Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-8178 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T01:40:32.134Z Vendors: Huawei Technologies Co., Ltd. Products: Vicky-AL00 Problem Types: Stored Cross-Site Scripting Description: Huawei Email APP Vicky-AL00 smartphones with software of earlier than VKY-AL00C00B171 versions has a stored cross-site scripting vulnerability. A remote attacker could exploit this vulnerability to send email that storing malicious code to a smartphone and waiting for a user to access this email that triggers execution of the code. An exploit could allow the attacker to execute arbitrary script code on the affected device. Additional Analyst Notes: - CVE Program Contain
ow the attacker to execute arbitrary script code on the affected device. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170908-01-email-en
CVE ID: CVE-2017-8179 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T03:28:31.256Z Vendors: Huawei Technologies Co., Ltd. Products: Nice-AL00 Problem Types: buffer overflow Description: The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and sends a specific parameter to the driver of the smart phone, causing privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-
ge escalation. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170919-01-mtk-en - http://www.securityfocus.com/bid/101956
CVE ID: CVE-2017-8180 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T02:06:15.016Z Vendors: Huawei Technologies Co., Ltd. Products: Nice-AL00 Problem Types: buffer overflow Description: The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and sends a specific parameter to the driver of the smart phone, causing privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-
ge escalation. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170919-01-mtk-en
CVE ID: CVE-2017-8181 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T22:25:45.723Z Vendors: Huawei Technologies Co., Ltd. Products: Nice-AL00 Problem Types: arbitrary memory write Description: The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a arbitrary memory write vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and sends a specific parameter to the driver of the smart phone, causing privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/p
ausing privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170919-01-mtk-en
CVE ID: CVE-2017-8182 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T18:08:52.142Z Vendors: Huawei Technologies Co., Ltd. Products: Nice-AL00 Problem Types: out-of-bound read Description: MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a out-of-bound read vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter and cause to memory out-of-bound read. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-mtk-en
CVE ID: CVE-2017-8183 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T20:36:30.808Z Vendors: Huawei Technologies Co., Ltd. Products: Nice-AL00 Problem Types: any memory access Description: MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to cause to any memory access vulnerabilities, leading to sensitive information leakage. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisorie
kage. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-mtk-en
CVE ID: CVE-2017-8184 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T23:26:43.457Z Vendors: Huawei Technologies Co., Ltd. Products: Nice-AL00 Problem Types: any memory access Description: MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to cause to any memory access vulnerabilities, leading to sensitive information leakage. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisorie
CVE ID: CVE-2017-8185 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T01:15:56.677Z Vendors: Huawei Technologies Co., Ltd. Products: ME906s-158 Problem Types: Privilege Escalation Description: ME906s-158 earlier than ME906S_Installer_13.1805.10.3 versions has a privilege elevation vulnerability. An attacker could exploit this vulnerability to modify the configuration information containing malicious files and trick users into executing the files, resulting in the execution of arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-me906s-en
CVE ID: CVE-2017-8186 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T02:42:33.340Z Vendors: Huawei Technologies Co., Ltd. Products: MHA-AL00A Problem Types: DOS Description: The Bastet of some Huawei mobile phones with software of earlier than MHA-AL00BC00B231 versions has a DOS vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-dos-en
CVE ID: CVE-2017-8187 State: PUBLISHED Published: 2018-03-20T15:00:00 Last Updated: 2024-08-05T16:27:22.885Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere OpenStack Problem Types: privilege escalation Description: Huawei FusionSphere OpenStack V100R006C00SPC102(NFV) has a privilege escalation vulnerability. Due to improper privilege restrictions, an attacker with high privilege may obtain the other users' certificates. Successful exploit may cause privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en
CVE ID: CVE-2017-8188 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T03:49:19.903Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere OpenStack Problem Types: command injection Description: FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some module of the affected products, causing code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en
CVE ID: CVE-2017-8189 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T03:43:40.272Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere OpenStack Problem Types: path traversal Description: FusionSphere OpenStack V100R006C00SPC102(NFV)has a path traversal vulnerability. Due to insufficient path validation, an attacker with high privilege may exploit this vulnerability to cover some files, causing services abnormal. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en
CVE ID: CVE-2017-8190 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T00:36:06.233Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere OpenStack Problem Types: improper verification of cryptographic signature Description: FusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic signature vulnerability. The software does not verify the cryptographic signature. An attacker with high privilege may exploit this vulnerability to inject malicious software. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en
CVE ID: CVE-2017-8191 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T03:52:50.082Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere OpenStack Problem Types: week cryptographic algorithm Description: FusionSphere OpenStack V100R006C00SPC102(NFV)has a week cryptographic algorithm vulnerability. Attackers may exploit the vulnerability to crack the cipher text and cause information leak on the transmission links. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en - http://www.securityfocus.com/bid/102282
CVE ID: CVE-2017-8192 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T22:25:35.123Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere OpenStack Problem Types: Improper Authorization Description: FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper authorization, an attacker with low privilege may exploit this vulnerability to obtain the operation authority of some specific directory, causing privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-fustionsphere-en
CVE ID: CVE-2017-8193 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T02:02:07.705Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere OpenStack Problem Types: command injection Description: The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability. Due to the insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sending message with malicious commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170830-01-OpenStack-en
