Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-8126 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T02:53:18.489Z Vendors: Huawei Technologies Co., Ltd. Products: UMA Problem Types: privilege elevation Description: The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en
CVE ID: CVE-2017-8127 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T18:38:18.173Z Vendors: Huawei Technologies Co., Ltd. Products: UMA Problem Types: XSS Description: The UMA product with software V200R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craft malicious links or scripts to launch XSS attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en
CVE ID: CVE-2017-8128 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T01:41:17.091Z Vendors: Huawei Technologies Co., Ltd. Products: UMA Problem Types: privilege elevation Description: The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en
CVE ID: CVE-2017-8129 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T01:11:30.305Z Vendors: Huawei Technologies Co., Ltd. Products: UMA Problem Types: privilege elevation Description: The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en
CVE ID: CVE-2017-8130 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T20:31:32.805Z Vendors: Huawei Technologies Co., Ltd. Products: UMA Problem Types: leak vulnerabilities Description: The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information, causing information leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en
CVE ID: CVE-2017-8131 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T00:20:40.696Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere OpenStack Problem Types: Command Injection Description: The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170531-01-openstack-en
CVE ID: CVE-2017-8132 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T17:09:08.649Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere OpenStack Problem Types: Command Injection Description: The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170531-01-openstack-en
CVE ID: CVE-2017-8133 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T02:52:10.890Z Vendors: Huawei Technologies Co., Ltd. Products: iManager NetEco Problem Types: Command Injection Description: Huawei iManager NetEco with software V600R008C00 and V600R008C10 has a command injection vulnerability. An authenticated, remote attacker could exploit this vulnerability to send malicious packets to a target device. Successful exploit could enable a low privileged user to execute commands that a high privileged user could execute, causing the files to be tampered with or deleted. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt
ampered with or deleted. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170531-01-neteco-en
CVE ID: CVE-2017-8134 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T03:53:39.630Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere OpenStack Problem Types: Command Injection Description: The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170531-01-openstack-en
CVE ID: CVE-2017-8135 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T22:45:01.432Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere OpenStack Problem Types: Command Injection Description: The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102262 - http://www.huawei.com/en/psirt/security-advisories/hua
ontainer: References: - http://www.securityfocus.com/bid/102262 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170531-01-openstack-en
CVE ID: CVE-2017-8136 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T01:46:27.313Z Vendors: Huawei Technologies Co., Ltd. Products: HedEx Lite Problem Types: arbitrary file download Description: HedEx Earlier than V200R006C00 versions has an arbitrary file download vulnerability. An attacker could exploit it to download arbitrary files on a target device to cause information leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170531-01-hedex-en
CVE ID: CVE-2017-8137 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T01:25:47.480Z Vendors: Huawei Technologies Co., Ltd. Products: HedEx Lite Problem Types: DLL hijacking Description: HedEx Earlier than V200R006C00 versions has a dynamic link library (DLL) hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170531-01-hedex-en
CVE ID: CVE-2017-8138 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T19:00:29.212Z Vendors: Huawei Technologies Co., Ltd. Products: HedEx Lite Problem Types: CSRF Description: HedEx Earlier than V200R006C00 versions has a cross-site request forgery (CSRF) vulnerability. An attacker could trick a user into accessing a website containing malicious scripts which may tamper with configurations and interrupt normal services. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170531-01-hedex-en
CVE ID: CVE-2017-8139 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T20:52:43.283Z Vendors: Huawei Technologies Co., Ltd. Products: HedEx Lite Problem Types: XSS Description: HedEx Earlier than V200R006C00 versions have the stored cross-site scripting (XSS) vulnerability. Attackers can exploit the vulnerability to plant malicious scripts into the configuration file to interrupt the services of legitimate users. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170531-01-hedex-en
CVE ID: CVE-2017-8140 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T02:42:29.955Z Vendors: Huawei Technologies Co., Ltd. Products: P9 Plus Problem Types: Memory Double Free Description: The soundtrigger driver in P9 Plus smart phones with software versions earlier than VIE-AL10BC00B353 has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can start multiple threads and try to free specific memory, which could triggers double free and causes a system crash or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advis
