deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-20789
Published: 2020-04-26
Description: Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/croogo/croogo/compare/3.0.6...3.0.7; https://github.com/croogo/croogo/issues/940; https://github.com/croogo/croogo/compare/3.0.6...3.0.7
CVE: CVE-2020-12265
Published: 2020-04-26
Description: The decompress package before 4.2.1 for Node.js is vulnerable to Arbitrary File Write via ../ in an archive member, when a symlink is used, because of Directory Traversal.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-59
References: https://github.com/kevva/decompress/issues/71; https://github.com/kevva/decompress/pull/73; https://www.npmjs.com/advisories/1217
CVE: CVE-2020-12267
Published: 2020-04-27
Description: setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20450; https://codereview.qt-project.org/c/qt/qtbase/+/291706; https://security.gentoo.org/glsa/202007-38
CVE: CVE-2020-12268
Published: 2020-04-27
Description: jbig2_image_compose in jbig2_image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00034.html; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20332; https://github.com/ArtifexSoftware/jbig2dec/commit/0726320a4b55078e9d8deb590e477d598b3da66e
CVE: CVE-2020-12270
Published: 2020-04-27
Description: React Native Bluetooth Scan in Bluezone 1.0.0 uses six-character alphanumeric IDs, which might make it easier for remote attackers to interfere with COVID-19 contact tracing by using many IDs. NOTE: the vendor disputes the relevance of this report because the recipient of an F1 alert will know it was a false alert if contact-history comparison fails (i.e., an F0 is not actually part of the contact history obtained from the device of this recipient, or this recipient is not actually part of the contact history obtained from the device of an F0)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-330
References: https://bluezone.ai/CVE; https://github.com/BluezoneGlobal/bluezone-app/blob/afa15fcec391f0edc51d0486a4ca84dd2520bbb3/CHANGELOG.md; https://github.com/BluezoneGlobal/bluezone-app/blob/afa15fcec391f0edc51d0486a4ca84dd2520bbb3/package.json#L27
CVE: CVE-2020-12271
Published: 2020-04-27
Description: A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG Firewall devices, as exploited in the wild in April 2020. This affected devices configured with either the administration (HTTPS) service or the User Portal exposed on the WAN zone. A successful attack may have caused remote code execution that exfiltrated usernames and hashed passwords for the local device admin(s), portal admins, and user accounts used for remote access (but not external Active Directory or LDAP passwords)
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://community.sophos.com/kb/en-us/135412; https://cwe.mitre.org/data/definitions/89.html; https://news.sophos.com/en-us/2020/04/26/asnarok/
CVE: CVE-2019-18223
Published: 2020-04-27
Description: ZOOM International Call Recording 6.3.1 suffers from multiple authenticated stored XSS vulnerabilities via the phoneNumber field in the (1) User Edit or (2) User Add form, (3) name field in the Role Add form, (4) name or number field in the Edit Group form, (5) tagKey or tagValue field in the Recording Rules Configuration, or (6) txt_69735:/VemailAddress/value or txt_75767:/VemailFrom/value field in callrec/config.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-18223-XSS-ZoomCallRecording; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-18223-XSS-ZoomCallRecording
CVE: CVE-2020-10647
Published: 2020-04-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-10664
Published: 2020-04-27
Description: The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2020-10664; https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2020-10664
CVE: CVE-2020-10996
Published: 2020-04-27
Description: An issue was discovered in Percona XtraDB Cluster before 5.7.28-31.41.2. A bundled script inadvertently sets a static transition_key for SST processes in place of the random key expected.
CVSS Score: 8.1 (HIGH)
CWE: CWE-798, CWE-838
References: https://jira.percona.com/browse/PXC-3117; https://www.percona.com/blog/2020/04/20/cve-2020-10996-percona-xtradb-cluster-sst-script-static-key/; https://www.percona.com/doc/percona-xtradb-cluster/LATEST/release-notes/Percona-XtraDB-Cluster-5.7.28-31.41.2.html
CVE: CVE-2020-10997
Published: 2020-04-27
Description: Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at run time. In addition, when --history is passed at run time, this command line is also written to the PERCONA_SCHEMA.xtrabackup_history table.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://jira.percona.com/browse/PXB-2142; https://www.percona.com/blog/2020/04/16/cve-2020-10997-percona-xtrabackup-information-disclosure-of-command-line-arguments/; https://jira.percona.com/browse/PXB-2142
CVE: CVE-2020-12052
Published: 2020-04-27
Description: Grafana version < 6.7.3 is vulnerable for annotation popup XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://community.grafana.com/t/release-notes-v6-7-x/27119; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://community.grafana.com/t/release-notes-v6-7-x/27119
CVE: CVE-2020-12273
Published: 2020-04-27
Description: In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials.
