rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-2711 
P9 Plus smartphones with software earlier than VIE-AL10C00B352 versions have an input validation vulnerability in the touchscreen Driver. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system.
Problem types: description: Input Validation
Affected products: vendor: Huawei Technologies Co., Ltd.
product: P9 Plus
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2712 
S3300 V100R006C05 have an Ethernet in the First Mile (EFM) flapping vulnerability due to the lack of type-length-value (TLV) consistency check. An attacker may craft malformed packets and send them to a device to cause EFM flapping.
Problem types: description: EFM Flapping
Affected products: vendor: Huawei Technologies Co., Ltd.
product: S3300
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2713 
HUAWEI P9 smartphones with software versions earlier before EVA-L09C432B383, versions earlier before EVA-L09C636B380, versions earlier before VIE-L09C432B370, versions earlier before VIE-L29C636B370 have an insufficient input validation vulnerability. An attacker could exploit this vulnerability to tamper with air interface signaling messages and obtain some communication information.
Problem types: description: Insufficient Input Validation
Affected products: vendor: Huawei Technologies Co., Ltd.
product: HUAWEI P9
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2714 
The GaussDB in FusionSphere OpenStack V100R005C10SPC705 and earlier versions has a buffer overflow vulnerability. An authenticated attacker on the LAN can exploit this vulnerability to execute arbitrary code or cause a denial of service (DoS) condition in the affected system.
Problem types: description: Buffer Overflow
Affected products: vendor: Huawei Technologies Co., Ltd.
product: FusionSphere OpenStack
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2715 
The Files APP 7.1.1.309 and earlier versions in some Huawei mobile phones has a brute-force password cracking vulnerability due to the improper design of the Safe key database. An unauthorized attacker could access sensitive database information and may crack users' Safe passwords, leading to information leak.
Problem types: description: Brute-force attack
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Files &#xa3;&#xa8;Files is the smartphone APP&#xa3;&#xa9;
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2716 
The camerafs driver in Mate 9 Versions earlier than MHA-AL00BC00B173 has buffer overflow vulnerability. An attacker tricks a user into installing a malicious application which has the system privilege of the Android system and sends a specific parameter to the driver of the smart phone, causing a system crash or privilege escalation.
Problem types: description: Buffer Overflow
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Mate 9
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2717 
honor 8 Pro with software Duke-L09C10B120 and earlier versions,Duke-L09C432B120 and earlier versions,Duke-L09C636B120 and earlier versions has an integer overflow vulnerability. The attacker sends a response message to the device, which contains an illegal length field, it could produce an integer overflow and restart the modem system.
Problem types: description: Integer Overflow
Affected products: vendor: Huawei Technologies Co., Ltd.
product: honor 8 Pro
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2718 
FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands.
Problem types: description: Command Injection
Affected products: vendor: Huawei Technologies Co., Ltd.
product: FusionSphere OpenStack
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2719 
FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands.
Problem types: description: Command Injection
Affected products: vendor: Huawei Technologies Co., Ltd.
product: FusionSphere OpenStack
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2720 
FusionSphere OpenStack V100R006C00 has an information exposure vulnerability. The software uses hard-coded cryptographic key to encrypt messages between certain components, which significantly increases the possibility that encrypted data may be recovered and results in information exposure.
Problem types: description: Information Exposure
Affected products: vendor: Huawei Technologies Co., Ltd.
product: FusionSphere OpenStack
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2721 
Some Huawei smart phones with software Berlin-L21C10B130,Berlin-L21C185B133,Berlin-L21HNC10B131,Berlin-L21HNC185B140,Berlin-L21HNC432B151,Berlin-L22C636B160,Berlin-L22HNC636B130,Berlin-L22HNC675B150CUSTC675D001,Berlin-L23C605B131,Berlin-L24HNC567B110,FRD-L02C432B120,FRD-L02C635B130,FRD-L02C675B170CUSTC675D001,FRD-L04C567B162,FRD-L04C605B131,FRD-L09C10B130,FRD-L09C185B130,FRD-L09C432B131,FRD-L09C636B130,FRD-L14C567B162,FRD-L19C10B130,FRD-L19C432B131,FRD-L19C636B130 have a factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by Swype Keyboard and can perform some operations to update the Google account. As a result, the FRP function is bypassed.