xecution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170605-01-smartphone-en
CVE ID: CVE-2017-8141 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T19:20:24.068Z Vendors: Huawei Technologies Co., Ltd. Products: P10 Plus Problem Types: Memory Double Free Description: The Touch Panel (TP) driver in P10 Plus smart phones with software versions earlier than VKY-AL00C00B153 has a memory double free vulnerability. An attacker with the root privilege of the Android system tricks a user into installing a malicious application, and the application can start multiple threads and try to free specific memory, which could triggers double free and causes a system crash or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: Referenc
free and causes a system crash or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-smartphone-en
CVE ID: CVE-2017-8142 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T19:04:22.668Z Vendors: Huawei Technologies Co., Ltd. Products: Mate 9, Mate 9 Pro Problem Types: Use After Free Description: The Trusted Execution Environment (TEE) module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than MHA-AL00BC00B221 and versions earlier than LON-AL00BC00B221 has a use after free (UAF) vulnerability. An attacker tricks a user into installing a malicious application, and the application can start multiple threads and try to create and free specific memory, which could triggers access memory after free it and causes a system crash or arbitrary cod
te and free specific memory, which could triggers access memory after free it and causes a system crash or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170615-01-smartphone-en
CVE ID: CVE-2017-8143 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T03:17:53.947Z Vendors: Huawei Technologies Co., Ltd. Products: Honor 5C, P9 Lite Problem Types: DoS Description: Wi-Fi driver of Honor 5C and P9 Lite Huawei smart phones with software versions earlier than NEM-L21C432B351 and versions earlier than VNS-L21C10B381 has a DoS vulnerability. An attacker may trick a user into installing a malicious application and the application can access invalid address of driver to crash the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99256 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20
: References: - http://www.securityfocus.com/bid/99256 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170623-01-smartphone-en
CVE ID: CVE-2017-8144 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T03:19:08.120Z Vendors: Huawei Technologies Co., Ltd. Products: Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Problem Types: Resource Exhaustion Description: Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Huawei smartphones with software the versions before CAM-L03C605B143CUSTC605D003,the versions before Prague-L03C605B161,the versions before Prague-L23C605B160,the versions before MHA-AL00C00B225,the versions before LON-AL00C00B225,the versions before VTR-AL00C00B167,the versions before VTR-TL00C01B167,the versions before VKY-AL00C00B167,the versions before VKY-TL00C01B167 have a resource
versions before VTR-TL00C01B167,the versions before VKY-AL00C00B167,the versions before VKY-TL00C01B167 have a resource exhaustion vulnerability due to configure setting. An attacker tricks a user into installing a malicious application, the application may turn on the device flash-light and rapidly drain the device battery. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170725-01-smartphone-en
CVE ID: CVE-2017-8145 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T19:20:17.219Z Vendors: Huawei Technologies Co., Ltd. Products: P10, P10 Plus Problem Types: DoS Description: The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions before VKY-AL00C00B167, versions before VKY-TL00C01B167 has a DoS vulnerability. An attacker may trick a user into installing a malicious application, and the application can send given parameter to call module to crash the call and data communication process. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/s
communication process. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170725-02-smartphone-en
CVE ID: CVE-2017-8146 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T20:21:59.137Z Vendors: Huawei Technologies Co., Ltd. Products: P10, P10 Plus Problem Types: DoS Description: The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions before VKY-AL00C00B167, versions before VKY-TL00C01B167 has a DoS vulnerability. An attacker may trick a user into installing a malicious application, and the application can send given parameter to call module to crash the call and data communication process. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/s
CVE ID: CVE-2017-8147 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T17:03:05.616Z Vendors: Huawei Technologies Co., Ltd. Products: AC6005,AC6605,AR1200,AR200,AR3200,CloudEngine 12800,CloudEngine 5800,CloudEngine 6800,CloudEngine 7800,CloudEngine 8800,E600,S12700,S1700,S2300,S2700,S5300,S5700,S6300,S6700,S7700,S9300,S9700,Secospace USG6600, Problem Types: MaxAge LSA Description: AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200 V200R005C20SPC026T,CloudEngine 12800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,
3200 V200R005C20SPC026T,CloudEngine 12800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 5800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 6800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 7800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 8800 with software V100R006C00, V200R001C00,E600 V200R008C00,S12700 with software V200R005C00, V200R006C00, V200R007C00, V200R008C00,S1700 with software V100R006C00, V100R007C00, V200R006C00,S2300 with software V100R005C00, V100R006C00, V100R006C03, V100R006C05, V200R003C00, V200R00
