Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
include: CloudEngine 12800 versions V200R019C00SPC800; CloudEngine 5800 versions V200R019C00SPC800; CloudEngine 6800 versions V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R019C00SPC800; NE40E versions V800R011C00SPC200, V800R011C00SPC300, V800R011C10SPC100; NE40E-F versions V800R011C00SPC200, V800R011C10SPC100; NE40E-M versions V800R011C00SPC200, V800R011C10SPC100. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-dos-en
CVE ID: CVE-2020-1871 State: PUBLISHED Published: 2020-01-03T14:25:18 Last Updated: 2024-08-04T06:53:58.977Z Vendors: n/a Products: USG9500 Problem Types: Improper Credentials Management Description: USG9500 with software of V500R001C30SPC100; V500R001C30SPC200; V500R001C30SPC600; V500R001C60SPC500; V500R005C00SPC100; V500R005C00SPC200 have an improper credentials management vulnerability. The software does not properly manage certain credentials. Successful exploit could cause information disclosure or damage, and impact the confidentiality or integrity. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200102-01
Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200102-01-credential-en
CVE ID: CVE-2020-1872 State: PUBLISHED Published: 2020-02-18T01:44:14 Last Updated: 2024-08-04T06:53:58.761Z Vendors: Huawei Products: HUAWEI P10 Plus Problem Types: Digital Balance Bypass Description: Huawei smart phones P10 Plus with versions earlier than 9.1.0.201(C01E75R1P12T8), earlier than 9.1.0.252(C185E2R1P9T8), earlier than 9.1.0.252(C432E4R1P9T8), and earlier than 9.1.0.255(C576E6R1P8T8) have a digital balance bypass vulnerability. When re-configuring the mobile phone at the digital balance mode, an attacker can perform some operations to bypass the startup wizard, and then open some switch. As a result, the digital balance function is bypassed. Additional Analyst Notes: - CVE Prog
, and then open some switch. As a result, the digital balance function is bypassed. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-digitalbalance-en
CVE ID: CVE-2020-1873 State: PUBLISHED Published: 2020-02-28T18:14:50 Last Updated: 2024-08-04T06:53:59.099Z Vendors: n/a Products: NIP6800;Secospace USG6600;USG9500 Problem Types: Out-of-bounds Read Description: NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds read vulnerability. An unauthenticated attacker crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be exploited to cause the device reboot. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories
ot. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-01-outofboundread-en
CVE ID: CVE-2020-1874 State: PUBLISHED Published: 2020-02-28T18:21:52 Last Updated: 2024-08-04T06:53:59.532Z Vendors: n/a Products: NIP6800;Secospace USG6600;USG9500 Problem Types: Invalid Pointer Access Description: NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have a invalid pointer access vulnerability. The software system access an invalid pointer when operator logs in to the device and performs some operations. Successful exploit could cause certain process reboot. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-02-invalidpointer-en
CVE ID: CVE-2020-1875 State: PUBLISHED Published: 2020-02-28T18:05:21 Last Updated: 2024-08-04T06:53:58.739Z Vendors: n/a Products: NIP6800;Secospace USG6600;USG9500 Problem Types: Invalid Pointer Access Description: NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The software system access an invalid pointer when an abnormal condition occurs in certain operation. Successful exploit could cause certain process reboot. Affected product versions include:NIP6800 versions V500R001C30,V500R001C60SPC500;Secospace USG6600 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500;USG9500 versi
R001C30,V500R001C60SPC500;Secospace USG6600 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500;USG9500 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-01-wildpointer-en