Problem types: description: FRP Bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Berlin-L21,Berlin-L21HN,Berlin-L22,Berlin-L22HN,Berlin-L23,Berlin-L24HN,FRD-L02,FRD-L04,FRD-L09,FRD-L14,FRD-L19,
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2722 
DP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and V100R002C00,ViewPoint 9030 with software V100R011C02, V100R011C03,eCNS210_TD with software V100R004C10,eSpace 7950 with software V200R003C00 and V200R003C30,eSpace IAD with software V300R001C07SPCa00 and V300R002C01SPCb00,eSpace U1981 with software V100R001C20, V100R001C30, V200R003C00, V200R003C20 and V200R003C30 have an input validation vulnerability.A remote attacker may exploit this vulnerability by crafting a malformed packet and sending it to the device. A successful exploit could allow the attacker to cause a denial of service or execute arbitrary code.
Problem types: description: Input Validation
Affected products: vendor: Huawei Technologies Co., Ltd.
product: DP300,TE60,TP3106,ViewPoint 9030,eCNS210_TD,eSpace 7950,eSpace IAD,eSpace U1981
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2723 
The Files APP 7.1.1.308 and earlier versions in some Huawei mobile phones has a vulnerability of plaintext storage of users' Safe passwords. An attacker with the root privilege of an Android system could forge the Safe to read users' plaintext Safe passwords, leading to information leak.
Problem types: description: Plaintext Storage
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Files
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2724 
Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution.
Problem types: description: Buffer Overflow
Affected products: vendor: Huawei Technologies Co., Ltd.
product: P10 Plus,P10
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2725 
Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution.
Problem types: description: Buffer Overflow
Affected products: vendor: Huawei Technologies Co., Ltd.
product: P10 Plus,P10
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2726 
Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution.
Problem types: description: Buffer Overflow
Affected products: vendor: Huawei Technologies Co., Ltd.
product: P10 Plus,P10
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2727 
Huawei P9 smart phones with software versions earlier before EVA-AL00C00B365, versions earlier before EVA-AL10C00B365,Versions earlier before EVA-CL00C92B365, versions earlier before EVA-DL00C17B365, versions earlier before EVA-TL00C01B365 have a privilege escalation vulnerability. An unauthenticated attacker can bypass phone activation to user management page of the phone and create a new user. Successful exploit could allow the attacker operate part function of the phone.
Problem types: description: Privilege Escalation
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Huawei P9
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2728 
Some Huawei mobile phones Honor 6X Berlin-L22C636B150 and earlier versions have a Bluetooth unlock bypassing vulnerability. If a user has enabled the smart unlock function, an attacker can impersonate the user's Bluetooth device to unlock the user's mobile phone screen.uawei mobile phones have a Bluetooth unlock bypassing vulnerability due to the lack of validation on Bluetooth devices. If a user has enabled the smart unlock function, an attacker can impersonate the user's Bluetooth device to unlock the user's mobile phone screen.
Problem types: description: Bluetooth Unlock Bypassing
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Honor 6X
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2729 
The boot loaders in Honor 5A smart phones with software Versions earlier than CAM-TL00C01B193,Versions earlier than CAM-TL00HC00B193,Versions earlier than CAM-UL00C00B193 have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution.
Problem types: description: Buffer Overflow
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Honor 5A
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2730 
HUAWEI HiLink APP (for IOS) versions earlier before 5.0.25.306 and HUAWEI Tech Support APP (for IOS) versions earlier before 5.0.0 have an information leak vulnerability. When an iPhone with these APPs installed access the Wi-Fi hotpot built by attacker, the attacker can collect the information of iPhone mode and firmware version.
Problem types: description: Information Leak
Affected products: vendor: Huawei Technologies Co., Ltd.
product: HUAWEI HiLink APP (for IOS), HUAWEI Tech Support APP (for IOS)
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2731 
The vibrator service in P9 Plus smart phones with software versions earlier before VIE-AL10C00B386 has DoS vulnerability. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone vibrator service interface to crash the system.
Problem types: description: DoS
Affected products: vendor: Huawei Technologies Co., Ltd.
product: P9 Plus
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2732 
Huawei Hilink APP Versions earlier before 5.0.25.306 has an information leak vulnerability. An attacker may trick a user into installing a malicious application and application can access Hilink APP data.
Problem types: description: Information Leak
Affected products: vendor: Huawei Technologies Co., Ltd.
product: HUAWEI HiLink APP (for IOS)
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2733 
Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information leak vulnerability due to improper file permission configuration. An attacker tricks a user into installing a malicious application on the smart phone, and the application can get the file that keep the cipher text of the SIM card PIN.