CVSS Score: 7.5 (HIGH)
CWE: CWE-311, CWE-522
References: http://mantis.testlink.org/view.php?id=8895; https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/72271ef057e6e4a95c[PII_REDACTED]ea646f7b5462; http://mantis.testlink.org/view.php?id=8895
CVE: CVE-2020-12274
Published: 2020-04-27
Description: In TestLink 1.9.20, the lib/cfields/cfieldsExport.php goback_url parameter causes a security risk because it depends on client input and is not constrained to lib/cfields/cfieldsView.php at the web site associated with the session.
CVSS Score: 9.8 (CRITICAL)
References: http://mantis.testlink.org/view.php?id=8894; https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/2d17cd00f981f8e8c97de34a12e368ba2a55e3d0; http://mantis.testlink.org/view.php?id=8894
CVE: CVE-2019-20790
Published: 2020-04-27
Description: OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, allows attacks that bypass SPF and DMARC authentication in situations where the HELO field is inconsistent with the MAIL FROM field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-290
References: https://bugs.launchpad.net/pypolicyd-spf/+bug/1838816; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2D4JGHMALEJEWWG56DKR5OZB22TK7W5B/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KBOGOQOK3TIWWJV66MW5YWNRJAFFYGR5/
CVE: CVE-2019-4729
Published: 2020-04-27
Description: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 172519.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-209
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/172519; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6193425
CVE: CVE-2020-11420
Published: 2020-04-27
Description: UPS Adapter CS141 before 1.90 allows Directory Traversal. An attacker with Admin or Engineer login credentials could exploit the vulnerability by manipulating variables that reference files and by doing this achieve access to files and directories outside the web root folder. An attacker may access arbitrary files and directories stored in the file system, but integrity of the files are not jeopardized as attacker have read access rights only.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://library.e.abb.com/public/ee46f3ff5823400f991ebd9bd43a297e/2CMT2020-005913%20Security%20Advisory%20CS141.pdf; https://www.generex.de/index.php?option=com_content&task=view&id=185&Itemid=249; https://www.generex.de/support/changelogs/cs141/page:2
CVE: CVE-2020-12272
Published: 2020-04-27
Description: OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail message. This is caused by incorrect parsing and interpretation of SPF/DKIM authentication results, as demonstrated by the example.net(.example.com substring.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-290
References: https://lists.debian.org/debian-lts-announce/2023/08/msg00035.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2D4JGHMALEJEWWG56DKR5OZB22TK7W5B/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KBOGOQOK3TIWWJV66MW5YWNRJAFFYGR5/
CVE: CVE-2020-9489
Published: 2020-04-27
Description: A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade to 1.24.1 or later. The vulnerabilities in the MP4Parser were partially fixed by upgrading the com.googlecode:isoparser:1.1.22 dependency to org.tallison:isoparser:1.9.41.2. For unrelated security reasons, we upgraded org.apache.cxf to 3.3.6 as part of the 1.24.1 release.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: https://lists.apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b%40%3Cnotifications.james.apache.org%3E; https://lists.apache.org/thread.html/r4d943777e36ca3aa6305a45da5acccc54ad894f2d5a07186cfa2442c%40%3Cdev.tika.apache.org%3E; https://www.oracle.com//security-alerts/cpujul2021.html
CVE: CVE-2018-21093
Published: 2020-04-27
Description: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D8500 before 1.0.3.42, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70, EX6000 before 1.0.0.30, EX6100 before 1.0.2.24, EX6120 before 1.0.0.40, EX6130 before 1.0.0.22, EX6150 before 1.0.0.42, EX6200 before 1.0.3.88, EX7000 before 1.0.0.66, R6250 before 1.0.4.26, R6300-2CXNAS before 1.0.3.60, R6300v2 before 1.0.4.28, R6400 before 1.0.1.36, R6400v2 before 1.0.2.52, R6700 before 1.0.1.46, R6900 before 1.0.1.46, R7000 before 1.0.9.28, R7000P before 1.3.1.44, R6900P before 1.3.1.44, R7100LG before 1.0.0.46, R7300 before 1.0.0.68, R7900 before 1.0.2.10, R8000 before 1.0.4.18, R8000P before 1.3.0.10, R7900P before 1.3.0.10, R8500 before 1.0.2.122, R8300 before 1.0.2.122, RBW30 before 2.1.2.6, WN2500RPv2 before 1.0.0.54, and WNR3500Lv2 before 1.2.0.56.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://kb.netgear.com/000060456/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-Modem-Routers-Wireless-Extenders-and-Orbi-Satellites-PSV-2017-2011; https://kb.netgear.com/000060456/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-Modem-Routers-Wireless-Extenders-and-Orbi-Satellites-PSV-2017-2011
CVE: CVE-2018-21094
Published: 2020-04-27
Description: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.