CVE ID: CVE-2020-1876 State: PUBLISHED Published: 2020-02-28T18:42:04 Last Updated: 2024-08-04T06:53:58.633Z Vendors: n/a Products: NIP6800;Secospace USG6600;USG9500 Problem Types: Out-of-bounds Write Description: NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds write vulnerability. An unauthenticated attacker crafts malformed packets with specific parameter and sends the packets to the affected products. Due to insufficient validation of packets, which may be exploited to cause the process reboot. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawe
ditional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-01-outofwrite-en
CVE ID: CVE-2020-1877 State: PUBLISHED Published: 2020-02-28T18:48:56 Last Updated: 2024-08-04T06:53:58.801Z Vendors: n/a Products: NIP6800;Secospace USG6600;USG9500 Problem Types: Invalid Pointer Access Description: NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The software system access an invalid pointer when administrator log in to the device and performs some operations. Successful exploit could cause certain process reboot. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-05-invalidpointer-en
CVE ID: CVE-2020-1878 State: PUBLISHED Published: 2020-03-20T14:50:22 Last Updated: 2024-08-04T06:53:59.782Z Vendors: n/a Products: OxfordS-AN00A Problem Types: Improper Authentication Description: Huawei smartphone OxfordS-AN00A with versions earlier than 10.0.1.152D(C735E152R3P3),versions earlier than 10.0.1.160(C00E160R4P1) have an improper authentication vulnerability. Authentication to target component is improper when device performs an operation. Attackers exploit this vulnerability to obtain some information by loading malicious application, leading to information leak. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisorie
eak. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200311-01-informationleak-en - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-02-dos-en
CVE ID: CVE-2020-1879 State: PUBLISHED Published: 2020-03-20T15:02:28 Last Updated: 2024-08-04T06:53:59.797Z Vendors: n/a Products: HEGE-560;HEGE-570;OSCA-550;OSCA-550A;OSCA-550AX;OSCA-550X Problem Types: Improper Integrity Checking Description: There is an improper integrity checking vulnerability on some huawei products. The software of the affected product has an improper integrity check which may allow an attacker with high privilege to make malicious modifications.Affected product versions include:HEGE-560 versions 1.0.1.21(SP3);HEGE-570 versions 1.0.1.22(SP3);OSCA-550 versions 1.0.1.21(SP3);OSCA-550A versions 1.0.1.21(SP3);OSCA-550AX versions 1.0.1.21(SP3);OSCA-550X versions 1.0.1.21(S
versions 1.0.1.21(SP3);OSCA-550A versions 1.0.1.21(SP3);OSCA-550AX versions 1.0.1.21(SP3);OSCA-550X versions 1.0.1.21(SP3). Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200311-01-integrity-en - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-02-dos-en
CVE ID: CVE-2020-1880 State: PUBLISHED Published: 2020-04-27T15:14:32 Last Updated: 2024-08-04T06:53:59.672Z Vendors: Huawei Products: Lion-AL00C Problem Types: Denial of Service Description: Huawei smartphone Lion-AL00C with versions earlier than 10.0.0.205(C00E202R7P2) have a denial of service vulnerability. An attacker crafted specially file to the affected device. Due to insufficient input validation of the value when executing the file, successful exploit may cause device abnormal. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-02-dos-en
CVE ID: CVE-2020-1881 State: PUBLISHED Published: 2020-02-28T18:33:30 Last Updated: 2024-08-04T06:53:59.870Z Vendors: n/a Products: NIP6800;Secospace USG6600;USG9500 Problem Types: Resource Management Error Description: NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have have a resource management error vulnerability. An attacker needs to perform specific operations to trigger a function of the affected device. Due to improper resource management of the function, the vulnerability can be exploited to cause service abnormal on affected devices. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com
ce abnormal on affected devices. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-02-resource-en - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200429-01-invalidpointer-en
