rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-22440 
There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly validate the pathname. Successful exploit could allow the attacker to access a location that is outside of the restricted directory by a crafted filename. Affected product versions include:HUAWEI Mate 20 9.0.0.195(C01E195R2P1), 9.1.0.139(C00E133R3P1);HUAWEI Mate 20 Pro 9.0.0.187(C432E10R1P16), 9.0.0.188(C185E10R2P1), 9.0.0.245(C10E10R2P1), 9.0.0.266(C432E10R1P16), 9.0.0.267(C636E10R2P1), 9.0.0.268(C635E12R1P16), 9.0.0.278(C185E10R2P1); Hima-L29C 9.0.0.105(C10E9R1P16), 9.0.0.105(C185E9R1P16), 9.0.0.105(C636E9R1P16); Laya-AL00EP 9.1.0.139(C786E133R3P1); OxfordS-AN00A 10.1.0.223(C00E210R5P1); Tony-AL00B 9.1.0.257(C00E222R2P1).
Problem types: description: Path Traversal
Affected products: vendor: n/a
product: HUAWEI Mate 20;HUAWEI Mate 20 Pro;Hima-L29C;Laya-AL00EP;OxfordS-AN00A;Tony-AL00B
Published: 2021-07-13T11:42:33.000Z
CVE-2021-22441 
Some Huawei products have an integer overflow vulnerability. Successful exploitation of this vulnerability may lead to kernel crash.
Problem types: description: Integer overflow vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2022-02-25T18:10:58.000Z
CVE-2021-22442 
There is an Improper Validation of Integrity Check Value Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset.
Problem types: description: Improper Validation of Integrity Check Value
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T16:56:16.000Z
CVE-2021-22443 
There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause random address access.
Problem types: description: Input Verification Vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T16:58:41.000Z
CVE-2021-22444 
There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause code injection.
Problem types: description: Input Verification Vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T17:00:01.000Z
CVE-2021-22445 
There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset.
Problem types: description: Input Verification Vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T17:39:34.000Z
CVE-2021-22446 
There is an Information Disclosure Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset.
Problem types: description: Information Disclosure Vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T17:39:43.000Z
CVE-2021-22447 
There is an Improper Check for Unusual or Exceptional Conditions Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset.
Problem types: description: Improper Check for Unusual or Exceptional Conditions
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T17:39:56.000Z
CVE-2021-22448 
There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause unauthorized read and write of some files.
Problem types: description: Improper verification vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2022-02-25T18:11:02.000Z
CVE-2021-22449 
There is a logic vulnerability in Elf-G10HN 1.0.0.608. An unauthenticated attacker could perform specific operations to exploit this vulnerability. Due to insufficient security design, successful exploit could allow an attacker to add users to be friends without prompting in the target device.
Problem types: description: Logic vulnerability
Affected products: vendor: n/a
product: Elf-G10HN
Published: 2021-08-23T19:32:32.000Z
CVE-2021-22450 
A component of the HarmonyOS has a Incomplete Cleanup vulnerability. Local attackers may exploit this vulnerability to cause memory exhaustion.
Problem types: description: Incomplete Cleanup
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-10-28T12:31:41.000Z
CVE-2021-22451 
A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause memory overwriting.
Problem types: description: Integer Overflow or Wraparound
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-10-28T12:31:11.000Z
CVE-2021-22452 
A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to read at any address.
Problem types: description: Improper Input Validation
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-10-28T12:32:06.000Z
CVE-2021-22453 
A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash.
Problem types: description: Improper Input Validation
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-10-28T12:33:19.000Z
CVE-2021-22454 
A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause core dump.
Problem types: description: External Control of System or Configuration Setting
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-10-28T12:33:00.000Z
CVE-2021-22455 
A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause the memory which is not released.
Problem types: description: Integer Overflow or Wraparound
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-10-28T12:32:11.000Z
CVE-2021-22456 
A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable.
Problem types: description: Data Processing Errors
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-10-28T12:31:47.000Z
CVE-2021-22457 
A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to cause out-of-bounds write.
Problem types: description: Improper Input Validation
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-10-28T12:31:16.000Z
CVE-2021-22458 
A component of the HarmonyOS has a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability. Local attackers may exploit this vulnerability to cause arbitrary code execution.
Problem types: description: Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-10-28T12:33:06.000Z
CVE-2021-22459 
A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause System functions which are unavailable.
Problem types: description: NULL Pointer Dereference
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-10-28T12:31:23.000Z
CVE-2021-22460 
A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to bypass the control mechanism.
Problem types: description: Insufficient Verification of Data Authenticity
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-10-28T12:31:29.000Z
CVE-2021-22461 
A component of the HarmonyOS has a Allocation of Resources Without Limits or Throttling vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash.
Problem types: description: Allocation of Resources Without Limits or Throttling
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-10-28T12:33:25.000Z
CVE-2021-22462 
A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause kernel crash.