CVSS Score: 7.3 (HIGH)
References: https://kb.netgear.com/000060460/Security-Advisory-for-a-Security-Misconfiguration-on-Some-Wireless-Access-Points-PSV-2018-0350; https://kb.netgear.com/000060460/Security-Advisory-for-a-Security-Misconfiguration-on-Some-Wireless-Access-Points-PSV-2018-0350
CVE: CVE-2019-18823
Published: 2020-04-27
Description: HTCondor up to and including stable series 8.8.6 and development series 8.9.4 has Incorrect Access Control. It is possible to use a different authentication method to submit a job than the administrator has specified. If the administrator has configured the READ or WRITE methods to include CLAIMTOBE, then it is possible to impersonate another user to the condor_schedd. (For example to submit or remove jobs)
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://lists.debian.org/debian-lts-announce/2021/08/msg00000.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3EOTJJOSMYKXIYXWSG3H4KN332EDSEB6/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5YCZXYS67MLJSHR4OLSWVHBE6PZJSB/
CVE: CVE-2019-20002
Published: 2020-04-27
Description: Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value (provided by a low-privileged user in the Subject field of a help request form) that is mishandled in a TicketActions/view?tab=group TSV export by an admin user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1236
References: https://medium.com/%40ayaan.saikia91/formula-injection-vulnerability-on-solarwinds-webhelpdesk-12-7-1-37569cd4cdc1; https://medium.com/%40ayaan.saikia91/formula-injection-vulnerability-on-solarwinds-webhelpdesk-12-7-1-37569cd4cdc1
CVE: CVE-2020-11415
Published: 2020-04-27
Description: An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1. Admin users can retrieve the LDAP server system username/password (as configured in nxrm) in cleartext.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-312
References: https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]54; https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]54
CVE: CVE-2020-11810
Published: 2020-04-27
Description: An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 (P_DATA_V2) packet using a victim's peer-id. Normally such packets are dropped, but if this packet arrives before the data channel crypto parameters have been initialized, the victim's connection will be dropped. This requires careful timing due to the small time window (usually within a few seconds) between the victim client connection starting and the server PUSH_REPLY response back to the client. This attack will only work if Negotiable Cipher Parameters (NCP) is in use.
CVSS Score: 3.7 (LOW)
CWE: CWE-362
References: https://bugzilla.suse.com/show_bug.cgi?id=1169925; https://community.openvpn.net/openvpn/ticket/1272; https://github.com/OpenVPN/openvpn/commit/37bc691e7d26ea4eb61a8a434ebd7a9ae76225ab
CVE: CVE-2020-11817
Published: 2020-04-27
Description: In Rukovoditel V2.5.2, attackers can upload an arbitrary file to the server just changing the the content-type value. As a result of that, an attacker can execute a command on the server. This specific attack only occurs with the Maintenance Mode setting.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://fatihhcelik.blogspot.com/2020/01/rukovoditel-maintenance-mode.html; https://fatihhcelik.blogspot.com/2020/01/rukovoditel-maintenance-mode.html
CVE: CVE-2020-11821
Published: 2020-04-27
Description: In Rukovoditel 2.5.2, users' passwords and usernames are stored in a cookie with URL encoding, base64 encoding, and hashing. Thus, an attacker can easily apply brute force on them.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-522
References: https://fatihhcelik.blogspot.com/2020/01/rukovoditel-password-hash-in-cookie-url.html; https://fatihhcelik.blogspot.com/2020/01/rukovoditel-password-hash-in-cookie-url.html
CVE: CVE-2020-11822
Published: 2020-04-27
Description: In Rukovoditel 2.5.2, there is a stored XSS vulnerability on the application structure --> user access groups page. Thus, an attacker can inject malicious script to steal all users' valuable data.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://fatihhcelik.blogspot.com/2020/01/rukovoditel-stored-xss-via-group-name.html; https://fatihhcelik.blogspot.com/2020/01/rukovoditel-stored-xss-via-group-name.html
CVE: CVE-2020-12120
Published: 2020-04-27
Description: The Correos Express addon for PrestaShop 1.6 through 1.7 allows remote attackers to obtain sensitive information, such as a service's owner password that can be used to modify orders via SOAP. Attackers can also retrieve information about orders or buyers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://addons.prestashop.com/en/delivery-date/27273-correos-express-solutions-of-urgent-transport.html; https://ia-informatica.com/it/CVE-2020-12120; https://addons.prestashop.com/en/delivery-date/27273-correos-express-solutions-of-urgent-transport.html
CVE: CVE-2020-12133
Published: 2020-04-27
Description: The Apros Evolution, ConsciusMap, and Furukawa provisioning systems through 2.8.1 allow remote code execution because of javax.faces.ViewState Java deserialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://packetstormsecurity.com/files/157383/Furukawa-Electric-ConsciusMAP-2.8.1-Java-Deserialization-Remote-Code-Execution.html; https://www.furukawa.co.jp; https://www.tecnoredsa.com.ar