Problem types: description: Information Leak
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Honor 6X
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2734 
P9 Plus smartphones with software versions earlier before VIE-AL10BC00B386 have a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and the application can send given parameter to specific interface, which make a large number of memory allocation and the smart phone will be crash for memory exhaustion.
Problem types: description: DoS
Affected products: vendor: Huawei Technologies Co., Ltd.
product: P9 Plus
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2735 
TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software provides a system interface for interaction with external applications, but calling the interface is not properly restricted. An attacker could trick the user into installing a malicious application to call the interface and modify the system properties.
Problem types: description: Exposed System Interface
Affected products: vendor: Huawei Technologies Co., Ltd.
product: TIT-AL00
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2736 
VCM5010 with software versions earlier before V100R002C50SPC100 has a command injection vulnerability. This is due to insufficient validation of user's input. An authenticated attacker could launch a command injection attack.
Problem types: description: command injection
Affected products: vendor: Huawei Technologies Co., Ltd.
product: VCM5010
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2737 
VCM5010 with software versions earlier before V100R002C50SPC100 has an arbitrary file upload vulnerability. The software does not validate the files that uploaded. An authenticated attacker could upload arbitrary files to the system.
Problem types: description: arbitrary file upload
Affected products: vendor: Huawei Technologies Co., Ltd.
product: VCM5010
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2738 
VCM5010 with software versions earlier before V100R002C50SPC100 has an authentication bypass vulnerability. This is due to improper implementation of authentication for accessing web pages. An unauthenticated attacker could bypass the authentication by sending a crafted HTTP request. 5010 with software versions earlier before V100R002C50SPC100 has an arbitrary file upload vulnerability. The software does not validate the files that uploaded. An authenticated attacker could upload arbitrary files to the system.
Problem types: description: authentication bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: VCM5010
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2739 
The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. A man in the middle (MITM) can tamper with the upgrade package of Huawei Vmall APP, and to implant the malicious applications.
Problem types: description: MITM
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Vmall
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2740 
A potential security vulnerability has been identified with the command line shell of the HP ThinPro operating system 6.1, 5.2.1, 5.2, 5.1, 5.0, and 4.4. The vulnerability could result in a local unauthorized elevation of privilege on an HP thin client device.
Problem types: description: Escalation of Privilege
Affected products: vendor: HP Inc.
product: HP ThinPro
Published: 2018-01-23T16:00:00.000Z
CVE-2017-2741 
A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code.
Problem types: description: Arbitrary Code Execution
Affected products: vendor: HP Inc.
product: HP PageWide Printers; HP OfficeJet Pro Printers
Published: 2018-01-23T16:00:00.000Z
CVE-2017-2742 
A potential security vulnerability has been identified with HP Web Jetadmin before 10.4 SR2. This vulnerability could potentially be exploited to create a denial of service.
Problem types: description: Denial of Service
Affected products: vendor: HP Inc.
product: HP Web Jetadmin
Published: 2018-01-23T16:00:00.000Z
CVE-2017-2743 
HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers and MFP, HP PageWide Color Printers and MPS before 2308214_000901, 2308214_000900, and other firmware versions. The vulnerability could be exploited to perform a cross site scripting (XSS) attack.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: HP Inc.
product: HP Enterprise LaserJet Printers and MFPs; HP OfficeJet Enterprise Color Printers and MFP; HP PageWide Color Printers and MPS
Published: 2018-01-23T16:00:00.000Z
CVE-2017-2744 
The vulnerability allows attacker to extract binaries into protected file system locations in HP Support Assistant before 12.7.26.1.
Problem types: description: privilege escalation.
Affected products: vendor: HP Inc.
product: HP Support Assistant
Published: 2018-01-23T16:00:00.000Z
CVE-2017-2745 
Potential security vulnerabilities have been identified with HP JetAdvantage Security Manager before 3.0.1. The vulnerabilities could potentially be exploited to allow stored cross-site scripting which could allow a hacker to execute scripts in a user's browser.
Problem types: description: Cross-site scripting
Affected products: vendor: HP Inc.
product: HP JetAdvantage Security Manager
Published: 2018-01-23T16:00:00.000Z
CVE-2017-2746 
Potential security vulnerabilities have been identified with HP JetAdvantage Security Manager before 3.0.1. The vulnerabilities could potentially be exploited to allow stored cross-site scripting which could allow a hacker to create a denial of service.
