 8.0.0.137(C432) have an authentication bypass vulnerability. When the attacker obtains the user's smartphone, the vulnerability can be used to replace the start-up program so that the attacker can obtain the information in the smartphone and achieve
an be used to replace the start-up program so that the attacker can obtain the information in the smartphone and achieve the purpose of controlling the smartphone. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181101-01-bypass-en
CVE ID: CVE-2018-7911 State: PUBLISHED Published: 2018-10-23T14:00:00 Last Updated: 2024-08-05T06:37:59.589Z Vendors: Huawei Technologies Co., Ltd. Products: ALP-AL00B, ALP-AL00B-RSC, BLA-TL00B, Charlotte-AL00A, Emily-AL00A, Problem Types: FRP bypass Description: Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.0.0.118(C00), 8.0.0.120(SP2C00), 8.0.0.125(SP1C00), 8.0.0.125(SP3C00), 8.0.0.126(SP2C00), 8.0.0.126(SP5C00), 8.0.0.127(SP1C00), 8.0.0.128(SP2C00), ALP-AL00B-RSC 1.0.0.2, BLA-TL00B 8.0.0.113(SP7C01), 8.0.0.118(C01), 8.0.0.120(SP2C01), 8.0.0.125(SP1C01), 8.0.0.125(SP2C01), 8.0.0.125(SP3C01), 8.0.0.126(SP2C01), 8.0.0.126(SP5C01
18(C01), 8.0.0.120(SP2C01), 8.0.0.125(SP1C01), 8.0.0.125(SP2C01), 8.0.0.125(SP3C01), 8.0.0.126(SP2C01), 8.0.0.126(SP5C01), 8.0.0.127(SP1C01), 8.0.0.128(SP2C01), 8.0.0.129(SP2C01), Charlotte-AL00A 8.1.0.105(SP7C00), 8.1.0.106(SP3C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP3C00), 8.1.0.108(SP6C00), 8.1.0.109(SP2C00), Emily-AL00A 8.1.0.105(SP6C00), 8.1.0.106(SP2C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP2C00), 8.1.0.108(SP6C00), 8.1.0.109(SP5C00) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by Gaode Map and can perf
sing the factory reset protection (FRP) function, an attacker can login the configuration flow by Gaode Map and can perform some operations to update the Google account. As a result, the FRP function is bypassed. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180822-01-frpbypass-en
CVE ID: CVE-2018-7912 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7913 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7914 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7915 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7916 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.