rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-8179 
The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and sends a specific parameter to the driver of the smart phone, causing privilege escalation.
Problem types: description: buffer overflow
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Nice-AL00
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8180 
The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and sends a specific parameter to the driver of the smart phone, causing privilege escalation.
Problem types: description: buffer overflow
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Nice-AL00
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8181 
The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a arbitrary memory write vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and sends a specific parameter to the driver of the smart phone, causing privilege escalation.
Problem types: description: arbitrary memory write
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Nice-AL00
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8182 
MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a out-of-bound read vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter and cause to memory out-of-bound read.
Problem types: description: out-of-bound read
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Nice-AL00
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8183 
MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to cause to any memory access vulnerabilities, leading to sensitive information leakage.
Problem types: description: any memory access
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Nice-AL00
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8184 
MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to cause to any memory access vulnerabilities, leading to sensitive information leakage.
Problem types: description: any memory access
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Nice-AL00
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8185 
ME906s-158 earlier than ME906S_Installer_13.1805.10.3 versions has a privilege elevation vulnerability. An attacker could exploit this vulnerability to modify the configuration information containing malicious files and trick users into executing the files, resulting in the execution of arbitrary code.
Problem types: description: Privilege Escalation
Affected products: vendor: Huawei Technologies Co., Ltd.
product: ME906s-158
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8186 
The Bastet of some Huawei mobile phones with software of earlier than MHA-AL00BC00B231 versions has a DOS vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot.
Problem types: description: DOS
Affected products: vendor: Huawei Technologies Co., Ltd.
product: MHA-AL00A
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8187 
Huawei FusionSphere OpenStack V100R006C00SPC102(NFV) has a privilege escalation vulnerability. Due to improper privilege restrictions, an attacker with high privilege may obtain the other users' certificates. Successful exploit may cause privilege escalation.
Problem types: description: privilege escalation
Affected products: vendor: Huawei Technologies Co., Ltd.
product: FusionSphere OpenStack
Published: 2018-03-20T15:00:00.000Z
CVE-2017-8188 
FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some module of the affected products, causing code execution.
Problem types: description: command injection
Affected products: vendor: Huawei Technologies Co., Ltd.
product: FusionSphere OpenStack
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8189 
FusionSphere OpenStack V100R006C00SPC102(NFV)has a path traversal vulnerability. Due to insufficient path validation, an attacker with high privilege may exploit this vulnerability to cover some files, causing services abnormal.
Problem types: description: path traversal
Affected products: vendor: Huawei Technologies Co., Ltd.
product: FusionSphere OpenStack
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8190 
FusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic signature vulnerability. The software does not verify the cryptographic signature. An attacker with high privilege may exploit this vulnerability to inject malicious software.
Problem types: description: improper verification of cryptographic signature
Affected products: vendor: Huawei Technologies Co., Ltd.
product: FusionSphere OpenStack
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8191 
FusionSphere OpenStack V100R006C00SPC102(NFV)has a week cryptographic algorithm vulnerability. Attackers may exploit the vulnerability to crack the cipher text and cause information leak on the transmission links.
Problem types: description: week cryptographic algorithm
Affected products: vendor: Huawei Technologies Co., Ltd.
product: FusionSphere OpenStack
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8192 
FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper authorization, an attacker with low privilege may exploit this vulnerability to obtain the operation authority of some specific directory, causing privilege escalation.
Problem types: description: Improper Authorization
Affected products: vendor: Huawei Technologies Co., Ltd.
product: FusionSphere OpenStack
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8193 
The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability. Due to the insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sending message with malicious commands.
Problem types: description: command injection
Affected products: vendor: Huawei Technologies Co., Ltd.
product: FusionSphere OpenStack
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8194 
The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may exploit the vulnerability to execute more operations by send a crafted rest message.
Problem types: description: Improper Authentication
Affected products: vendor: Huawei Technologies Co., Ltd.
product: FusionSphere OpenStack
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8195 
The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may exploit the vulnerability to execute more operations by send a crafted rest message.
Problem types: description: improper authentication
Affected products: vendor: Huawei Technologies Co., Ltd.
product: FusionSphere OpenStack
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8196 
FusionSphere V100R006C00SPC102(NFV) has an incorrect authorization vulnerability. An authenticated attacker could execute commands that he/she should have had no permission to perform, thereby querying, modifying, and deleting certain service data and making the service unavailable.