Problem types: description: Denial of Service
Affected products: vendor: HP Inc.
product: HP JetAdvantage Security Manager
Published: 2018-01-23T16:00:00.000Z
CVE-2017-2747 
HP has identified a potential security vulnerability before IG_11_00_00.10 for DesignJet T790, T795, T1300, T2300, before MRY_04_05_00.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AENEAS_03_04_00.9 for DesignJet T3500, before NEXUS_01_12_00.11 for Latex 310, 330, 360, 370, before NEXUS_03_12_00.15 for Latex 315, 335, 365, 375, before STORM_00_05_01.6 for Latex 560, 570 and Latex 110 that may expose the credentials of the SMTP server configured to receive and process emails generated by the printers.
Problem types: description: expose credentials
Affected products: vendor: HP Inc.
product: HP Designjet printers; HP Latex printers
Published: 2018-01-23T16:00:00.000Z
CVE-2017-2748 
A potential security vulnerability caused by the use of insecure (http) transactions during login has been identified with early versions of the Isaac Mizrahi Smartwatch mobile app. HP has no access to customer data as a result of this issue.
Problem types: description: Insecure HTTP during login.
Affected products: vendor: Isaac Mizrahi
product: Isaac Mizrahi Smartwatch Mobile App
Published: 2019-03-27T16:01:47.000Z
CVE-2017-2750 
Insufficient Solution DLL Signature Validation allows potential execution of arbitrary code in HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP OfficeJet Enterprise printers before 2308937_578479, 2405087_018548, and other firmware versions.
Problem types: description: Execution of arbitrary code
Affected products: vendor: HP Inc.
product: HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP OfficeJet Enterprise printers
Published: 2018-01-23T16:00:00.000Z
CVE-2017-2751 
A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others. The BIOS password was stored in CMOS in a way that allowed it to be extracted. This applies to consumer notebooks launched in early 2014.
Problem types: description: The BIOS password was stored in CMOS in a way that allowed it to be extracted
Affected products: vendor: HP Inc.
product: HP 240 G1 Notebook PC and certain other consumer notebooks
Published: 2018-10-03T20:00:00.000Z
CVE-2017-2752 
A potential security vulnerability caused by incomplete obfuscation of application configuration information was discovered in Tommy Hilfiger TH24/7 Android app versions 2.0.0.11, 2.0.1.14, 2.1.0.16, and 2.2.0.19. HP has no access to customer data as a result of this issue.
Problem types: description: Information exposure of application configuration
Affected products: vendor: Tommy Hilfiger
product: Tommy Hilfiger TH24/7 Android app
Published: 2019-03-27T16:14:57.000Z
CVE-2017-2765 
EMC Isilon InsightIQ 4.1.0, 4.0.1, 4.0.0, 3.2.2, 3.2.1, 3.2.0, 3.1.1, 3.1.0, 3.0.1, 3.0.0 is affected by an authentication bypass vulnerability that could potentially be exploited by attackers to compromise the affected system.
Problem types: description: Authentication Bypass Vulnerability
Affected products: vendor: n/a
product: EMC Isilon InsightIQ 4.1.0, 4.0.1, 4.0.0, 3.2.2, 3.2.1, 3.2.0, 3.1.1, 3.1.0, 3.0.1, 3.0.0
Published: 2017-02-08T17:00:00.000Z
CVE-2017-2766 
EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum eRoom version prior to 7.5.0 P01 includes an unverified password change vulnerability that could potentially be exploited by malicious users to compromise the affected system.
Problem types: description: Unverified Password Change Vulnerability
Affected products: vendor: n/a
product: EMC Documentum eRoom EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum eRoom version prior to 7.5.0 P01
Published: 2017-02-03T07:24:00.000Z
CVE-2017-2767 
EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM) 9.4.1.x, EMC Network Configuration Manager (NCM) 9.4.2.x contains a Java RMI Remote Code Execution vulnerability that could potentially be exploited by malicious users to compromise the affected system.
Problem types: description: Java RMI Remote Code Execution
Affected products: vendor: n/a
product: EMC Network Configuration Manager EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM) 9.4.1.x, EMC Network Configuration Manager (NCM) 9.4.2.x
Published: 2017-02-03T07:24:00.000Z
CVE-2017-2768 
EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM) 9.4.1.x, EMC Network Configuration Manager (NCM) 9.4.2.x contains an Improper Authentication vulnerability that could potentially be exploited by malicious users to compromise the affected system.
Problem types: description: Improper Authentication
Affected products: vendor: n/a
product: EMC Network Configuration Manager EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM) 9.4.1.x, EMC Network Configuration Manager (NCM) 9.4.2.x
Published: 2017-02-03T07:24:00.000Z