CVE ID: CVE-2017-8194 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T02:58:03.206Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere OpenStack Problem Types: Improper Authentication Description: The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may exploit the vulnerability to execute more operations by send a crafted rest message. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170830-02-OpenStack-en - http://www.securityfocus.com/bid/102209
CVE ID: CVE-2017-8195 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T22:03:32.117Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere OpenStack Problem Types: improper authentication Description: The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may exploit the vulnerability to execute more operations by send a crafted rest message. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170830-01-OpenStack-en
CVE ID: CVE-2017-8196 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T16:18:54.511Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere Problem Types: incorrect authorization Description: FusionSphere V100R006C00SPC102(NFV) has an incorrect authorization vulnerability. An authenticated attacker could execute commands that he/she should have had no permission to perform, thereby querying, modifying, and deleting certain service data and making the service unavailable. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170913-01-fusionsphere-en
CVE ID: CVE-2017-8197 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T22:14:11.509Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere Problem Types: command injection Description: FusionSphere V100R006C00SPC102(NFV) has a command injection vulnerability. An authenticated, remote attacker could craft packets with malicious strings and send them to a target device. Successful exploit could allow the attacker to launch a command injection attack and execute system commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170913-01-fusionsphere-en
CVE ID: CVE-2017-8198 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T17:22:40.441Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere Problem Types: SQL injection Description: FusionSphere V100R006C00SPC102(NFV) has an SQL injection vulnerability. An authenticated, remote attacker could craft interface messages carrying malicious SQL statements and send them to a target device. Successful exploit could allow the attacker to launch an SQL injection attack and execute SQL commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170913-01-fusionsphere-en
CVE ID: CVE-2017-8199 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T21:02:39.109Z Vendors: Huawei Technologies Co., Ltd. Products: MAX PRESENCE,TP3106,TP3206, Problem Types: out-of-bounds read Description: MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause process reboot. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-h323-en - http
Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-h323-en - http://www.securityfocus.com/bid/101951
CVE ID: CVE-2017-8200 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T22:36:10.379Z Vendors: Huawei Technologies Co., Ltd. Products: MAX PRESENCE,TP3106,TP3206 Problem Types: out-of-bounds read Description: MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause process reboot. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-h323-en - http:
rogram Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-h323-en - http://www.securityfocus.com/bid/101948
CVE ID: CVE-2017-8201 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T22:25:15.407Z Vendors: Huawei Technologies Co., Ltd. Products: MAX PRESENCE,TP3106,TP3206, Problem Types: a memory leak Description: MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an a memory leak vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit could cause a memory leak and eventual denial of service (DoS) condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories
ion. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-h323-en - http://www.securityfocus.com/bid/101952
CVE ID: CVE-2017-8202 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T01:56:26.934Z Vendors: Huawei Technologies Co., Ltd. Products: Prague-AL00A,Prague-AL00B,Prague-AL00C,Prague-TL00A,Prague-TL10A Problem Types: buffer overflow Description: The CameraISP driver of some Huawei smart phones with software of versions earlier than Prague-AL00AC00B205,versions earlier than Prague-AL00BC00B205,versions earlier than Prague-AL00CC00B205,versions earlier than Prague-TL00AC01B205,versions earlier than Prague-TL10AC01B205 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP, the APP can send a s
due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP, the APP can send a specific parameter to the CameraISP driver of the smart phone, causing system reboot. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-smartphone-en - http://www.securityfocus.com/bid/101959
CVE ID: CVE-2017-8203 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T00:26:25.448Z Vendors: Huawei Technologies Co., Ltd. Products: Nova 2 Plus,Nova 2 Problem Types: UAF Description: The Bastet Driver of Nova 2 Plus,Nova 2 Huawei smart phones with software of Versions earlier than BAC-AL00C00B173,Versions earlier than PIC-AL00C00B173 has a use after free (UAF) vulnerability. An attacker can convince a user to install a malicious application which has a high privilege to exploit this vulnerability, Successful exploitation may cause arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advis
xecution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-smartphone-en - http://www.securityfocus.com/bid/101960
CVE ID: CVE-2017-8204 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T04:19:50.073Z Vendors: Huawei Technologies Co., Ltd. Products: Honor 9 Problem Types: buffer overflow Description: The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the driver of the smart phone, causing arbitrary code execution Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advis
execution Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170914-01-smartphone-en - http://www.securityfocus.com/bid/101962
CVE ID: CVE-2017-8205 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T19:09:16.589Z Vendors: Huawei Technologies Co., Ltd. Products: Honor 9 Problem Types: integer overflow Description: The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has integer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the driver of the smart phone, causing arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101963 - ht
execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101963 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170914-02-smartphone-en
CVE ID: CVE-2017-8206 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T19:47:01.452Z Vendors: Huawei Technologies Co., Ltd. Products: HONOR 7 Lite Problem Types: App Lock bypass Description: HONOR 7 Lite mobile phones with software of versions earlier than NEM-L21C432B352 have an App Lock bypass vulnerability. An attacker could perform specific operations to bypass the App Lock to use apps on a target mobile phone temporarily. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170829-01-applock-en
CVE ID: CVE-2017-8207 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T02:10:56.127Z Vendors: Huawei Technologies Co., Ltd. Products: honor 5C,honor 6x Problem Types: buffer overflow Description: The driver of honor 5C, honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution. Additional Ana
specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en
CVE ID: CVE-2017-8208 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T20:13:22.784Z Vendors: Huawei Technologies Co., Ltd. Products: honor 5C,honor 6x Problem Types: buffer overflow Description: The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution. Additional Anal
pecific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en