CVE ID: CVE-2020-1882 State: PUBLISHED Published: 2020-02-17T23:43:27 Last Updated: 2024-08-04T06:53:59.894Z Vendors: Huawei Products: Ever-L29B, HUAWEI Mate 20 RS, HUAWEI Mate 20 X, Honor Magic2 Problem Types: Improper Authorization Description: Huawei mobile phones Ever-L29B versions earlier than 10.0.0.180(C185E6R3P3), earlier than 10.0.0.180(C432E6R1P7), earlier than 10.0.0.180(C636E5R2P3); HUAWEI Mate 20 RS versions earlier than 10.0.0.175(C786E70R3P8); HUAWEI Mate 20 X versions earlier than 10.0.0.176(C00E70R2P8); and Honor Magic2 versions earlier than 10.0.0.175(C00E59R2P11) have an improper authorization vulnerability. Due to improper authorization of some function, attackers can byp
59R2P11) have an improper authorization vulnerability. Due to improper authorization of some function, attackers can bypass the authorization to perform some operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-phone-en
CVE ID: CVE-2020-1883 State: PUBLISHED Published: 2020-06-05T14:19:43 Last Updated: 2024-08-04T06:53:59.493Z Vendors: n/a Products: NIP6800, Secospace USG6600, USG9500 Problem Types: Memory Leak Description: Huawei products NIP6800;Secospace USG6600;USG9500 have a memory leak vulnerability. An attacker with high privileges exploits this vulnerability by continuously performing specific operations. Successful exploitation of this vulnerability can cause service abnormal. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200603-01-memory-en
CVE ID: CVE-2020-1885 State: PUBLISHED Published: 2020-04-08T19:55:12 Last Updated: 2024-08-04T06:53:59.851Z Vendors: Facebook Products: Oculus Desktop Problem Types: Elevation of Privilege Description: Writing to an unprivileged file from a privileged OVRRedir.exe process in Oculus Desktop before 1.44.0.32849 on Windows allows local users to write to arbitrary files and consequently gain privileges via vectors involving a hard link to a log file. Additional Analyst Notes: - CVE Program Container: References: - https://www.facebook.com/security/advisories/cve-2020-1885
CVE ID: CVE-2020-1886 State: PUBLISHED Published: 2020-09-03T21:10:18 Last Updated: 2024-08-04T06:53:59.886Z Vendors: Facebook Products: WhatsApp for Android, WhatsApp Business for Android Problem Types: CWE-120 Description: A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have allowed an out-of-bounds write via a specially crafted video stream after receiving and answering a malicious video call. Additional Analyst Notes: - CVE Program Container: References: - https://www.whatsapp.com/security/advisories/2020
CVE ID: CVE-2020-1887 State: PUBLISHED Published: 2020-03-12T23:50:15 Last Updated: 2024-08-04T06:54:00.410Z Vendors: Facebook Products: Osquery Problem Types: CWE-297 Description: Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osquery/osquery/pull/6197 - https://www.facebook.com/security/advisories/cve-2020-1887
CVE ID: CVE-2020-1888 State: PUBLISHED Published: 2020-03-03T15:00:25 Last Updated: 2024-08-04T06:53:59.615Z Vendors: Facebook Products: HHVM Problem Types: CWE-125 Description: Insufficient boundary checks when decoding JSON in handleBackslash reads out of bounds memory, potentially leading to DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 (inclusive), versions between 4.9.0 and 4.32.0 (inclusive), and versions prior to 4.8.7. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/facebook/hhvm/commit/b3679121bb3c7017ff04b4c08402ffff5cf59b13 - https://hhvm.com/blog/2020/02/20/security-updat
thub.com/facebook/hhvm/commit/b3679121bb3c7017ff04b4c08402ffff5cf59b13 - https://hhvm.com/blog/2020/02/20/security-update.html
CVE ID: CVE-2020-1889 State: PUBLISHED Published: 2020-09-03T21:10:18 Last Updated: 2024-08-04T06:53:59.559Z Vendors: Facebook Products: WhatsApp Desktop Problem Types: CWE-265 Description: A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalation of privilege if combined with a remote code execution vulnerability inside the sandboxed renderer process. Additional Analyst Notes: - CVE Program Container: References: - https://www.whatsapp.com/security/advisories/2020/