0, V100R007C00, V200R006C00,S2300 with software V100R005C00, V100R006C00, V100R006C03, V100R006C05, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R006C00, V200R007C00, V200R008C00,S2700 with software V100R005C00, V100R006C00, V100R006C03, V100R006C05, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R006C00, V200R007C00, V200R008C00,S5300 with software V100R005C00, V100R006C00, V100R006C01, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S5700 with software V100R005C00, V100R006C00, V100R006C01, V200R001C00, V200R001C0
V200R006C00, V200R007C00, V200R008C00,S5700 with software V100R005C00, V100R006C00, V100R006C01, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S6300 with software V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R008C00,S6700 with software V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S7700 with software V100R003C00, V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S9300 with software V100R00
0, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S9300 with software V100R001C00, V100R002C00, V100R003C00, V100R006C00, V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R008C10,S9700 with software V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00,Secospace USG6600 V500R001C00SPC050 have a MaxAge LSA vulnerability due to improper OSPF implementation. When the device receives special LSA packets, the LS (Link Status) age would be set to MaxAge, 3600 seconds. An attacker can exploit this vulnerability to poison the route table and launch a DoS attack. Additional Ana
00 seconds. An attacker can exploit this vulnerability to poison the route table and launch a DoS attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170720-01-ospf-en
CVE ID: CVE-2017-8148 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T18:17:50.876Z Vendors: Huawei Technologies Co., Ltd. Products: P9 Problem Types: DoS Description: Audio driver in P9 smartphones with software The versions before EVA-AL10C00B389 has a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and the race condition cause null pointer accessing during the application access shared resource, which make the system reboot. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-01-smartphone-en
CVE ID: CVE-2017-8149 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T19:36:58.329Z Vendors: Huawei Technologies Co., Ltd. Products: P10, P10 Plus Problem Types: Out-of-Bounds Memory Access Description: The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an out-of-bounds memory access vulnerability due to the lack of parameter validation. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. the APP can modify specific data to cause buffer overflow in the next system
ick a user into installing a malicious APP. the APP can modify specific data to cause buffer overflow in the next system reboot, causing out-of-bounds memory read which can continuous system reboot. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-01-smartphone-en
CVE ID: CVE-2017-8150 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T16:48:35.815Z Vendors: Huawei Technologies Co., Ltd. Products: P10, P10 Plus Problem Types: Arbitrary Memory Write Description: The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an arbitrary memory write vulnerability due to the lack of parameter validation. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause arbitrary memory writing in the next system
into installing a malicious APP. The APP can modify specific data to cause arbitrary memory writing in the next system reboot, causing continuous system reboot or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-02-smartphone-en
CVE ID: CVE-2017-8151 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T20:57:56.269Z Vendors: Huawei Technologies Co., Ltd. Products: Honor 5S Problem Types: Authentication Bypass Description: Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have an authentication bypass vulnerability due to the improper design of some components. An attacker can get a user's smart phone and install malicious apps in the mobile phone, allowing the attacker to reset the password and fingerprint of the phone without authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-
onal Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-03-smartphone-en
CVE ID: CVE-2017-8152 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T01:06:50.328Z Vendors: Huawei Technologies Co., Ltd. Products: Honor 5S Problem Types: FRP bypass Description: Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have a Factory Reset Protection (FRP) bypass security vulnerability due to the improper design. An attacker can access factory reset page without authorization by only dial with special code. The attacker can exploit this vulnerability to restore the phone to factory settings. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170901-0
st Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170901-02-smartphone-en
CVE ID: CVE-2017-8153 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T01:27:00.762Z Vendors: Huawei Technologies Co., Ltd. Products: VMall (for Android) Problem Types: Privilege Escalation Description: Huawei VMall (for Android) with the versions before 1.5.8.5 have a privilege elevation vulnerability due to improper design. An attacker can trick users into installing a malicious app which can send out HTTP requests and execute JavaScript code in web pages without obtaining the Internet access permission. Successful exploit could lead to resource occupation or information leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en