CVE: CVE-2020-12138
Published: 2020-04-27
Description: AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical memory into the virtual address space of the calling process. This could enable low-privileged users to achieve NT AUTHORITY\SYSTEM privileges via a DeviceIoControl call associated with MmMapIoSpace, IoAllocateMdl, MmBuildMdlForNonPagedPool, or MmMapLockedPages.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://eclypsium.com/2019/11/12/mother-of-all-drivers/; https://h0mbre.github.io/atillk64_exploit/; https://eclypsium.com/2019/11/12/mother-of-all-drivers/
CVE: CVE-2020-12242
Published: 2020-04-27
Description: Valve Source allows local users to gain privileges by writing to the /tmp/hl2_relaunch file, which is later executed in the context of a different user account.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://0xem.ma/cve/2020/04/28/Source-hl2-relaunch-exec.html; https://0xem.ma/cve/2020/04/28/Source-hl2-relaunch-exec.html
CVE: CVE-2020-12266
Published: 2020-04-27
Description: An issue was discovered where there are multiple externally accessible pages that do not require any sort of authentication, and store system information for internal usage. The devices automatically query these pages to update dashboards and other statistics, but the pages can be accessed externally without any authentication. All the pages follow the naming convention live_(string).shtml. Among the information disclosed is: interface status logs, IP address of the device, MAC address of the device, model and current firmware version, location, all running processes, all interfaces and their statuses, all current DHCP leases and the associated hostnames, all other wireless networks in range of the router, memory statistics, and components of the configuration of the device such as enabled features. Affected devices: Affected devices are: Wavlink WN530HG4, Wavlink WN575A3, Wavlink WN579G3,Wavlink WN531G3, Wavlink WN533A8, Wavlink WN531A6, Wavlink WN551K1, Wavlink WN535G3, Wavlink WN530H4, Wavlink WN57X93, WN572HG3, Wavlink WN578A2, Wavlink WN579G3, Wavlink WN579X3, and Jetstream AC3000/ERAC3000
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://github.com/Roni-Carta/nyra; https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-12266; https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-12266-affected_devices
CVE: CVE-2020-1804
Published: 2020-04-27
Description: Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities. Certain driver program does not sufficiently validate certain parameters received, that would lead to several bytes out of bound read. Successful exploit may cause information disclosure or service abnormal. This is 1 out of 3 out of bounds vulnerabilities found. Different than CVE-2020-1805 and CVE-2020-1806.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-02-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-02-smartphone-en
CVE: CVE-2020-1805
Published: 2020-04-27
Description: Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities. Certain driver program does not sufficiently validate certain parameters received, that would lead to several bytes out of bound read. Successful exploit may cause information disclosure or service abnormal. This is 2 out of 3 out of bounds vulnerabilities found. Different than CVE-2020-1804 and CVE-2020-1806.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-02-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-02-smartphone-en
CVE: CVE-2020-1806
Published: 2020-04-27
Description: Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities. Certain driver program does not sufficiently validate certain parameters received, that would lead to several bytes out of bound read. Successful exploit may cause information disclosure or service abnormal. This is 3 out of 3 out of bounds vulnerabilities found. Different than CVE-2020-1804 and CVE-2020-1805.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-02-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-02-smartphone-en
CVE: CVE-2020-1807
Published: 2020-04-27
Description: HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.188(C00E74R3P8) have an improper authorization vulnerability. The software does not properly restrict certain user's modification of certain configuration file, successful exploit could allow the attacker to bypass app lock after a series of operation in ADB mode.
CVSS Score: 3.5 (LOW)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-01-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-01-smartphone-en
CVE: CVE-2020-1845
Published: 2020-04-27
Description: Huawei PCManager product with versions earlier than 10.0.5.53 have a local privilege escalation vulnerability. An authenticated, local attacker can perform specific operation to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege.
CVSS Score: 6.7 (MEDIUM)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-01-pcmanager-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-01-pcmanager-en