CVE ID: CVE-2020-1890 State: PUBLISHED Published: 2020-09-03T21:10:18 Last Updated: 2024-08-04T06:53:59.902Z Vendors: Facebook Products: WhatsApp for Android, WhatsApp Business for Android Problem Types: CWE-20 Description: A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have caused the recipient of a sticker message containing deliberately malformed data to load an image from a sender-controlled URL without user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://www.whatsapp.com/security/advisories/2020
CVE ID: CVE-2020-1891 State: PUBLISHED Published: 2020-09-03T21:10:19 Last Updated: 2024-08-04T06:53:59.925Z Vendors: Facebook Products: WhatsApp Android, WhatsApp Business for Android, WhatsApp iPhone, WhatsApp Business for iPhone Problem Types: CWE-787 Description: A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, WhatsApp for iPhone prior to v2.20.20, and WhatsApp Business for iPhone prior to v2.20.20 could have allowed an out-of-bounds write on 32-bit devices. Additional Analyst Notes: - CVE Program Container: References: - https://www.whatsapp.com/security/advisories/2020
CVE ID: CVE-2020-1892 State: PUBLISHED Published: 2020-03-03T15:00:26 Last Updated: 2024-08-04T06:53:59.519Z Vendors: Facebook Products: HHVM Problem Types: CWE-125 Description: Insufficient boundary checks when decoding JSON in JSON_parser allows read access to out of bounds memory, potentially leading to information leak and DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 (inclusive), versions between 4.9.0 and 4.32.0 (inclusive), and versions prior to 4.8.7. Additional Analyst Notes: - CVE Program Container: References: - https://hhvm.com/blog/2020/02/20/security-update.html - https://github.com/facebook/hhvm/commit/d
ntainer: References: - https://hhvm.com/blog/2020/02/20/security-update.html - https://github.com/facebook/hhvm/commit/dabd48caf74995e605f1700344f1ff4a5d83441d
CVE ID: CVE-2020-1893 State: PUBLISHED Published: 2020-03-03T15:00:26 Last Updated: 2024-08-04T06:53:59.787Z Vendors: Facebook Products: HHVM Problem Types: CWE-125 Description: Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially leading to DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 (inclusive), versions between 4.9.0 and 4.32.0 (inclusive), and versions prior to 4.8.7. Additional Analyst Notes: - CVE Program Container: References: - https://hhvm.com/blog/2020/02/20/security-update.html - https://github.com/facebook/hhvm/commit/bd586671a3c22eb2f07e55f11b3ce64e1f7961e7
CVE ID: CVE-2020-1894 State: PUBLISHED Published: 2020-09-03T21:10:19 Last Updated: 2024-08-04T06:53:59.872Z Vendors: Facebook Products: WhatsApp Android, WhatsApp Business for Android, WhatsApp iPhone, WhatsApp Business for iPhone Problem Types: CWE-787 Description: A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior to v2.20.30, and WhatsApp Business for iPhone prior to v2.20.30 could have allowed arbitrary code execution when playing a specially crafted push to talk message. Additional Analyst Notes: - CVE Program Container: References: - https://www.whatsapp.com/security/advisories/2020
CVE ID: CVE-2020-1895 State: PUBLISHED Published: 2020-04-09T16:20:12 Last Updated: 2024-08-04T06:53:59.862Z Vendors: Facebook Products: Instagram for Android Problem Types: CWE-680 Description: A large heap overflow could occur in Instagram for Android when attempting to upload an image with specially crafted dimensions. This affects versions prior to 128.0.0.26.128. Additional Analyst Notes: - CVE Program Container: References: - https://www.facebook.com/security/advisories/cve-2020-1895
CVE ID: CVE-2020-1896 State: PUBLISHED Published: 2021-02-02T06:50:11 Last Updated: 2024-08-04T06:53:59.880Z Vendors: Facebook Products: Hermes Problem Types: CWE-121 Description: A stack overflow vulnerability in Facebook Hermes 'builtin apply' prior to commit 86543ac47e59c522976b5632b8bf9a2a4583c7d2 (https://github.com/facebook/hermes/commit/86543ac47e59c522976b5632b8bf9a2a4583c7d2) allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected. Additional Analyst Notes: - CVE Program Container: References: - h
nce, most React Native applications are not affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.facebook.com/security/advisories/cve-2020-1896 - https://github.com/facebook/hermes/commit/86543ac47e59c522976b5632b8bf9a2a4583c7d2