Problem types: description: NULL Pointer Dereference
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-10-28T12:32:17.000Z
CVE-2021-22463 
A component of the HarmonyOS has a Use After Free vulnerability . Local attackers may exploit this vulnerability to cause Kernel Information disclosure.
Problem types: description: Use After Free
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-10-28T12:32:35.000Z
CVE-2021-22464 
A component of the HarmonyOS has a Out-of-bounds Read vulnerability. Local attackers may exploit this vulnerability to cause system Soft Restart.
Problem types: description: Out-of-bounds Read
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-10-28T12:33:32.000Z
CVE-2021-22465 
A component of the HarmonyOS has a Heap-based Buffer Overflow vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable.
Problem types: description: Heap-based Buffer Overflow
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-10-28T12:31:53.000Z
CVE-2021-22466 
A component of the HarmonyOS has a Use After Free vulnerability. Local attackers may exploit this vulnerability to cause kernel crash.
Problem types: description: Use After Free
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-10-28T12:32:42.000Z
CVE-2021-22467 
A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to read at any address.
Problem types: description: Improper Input Validation
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-10-28T12:33:12.000Z
CVE-2021-22468 
A component of the HarmonyOS has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability. Local attackers may exploit this vulnerability to cause kernel address leakage.
Problem types: description: Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-10-28T12:32:49.000Z
CVE-2021-22469 
A component of the HarmonyOS has a Out-of-bounds Read vulnerability. Local attackers may exploit this vulnerability to cause kernel out-of-bounds read.
Problem types: description: Out-of-bounds Read
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-10-28T12:32:55.000Z
CVE-2021-22470 
A component of the HarmonyOS has a Privileges Controls vulnerability. Local attackers may exploit this vulnerability to expand the Recording Trusted Domain.
Problem types: description: Privileges Controls
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-10-28T12:31:35.000Z
CVE-2021-22471 
A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash.
Problem types: description: NULL Pointer Dereference
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-10-28T12:33:39.000Z
CVE-2021-22472 
There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
Problem types: description: Insufficiently聽Protected聽Credentials
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-10-28T12:22:37.000Z
CVE-2021-22473 
There is an Authentication vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
Problem types: description: Authentication (including session management) vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-10-28T12:22:43.000Z
CVE-2021-22474 
There is an Out-of-bounds memory access in Huawei Smartphone.Successful exploitation of this vulnerability may cause process exceptions.
Problem types: description: Out-of-bounds Read
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-10-28T12:24:32.000Z
CVE-2021-22475 
There is an Improper permission management vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
Problem types: description: Permission Control Vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-10-28T12:24:38.000Z
CVE-2021-22478 
The interface of a certain HarmonyOS module has a UAF vulnerability. Successful exploitation of this vulnerability may lead to information leakage.
Problem types: description: Resource Management Errors
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2022-02-25T18:10:58.000Z
CVE-2021-22479 
The interface of a certain HarmonyOS module has an invalid address access vulnerability. Successful exploitation of this vulnerability may lead to kernel crash.
Problem types: description: Invalid address access vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2022-02-25T18:10:59.000Z
CVE-2021-22480 
The interface of a certain HarmonyOS module has an integer overflow vulnerability. Successful exploitation of this vulnerability may lead to heap memory overflow.
Problem types: description: Integer overflow vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2022-02-25T18:11:01.000Z
CVE-2021-22481 
There is a Verification errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
Problem types: description: Input Verification Vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-10-28T12:21:20.000Z
CVE-2021-22482 
There is an Uninitialized variable vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission of invalid data.
Problem types: description: Uninitialized variable vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-10-28T12:21:27.000Z
CVE-2021-22483 
There is a issue of IP address spoofing in Huawei Smartphone. Successful exploitation of this vulnerability may cause DoS.
Problem types: description: IP address spoofing
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-10-28T12:24:52.000Z
CVE-2021-22484 
Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data.




Successful exploitation of this vulnerability may cause a server out of memory (OOM).
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Huawei
product: HarmonyOS
default_status: unaffected
Published: 2024-12-28T06:50:40.877Z
CVE-2021-22485 
There is a SSID vulnerability with Wi-Fi network connections in Huawei devices.Successful exploitation of this vulnerability may affect service confidentiality.
Problem types: description: SSID vulnerability with Wi-Fi network connections
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-10-28T12:24:58.000Z
CVE-2021-22486 
There is a issue of Unstandardized field names in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality.
Problem types: description: Unstandardized field names
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-10-28T12:25:05.000Z
CVE-2021-22487 
There is an Out-of-bounds read vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service availability.
Problem types: description: Out-of-bounds read
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-10-28T12:25:11.000Z
CVE-2021-22488 
There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by modifying soft links may tamper with the files restored from backups.
Problem types: description: Configuration defect
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-10-28T12:25:17.000Z
CVE-2021-22489 
There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service availability.
Problem types: description: DoS vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-02-25T18:11:03.000Z
CVE-2021-22490 
There is a Permission verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect the device performance.
