rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-5177 
Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-23T03:56:00.000Z
CVE-2016-5178 
Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-23T03:56:00.000Z
CVE-2016-5179 
Chrome OS before 53.0.2785.144 allows remote attackers to execute arbitrary commands at boot.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-06T22:00:00.000Z
CVE-2016-5180 
Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-03T15:00:00.000Z
CVE-2016-5181 
Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted execution of v8 microtasks while the DOM was in an inconsistent state, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via crafted HTML pages.
Problem types: description: UXSS
Affected products: vendor: n/a
product: Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android
Published: 2016-12-18T03:34:00.000Z
CVE-2016-5182 
Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation in bitmap handling, which allowed a remote attacker to potentially exploit heap corruption via crafted HTML pages.
Problem types: description: heap corruption
Affected products: vendor: n/a
product: Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android
Published: 2016-12-18T03:34:00.000Z
CVE-2016-5183 
A heap use after free in PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android allows a remote attacker to potentially exploit heap corruption via crafted PDF files.
Problem types: description: heap corruption
Affected products: vendor: n/a
product: Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android
Published: 2016-12-18T03:34:00.000Z
CVE-2016-5184 
PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object lifecycles in CFFL_FormFillter::KillFocusForAnnot, which allowed a remote attacker to potentially exploit heap corruption via crafted PDF files.
Problem types: description: heap corruption
Affected products: vendor: n/a
product: Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android
Published: 2016-12-18T03:34:00.000Z
CVE-2016-5185 
Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly allowed reentrance of FrameView::updateLifecyclePhasesInternal(), which allowed a remote attacker to perform an out of bounds memory read via crafted HTML pages.
Problem types: description: out of bounds memory read
Affected products: vendor: n/a
product: Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android
Published: 2016-12-18T03:34:00.000Z
CVE-2016-5186 
Devtools in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled objects after a tab crash, which allowed a remote attacker to perform an out of bounds memory read via crafted PDF files.
Problem types: description: out of bounds memory read
Affected products: vendor: n/a
product: Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android
Published: 2016-12-18T03:34:00.000Z
CVE-2016-5187 
Google Chrome prior to 54.0.2840.85 for Android incorrectly handled rapid transition into and out of full screen mode, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via crafted HTML pages.
Problem types: description: spoof the contents of the Omnibox (URL bar)
Affected products: vendor: n/a
product: Chrome prior to 54.0.2840.85 for Android
Published: 2016-12-18T03:34:00.000Z
CVE-2016-5188 
Multiple issues in Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux allow a remote attacker to spoof various parts of browser UI via crafted HTML pages.
Problem types: description: spoof various parts of browser UI
Affected products: vendor: n/a
product: Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux
Published: 2016-12-18T03:34:00.000Z
CVE-2016-5189 
Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted navigation to blob URLs with non-canonical origins, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via crafted HTML pages.
Problem types: description: spoof the contents of the Omnibox (URL bar)
Affected products: vendor: n/a
product: Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android
Published: 2016-12-18T03:34:00.000Z
CVE-2016-5190 
Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object lifecycles during shutdown, which allowed a remote attacker to perform an out of bounds memory read via crafted HTML pages.
Problem types: description: out of bounds memory read
Affected products: vendor: n/a
product: Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android
Published: 2016-12-18T03:34:00.000Z
CVE-2016-5191 
Bookmark handling in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation of supplied data, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via crafted HTML pages, as demonstrated by an interpretation conflict between userinfo and scheme in an http://javascript:payload@example.com URL.
Problem types: description: UXSS
Affected products: vendor: n/a
product: Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android
Published: 2016-12-18T03:34:00.000Z
CVE-2016-5192 
Blink in Google Chrome prior to 54.0.2840.59 for Windows missed a CORS check on redirect in TextTrackLoader, which allowed a remote attacker to bypass cross-origin restrictions via crafted HTML pages.
Problem types: description: bypass cross-origin restrictions
Affected products: vendor: n/a
product: Chrome prior to 54.0.2840.59 for Windows
Published: 2016-12-18T03:34:00.000Z
CVE-2016-5193 
Google Chrome prior to 54.0 for iOS had insufficient validation of URLs for windows open by DOM, which allowed a remote attacker to bypass restrictions on navigation to certain URL schemes via crafted HTML pages.
Problem types: description: bypass restrictions on navigation to certain URL schemes
Affected products: vendor: n/a
product: Chrome prior to 54.0 for iOS
Published: 2016-12-18T03:34:00.000Z
CVE-2016-5194 
Unspecified vulnerabilities in Google Chrome before 54.0.2840.59.
Problem types: description: various fixes from internal audits
Affected products: vendor: Google
product: Chrome
Published: 2019-11-20T14:54:51.000Z
CVE-2016-5195 
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-10T21:00:00.000Z
CVE-2016-5196 
The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloaded files, which allowed a remote attacker to access any downloaded file and interact with sites, including those the user was logged into, via a crafted HTML page.
Problem types: description: insufficient policy enforcement
Affected products: vendor: n/a
product: Google Chrome prior to 54.0.2840.85 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5197 
The content view client in Google Chrome prior to 54.0.2840.85 for Android insufficiently validated intent URLs, which allowed a remote attacker who had compromised the renderer process to start arbitrary activity on the system via a crafted HTML page.