CVE ID: CVE-2020-1897 State: PUBLISHED Published: 2020-05-18T21:30:14 Last Updated: 2024-08-04T06:53:59.853Z Vendors: Facebook Products: proxygen Problem Types: Use-after-free (CWE-ID 416) Description: A use-after-free is possible due to an error in lifetime management in the request adaptor when a malicious client invokes request error handling in a specific sequence. This issue affects versions of proxygen prior to v2020.05.18.00. Additional Analyst Notes: - CVE Program Container: References: - https://www.facebook.com/security/advisories/cve-2020-1897
CVE ID: CVE-2020-1898 State: PUBLISHED Published: 2021-03-11T00:55:18 Last Updated: 2024-08-04T06:53:59.646Z Vendors: Facebook Products: HHVM Problem Types: CWE-674 Description: The fb_unserialize function did not impose a depth limit for nested deserialization. That meant a maliciously constructed string could cause deserialization to recurse, leading to stack exhaustion. This issue affected HHVM prior to v4.32.3, between versions 4.33.0 and 4.56.0, 4.57.0, 4.58.0, 4.58.1, 4.59.0, 4.60.0, 4.61.0, 4.62.0. Additional Analyst Notes: - CVE Program Container: References: - https://hhvm.com/blog/2020/06/30/security-update.html - https://github.com/facebook/hhvm/commit/1746dfb11fc0048366f34669e743
s://hhvm.com/blog/2020/06/30/security-update.html - https://github.com/facebook/hhvm/commit/1746dfb11fc0048366f34669e74318b8278a684c
CVE ID: CVE-2020-1899 State: PUBLISHED Published: 2021-03-11T00:55:19 Last Updated: 2024-08-04T06:53:59.985Z Vendors: Facebook Products: HHVM Problem Types: CWE-822 Description: The unserialize() function supported a type code, "S", which was meant to be supported only for APC serialization. This type code allowed arbitrary memory addresses to be accessed as if they were static StringData objects. This issue affected HHVM prior to v4.32.3, between versions 4.33.0 and 4.56.0, 4.57.0, 4.58.0, 4.58.1, 4.59.0, 4.60.0, 4.61.0, 4.62.0. Additional Analyst Notes: - CVE Program Container: References: - https://hhvm.com/blog/2020/06/30/security-update.html - https://github.com/facebook/hhvm/commit/110
ainer: References: - https://hhvm.com/blog/2020/06/30/security-update.html - https://github.com/facebook/hhvm/commit/1107228a5128d3ca1c4add8ac1635d933cbbe2e9
CVE ID: CVE-2020-1900 State: PUBLISHED Published: 2021-03-11T00:55:20 Last Updated: 2024-08-04T06:54:00.541Z Vendors: Facebook Products: HHVM Problem Types: CWE-416 Description: When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property array before inserting anything into it. Otherwise the array might resize, invalidating previously stored references. This pre-reservation was not occurring in HHVM prior to v4.32.3, between versions 4.33.0 and 4.56.0, 4.57.0, 4.58.0, 4.58.1, 4.59.0, 4.60.0, 4.61.0, 4.62.0. Additional Analyst Notes: - CVE Program Container: References: - https://hhvm.com/blog/2020/06/30/security-update.html - https://g
Analyst Notes: - CVE Program Container: References: - https://hhvm.com/blog/2020/06/30/security-update.html - https://github.com/facebook/hhvm/commit/c1c4bb0cf9e076aafaf4ff3515556ef9faf906f3
CVE ID: CVE-2020-1901 State: PUBLISHED Published: 2020-10-06T17:35:24 Last Updated: 2024-08-04T06:54:00.462Z Vendors: Facebook Products: WhatsApp for iOS Problem Types: CWE-400 Description: Receiving a large text message containing URLs in WhatsApp for iOS prior to v2.20.91.4 could have caused the application to freeze while processing the message. Additional Analyst Notes: - CVE Program Container: References: - https://www.whatsapp.com/security/advisories/2020/
CVE ID: CVE-2020-1902 State: PUBLISHED Published: 2020-10-06T17:35:25 Last Updated: 2024-08-04T06:53:59.913Z Vendors: Facebook Products: WhatsApp for Android, WhatsApp Business for Android Problem Types: CWE-200 Description: A user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20.108 to v2.20.140 or WhatsApp Business for Android from v2.20.35 to v2.20.49 could have been sent to the Google service over plain HTTP. Additional Analyst Notes: - CVE Program Container: References: - https://www.whatsapp.com/security/advisories/2020/