Problem types: description: incorrect authorization
Affected products: vendor: Huawei Technologies Co., Ltd.
product: FusionSphere
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8197 
FusionSphere V100R006C00SPC102(NFV) has a command injection vulnerability. An authenticated, remote attacker could craft packets with malicious strings and send them to a target device. Successful exploit could allow the attacker to launch a command injection attack and execute system commands.
Problem types: description: command injection
Affected products: vendor: Huawei Technologies Co., Ltd.
product: FusionSphere
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8198 
FusionSphere V100R006C00SPC102(NFV) has an SQL injection vulnerability. An authenticated, remote attacker could craft interface messages carrying malicious SQL statements and send them to a target device. Successful exploit could allow the attacker to launch an SQL injection attack and execute SQL commands.
Problem types: description: SQL injection
Affected products: vendor: Huawei Technologies Co., Ltd.
product: FusionSphere
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8199 
MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause process reboot.
Problem types: description: out-of-bounds read
Affected products: vendor: Huawei Technologies Co., Ltd.
product: MAX PRESENCE,TP3106,TP3206,
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8200 
MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause process reboot.
Problem types: description: out-of-bounds read
Affected products: vendor: Huawei Technologies Co., Ltd.
product: MAX PRESENCE,TP3106,TP3206
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8201 
MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an a memory leak vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit could cause a memory leak and eventual denial of service (DoS) condition.
Problem types: description: a memory leak
Affected products: vendor: Huawei Technologies Co., Ltd.
product: MAX PRESENCE,TP3106,TP3206,
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8202 
The CameraISP driver of some Huawei smart phones with software of versions earlier than Prague-AL00AC00B205,versions earlier than Prague-AL00BC00B205,versions earlier than Prague-AL00CC00B205,versions earlier than Prague-TL00AC01B205,versions earlier than Prague-TL10AC01B205 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP, the APP can send a specific parameter to the CameraISP driver of the smart phone, causing system reboot.
Problem types: description: buffer overflow
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Prague-AL00A,Prague-AL00B,Prague-AL00C,Prague-TL00A,Prague-TL10A
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8203 
The Bastet Driver of Nova 2 Plus,Nova 2 Huawei smart phones with software of Versions earlier than BAC-AL00C00B173,Versions earlier than PIC-AL00C00B173 has a use after free (UAF) vulnerability. An attacker can convince a user to install a malicious application which has a high privilege to exploit this vulnerability, Successful exploitation may cause arbitrary code execution.
Problem types: description: UAF
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Nova 2 Plus,Nova 2
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8204 
The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the driver of the smart phone, causing arbitrary code execution
Problem types: description: buffer overflow
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Honor 9
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8205 
The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has integer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the driver of the smart phone, causing arbitrary code execution.
Problem types: description: integer overflow
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Honor 9
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8206 
HONOR 7 Lite mobile phones with software of versions earlier than NEM-L21C432B352 have an App Lock bypass vulnerability. An attacker could perform specific operations to bypass the App Lock to use apps on a target mobile phone temporarily.
Problem types: description: App Lock bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: HONOR 7 Lite
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8207 
The driver of honor 5C, honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution.
Problem types: description: buffer overflow
Affected products: vendor: Huawei Technologies Co., Ltd.
product: honor 5C,honor 6x
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8208 
The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution.
Problem types: description: buffer overflow
Affected products: vendor: Huawei Technologies Co., Ltd.
product: honor 5C,honor 6x
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8209 
The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution.
Problem types: description: buffer overflow
Affected products: vendor: Huawei Technologies Co., Ltd.
product: honor 5C,honor 6x
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8210 
The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution.
Problem types: description: buffer overflow
Affected products: vendor: Huawei Technologies Co., Ltd.
product: honor 5C,honor 6x
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8211 
The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution.
Problem types: description: buffer overflow
Affected products: vendor: Huawei Technologies Co., Ltd.
product: honor 5C,honor 6x
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8212 
The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution.
Problem types: description: buffer overflow
Affected products: vendor: Huawei Technologies Co., Ltd.
product: honor 5C,honor 6x
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8213 
Huawei SMC2.0 with software of V100R003C10, V100R005C00SPC100, V100R005C00SPC101B001T, V100R005C00SPC102, V100R005C00SPC103, V100R005C00SPC200, V100R005C00SPC201T, V500R002C00, V600R006C00 has an input validation vulnerability when handle TLS and DTLS handshake with certificate. Due to the insufficient validation of received PKI certificates, remote attackers could exploit this vulnerability to crash the TLS module.