Problem types: description: insufficient validation of untrusted input
Affected products: vendor: n/a
product: Google Chrome prior to 54.0.2840.85 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5198 
V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read/write operations, leading to code execution, via a crafted HTML page.
Problem types: description: incorrect compiler optimisations
Affected products: vendor: n/a
product: Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5199 
An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
Problem types: description: off by one error
Affected products: vendor: n/a
product: Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5200 
V8 in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android incorrectly applied type rules, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: type confusion in generated code
Affected products: vendor: n/a
product: Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5201 
A leak of privateClass in the extensions API in Google Chrome prior to 54.0.2840.100 for Linux, and 54.0.2840.99 for Windows, and 54.0.2840.98 for Mac allowed a remote attacker to access privileged JavaScript code via a crafted HTML page.
Problem types: description: leak of object
Affected products: vendor: n/a
product: Google Chrome prior to 54.0.2840.100 for Linux, and 54.0.2840.99 for Windows, and 54.0.2840.98 for Mac
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5202 
browser/extensions/api/dial/dial_registry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windows, and before 54.0.2840.100 on Linux neglects to copy a device ID before an erase() call, which causes the erase operation to access data that that erase operation will destroy.
Problem types: description: fixes from internal audits
Affected products: vendor: chromium-browser
product: chromium-browser
Published: 2019-10-25T13:30:51.000Z
CVE-2016-5203 
A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
Problem types: description: use after free
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5204 
Leaking of an SVG shadow tree leading to corruption of the DOM tree in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
Problem types: description: object corruption
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5205 
Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac, incorrectly handles deferred page loads, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
Problem types: description: insufficient policy enforcement
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5206 
The PDF plugin in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly followed redirects, which allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.
Problem types: description: insufficient policy enforcement
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5207 
In Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android, corruption of the DOM tree could occur during the removal of a full screen element, which allowed a remote attacker to achieve arbitrary code execution via a crafted HTML page.
Problem types: description: object corruption
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5208 
Blink in Google Chrome prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android allowed possible corruption of the DOM tree during synchronous event handling, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
Problem types: description: object corruption
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5209 
Bad casting in bitmap manipulation in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: bad cast
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5210 
Heap buffer overflow during TIFF image parsing in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
Problem types: description: heap buffer overflow
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5211 
A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
Problem types: description: use after free
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5212 
Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page.
Problem types: description: insufficient validation of untrusted input
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5213 
A use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: use after free
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5214 
Google Chrome prior to 55.0.2883.75 for Windows mishandled downloaded files, which allowed a remote attacker to prevent the downloaded file from receiving the Mark of the Web via a crafted HTML page.
Problem types: description: insufficient policy enforcement
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Windows
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5215 
A use after free in webaudio in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
Problem types: description: use after free
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5216 
A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.
Problem types: description: use after free
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5217 
The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly permitted access to privileged plugins, which allowed a remote attacker to bypass site isolation via a crafted HTML page.
Problem types: description: insufficient policy enforcement
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5218 
The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to temporarily spoof the contents of the Omnibox (URL bar) via a crafted HTML page containing PDF data.
Problem types: description: insufficient policy enforcement
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5219 
A heap use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: use after free
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5220 
PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to read local files via a crafted PDF file.
Problem types: description: insufficient policy enforcement
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5221 
Type confusion in libGLESv2 in ANGLE in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android possibly allowed a remote attacker to bypass buffer validation via a crafted HTML page.
Problem types: description: type confusion
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5222 
Incorrect handling of invalid URLs in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
Problem types: description: insufficient policy enforcement
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5223 
Integer overflow in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption or DoS via a crafted PDF file.
Problem types: description: integer overflow
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5224 
A timing attack on denormalized floating point arithmetic in SVG filters in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.
Problem types: description: sidechannel information leakage
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5225 
Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled form actions, which allowed a remote attacker to bypass Content Security Policy via a crafted HTML page.
Problem types: description: insufficient policy enforcement
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5226 
Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL bar in the context of the current tab, which allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar.
Problem types: description: insufficient policy enforcement
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac
Published: 2017-01-19T05:43:00.000Z
CVE-2016-5228 
Stack-based buffer overflow in the PlayMacro function in ObjectXMacro.ObjectXMacro in WdMacCtl.ocx in Micro Focus Rumba 9.x before 9.3 HF 11997 and 9.4.x before 9.4 HF 12815 allows remote attackers to execute arbitrary code via a long MacroName argument. NOTE: some references mention CVE-2016-5226 but that is not a correct ID for any Rumba vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-03T01:00:00.000Z
CVE-2016-5229 
Atlassian Bamboo before 5.11.4.1 and 5.12.x before 5.12.3.1 does not properly restrict permitted deserialized classes, which allows remote attackers to execute arbitrary code via vectors related to XStream Serialization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-02T16:00:00.000Z
CVE-2016-5230 
Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to bypass permission checks and control partial module functions via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-30T16:00:00.000Z
CVE-2016-5231 
Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to bypass permission checks and delete user data via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-30T16:00:00.000Z