Problem types: description: Improper authorization
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-10-28T12:25:23.000Z
CVE-2021-22491 
There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.
Problem types: description: Input Verification Vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-10-28T12:25:31.000Z
CVE-2021-22492 
An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Broadcom Bluetooth chipsets) software. The Bluetooth UART driver has a buffer overflow. The Samsung ID is SVE-2020-18731 (January 2021).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-05T17:54:52.000Z
CVE-2021-22494 
An issue was discovered in the fingerprint scanner on Samsung Note20 mobile devices with Q(10.0) software. When a screen protector is used, the required image compensation is not present. Consequently, inversion can occur during fingerprint enrollment, and a high False Recognition Rate (FRR) can occur. The Samsung ID is SVE-2020-19216 (January 2021).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-05T17:53:56.000Z
CVE-2021-22495 
An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) (Exynos chipsets) software. The Mali GPU driver allows out-of-bounds access and a device reset. The Samsung ID is SVE-2020-19174 (January 2021).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-05T17:54:20.000Z
CVE-2021-22496 
Authentication Bypass Vulnerability in Micro Focus Access Manager Product, affects all version prior to version 4.5.3.3. The vulnerability could cause information leakage.
Problem types: description: Authentication Bypass
Affected products: vendor: n/a
product: Access Manager
Published: 2021-03-25T15:56:32.000Z
CVE-2021-22497 Advanced Authentication Improper Session Management
Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue.
Problem types: description: Broken Authentication & Improper Session Management
Affected products: vendor: Micro Focus
product: Advanced Authentication
CVSS v3.1: attackComplexity: HIGH
attackVector: PHYSICAL
availabilityImpact: NONE
baseScore: 3.8
baseSeverity: LOW
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: We would like to offer a special thank you to Syed Sohaib Karim <syedsohaibkarim@gmail.com for responsibly disclosing this vulnerability to us.
Published: 2021-04-12T20:53:20.743Z
CVE-2021-22498 
XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management (Previously known as Quality Center) product. The vulnerability affects versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier and 15.5. The vulnerability could be exploited to allow an XML External Entity Injection.
Problem types: description: XML External Entity Injection.
Affected products: vendor: n/a
product: Application Lifecycle Management ( Previously known as Quality Center ).
Published: 2021-01-19T15:56:44.000Z
CVE-2021-22499 
Persistent Cross-Site scripting vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could allow persistent XSS attack.
Problem types: description: Persistent Cross-Site scripting.
Affected products: vendor: n/a
product: Application Performance Management.
Published: 2021-02-06T00:56:50.000Z
CVE-2021-22500 
Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could be exploited by attacker to trick the users into executing actions of the attacker's choosing.
Problem types: description: Cross Site Request Forgery.
Affected products: vendor: n/a
product: Application Performance Management
Published: 2021-02-06T01:03:04.000Z
CVE-2021-22501 
Improper Restriction of XML External Entity Reference vulnerability in OpenText™ Operations Bridge Manager allows Input Data Manipulation. 

The vulnerability could be exploited to confidential information

This issue affects Operations Bridge Manager: 2017.05, 2017.11, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10.
Problem types: cwe_id: CWE-611
description: CWE-611 Improper Restriction of XML External Entity Reference
Affected products: vendor: OpenText™
product: Operations Bridge Manager
default_status: unaffected
Published: 2024-12-19T16:55:09.921Z
CVE-2021-22502 
Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server.
Problem types: description: Remote Code execution.
Affected products: vendor: n/a
product: Operation Bridge Reporter.
Published: 2021-02-08T21:12:35.000Z
CVE-2021-22503 Improper Neutralization of Input During Web Page Generation Vulnerability
Possible 
Improper Neutralization of Input During Web Page Generation Vulnerability

in eDirectory has been discovered in
OpenText™ eDirectory 9.2.3.0000.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
Affected products: vendor: OpenText
product: eDirectory
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
version: 3.1
Published: 2024-09-12T12:44:45.771Z
CVE-2021-22504 
Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10. The vulnerability could allow remote attackers to execute arbitrary code on an OBM server.
Problem types: description: Arbitrary code execution.
Affected products: vendor: n/a
product: Operations Bridge Manager.
Published: 2021-02-12T19:42:59.000Z
CVE-2021-22505 
Escalation of privileges vulnerability in Micro Focus Operations Agent, affects versions 12.0x, 12.10, 12.11, 12.12, 12.14 and 12.15. The vulnerability could be exploited to escalate privileges and execute code under the account of the Operations Agent.
Problem types: description: Escalation of privileges
Affected products: vendor: n/a
product: Operations Agent
Published: 2021-04-13T13:54:27.000Z
CVE-2021-22506 
Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerability could cause information leakage.
Problem types: description: Information Leakage
Affected products: vendor: n/a
product: Access Manager.
Published: 2021-03-26T13:37:22.000Z