Problem types: description: input validation
Affected products: vendor: Huawei Technologies Co., Ltd.
product: SMC2.0
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8214 
Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions earlier than KNT-AL10C00B391, versions earlier than KNT-AL20C00B391, versions earlier than KNT-UL10C00B391, versions earlier than KNT-TL10C00B391, versions earlier than Stanford-AL00C00B175, versions earlier than Stanford-AL10C00B175, versions earlier than Stanford-TL00C01B175, versions earlier than Duke-AL20C00B191, versions earlier than Duke-TL30C01B191, versions earlier than Picasso-AL00C00B162, versions earlier than Picasso-TL00C01B162 , versions earlier than Barca-AL00C00B162, versions earlier than Barca-TL00C00B162, versions earlier than EVA-AL10C00B396SP03, versions earlier than EVA-CL00C92B396, versions earlier than EVA-DL00C17B396, versions earlier than EVA-TL00C01B396 , versions earlier than Vicky-AL00AC00B172, versions earlier than Toronto-AL00AC00B191, versions earlier than Toronto-TL10C01B191 have an unlock code verification bypassing vulnerability. An attacker with the root privilege of a mobile can exploit this vulnerability to bypass the unlock code verification and unlock the mobile phone bootloader.
Problem types: description: unlpermission controlock code verification bypassing
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8215 
Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions earlier than KNT-AL10C00B391, versions earlier than KNT-AL20C00B391, versions earlier than KNT-UL10C00B391, versions earlier than KNT-TL10C00B391, versions earlier than Stanford-AL00C00B175, versions earlier than Stanford-AL10C00B175, versions earlier than Stanford-TL00C01B175, versions earlier than Duke-AL20C00B191, versions earlier than Duke-TL30C01B191, versions earlier than Picasso-AL00C00B162, versions earlier than Picasso-TL00C01B162 , versions earlier than Barca-AL00C00B162, versions earlier than Barca-TL00C00B162, versions earlier than EVA-AL10C00B396SP03, versions earlier than EVA-CL00C92B396, versions earlier than EVA-DL00C17B396, versions earlier than EVA-TL00C01B396 , versions earlier than Vicky-AL00AC00B172, versions earlier than Toronto-AL00AC00B191, versions earlier than Toronto-TL10C01B191 have a permission control vulnerability. An attacker with the system privilege of a mobile can exploit this vulnerability to bypass the unlock code verification and unlock the mobile phone bootloader.
Problem types: description: permission control
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8216 
Warsaw Huawei Smart phones with software of versions earlier than Warsaw-AL00C00B180, versions earlier than Warsaw-TL10C01B180 have a permission control vulnerability. Due to improper authorization on specific processes, an attacker with the root privilege of a mobile Android system can exploit this vulnerability to obtain some information of the user.
Problem types: description: permission control
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Warsaw
Published: 2017-11-22T19:00:00.000Z
CVE-2017-8217 
TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n have too permissive iptables rules, e.g., SNMP is not blocked on any interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-25T20:00:00.000Z
CVE-2017-8218 
vsftpd on TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n has a backdoor admin account with the 1234 password, a backdoor guest account with the guest password, and a backdoor test account with the test password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-25T20:00:00.000Z
CVE-2017-8219 
TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow DoSing the HTTP server via a crafted Cookie header to the /cgi/ansi URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-25T20:00:00.000Z
CVE-2017-8220 
TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow remote code execution with a single HTTP request by placing shell commands in a "host=" line within HTTP POST data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-25T20:00:00.000Z
CVE-2017-8221 
Wireless IP Camera (P2P) WIFICAM devices rely on a cleartext UDP tunnel protocol (aka the Cloud feature) for communication between an Android application and a camera device, which allows remote attackers to obtain sensitive information by sniffing the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-25T20:00:00.000Z
CVE-2017-8222 
Wireless IP Camera (P2P) WIFICAM devices have an "Apple Production IOS Push Services" private RSA key and certificate stored in /system/www/pem/ck.pem inside the firmware, which allows attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-25T20:00:00.000Z
CVE-2017-8223 
On Wireless IP Camera (P2P) WIFICAM devices, an attacker can use the RTSP server on port 10554/tcp to watch the streaming without authentication via tcp/av0_1 or tcp/av0_0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-25T20:00:00.000Z
CVE-2017-8224 
Wireless IP Camera (P2P) WIFICAM devices have a backdoor root account that can be accessed with TELNET.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-25T20:00:00.000Z