rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-5293 
Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with operation privilege could exploit the vulnerability by sending specific messages continuously. Successful exploit may cause some service to be abnormal.
Problem types: description: Memory Leak
Affected products: vendor: n/a
product: AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR3600, NetEngine16EX, SRG1300, SRG2300, SRG3300
Published: 2019-11-13T16:19:36.000Z
CVE-2019-5294 
There is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated attacker may send a corrupt or crafted message to the affected products. Due to a buffer read overflow error when parsing the message, successful exploit may cause some service to be abnormal.
Problem types: description: Out-Of-Bound Read
Affected products: vendor: n/a
product: AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,NetEngine16EX,SRG1300,SRG2300,SRG3300
Published: 2019-11-13T16:12:44.000Z
CVE-2019-5295 
Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.125(C00E125R2P14T8) have an authorization bypass vulnerability. Due to improper authorization implementation logic, attackers can bypass certain authorization scopes of smart phones by performing specific operations. This vulnerability can be exploited to perform operations beyond the scope of authorization.
Problem types: description: authorization bypass
Affected products: vendor: Huawei
product: Honor V10
Published: 2019-06-06T14:39:27.000Z
CVE-2019-5296 
Mate20 Huawei smartphones versions earlier than HMA-AL00C00B175 have an out-of-bounds read vulnerability. An attacker with a high permission runs some specific commands on the smartphone. Due to insufficient input verification, successful exploit may cause out-of-bounds read of the memory and the system abnormal.
Problem types: description: out-of-bounds read
Affected products: vendor: Huawei
product: Mate20
Published: 2019-06-04T17:56:37.000Z
CVE-2019-5297 
Emily-L29C Huawei phones versions earlier than 9.0.0.159 (C185E2R1P12T8) have a Factory Reset Protection (FRP) bypass security vulnerability. Before the FRP account is verified and activated during the reset process, the attacker can perform some special operations to bypass the FRP function and obtain the right to use the mobile phone.
Problem types: description: FRP bypass
Affected products: vendor: Huawei
product: Emily-L29C
Published: 2019-06-04T18:19:49.000Z
CVE-2019-5298 
There is an improper authentication vulnerability in some Huawei AP products before version V200R009C00SPC800. Due to the improper implementation of authentication for the serial port, an attacker could exploit this vulnerability by connecting to the affected products and running a series of commands.
Problem types: description: improper authentication
Affected products: vendor: Huawei
product: AP4050DN-E
Published: 2019-06-04T18:25:43.000Z
CVE-2019-5299 
Huawei mobile phones Hima-AL00Bhave with Versions earlier than HMA-AL00C00B175 have a signature verification bypass vulnerability. Attackers can induce users to install malicious applications. Due to a defect in the signature verification logic, the malicious applications can invoke specific interface to execute malicious code. A successful exploit may result in the execution of arbitrary code.
Problem types: description: signature verification bypass
Affected products: vendor: Huawei
product: Hima-AL00B
Published: 2019-08-13T20:34:23.000Z
CVE-2019-5300 
There is a digital signature verification bypass vulnerability in AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300 and SRG3300 Huawei routers. The vulnerability is due to the affected software improperly verifying digital signatures for the software image in the affected device. A local attacker with high privilege may exploit the vulnerability to bypass integrity checks for software images and install a malicious software image on the affected device.
Problem types: description: digital signature verification bypass
Affected products: vendor: Huawei
product: AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300, SRG3300
Published: 2019-06-04T18:30:58.000Z
CVE-2019-5301 
Huawei smart phones Honor V20 with the versions before 9.0.1.161(C00E161R2P2) have an information leak vulnerability. An attacker may trick a user into installing a malicious application. Due to coding error during layer information processing, attackers can exploit this vulnerability to obtain some layer information.
Problem types: description: information leak
Affected products: vendor: Huawei
product: Honor V20
Published: 2019-08-08T16:33:45.000Z
CVE-2019-5304 
Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset.
Problem types: description: Buffer Error
Affected products: vendor: n/a
product: AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600;IPS Module;NGFW Module;NIP6300;NIP6600;NetEngine16EX;S5700;S6700;SRG1300;SRG2300;SRG3300;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600
Published: 2020-01-03T14:33:41.000Z
CVE-2019-5305 
The image processing module of some Huawei Mate 10 smartphones versions before ALP-L29 9.0.0.159(C185) has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can call special API, which could trigger double free and cause a system crash.
Problem types: description: memory double free
Affected products: vendor: Huawei
product: Mate 10
Published: 2019-06-06T14:35:18.000Z
CVE-2019-5306 
There is a Factory Reset Protection (FRP) bypass security vulnerability in P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167(C00E81R1P21T8). When re-configuring the mobile phone using the FRP function, an attacker can delete the activation lock after a series of operations. As a result, the FRP function is bypassed and the attacker gains access to the smartphone.
Problem types: description: FRP bypass
Affected products: vendor: Huawei
product: P20
Published: 2019-06-04T17:58:22.000Z
CVE-2019-5307 
Some Huawei 4G LTE devices, P30 versions before ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1) and P30 Pro versions before VOG-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1), are exposed to a message replay vulnerability. For the sake of better compatibility, these devices implement a less strict check on the NAS message sequence number (SN), specifically NAS COUNT. As a result, an attacker can construct a rogue base station and replay the GUTI reallocation command message in certain conditions to tamper with GUTIs, or replay the Identity request message to obtain IMSIs. (Vulnerability ID: HWPSIRT-2019-04107)
Problem types: description: message replay
Affected products: vendor: Huawei
product: P30,P30 Pro
Published: 2019-06-04T18:55:48.000Z
CVE-2019-5308 
Mate 20 RS smartphones with versions earlier than 9.1.0.135(C786E133R3P1) have an improper authorization vulnerability. The software does not properly restrict certain operation in ADB mode, successful exploit could allow the attacker to switch to third desktop after a series of operation.
Problem types: description: Improper Authorization
Affected products: vendor: n/a
product: Mate 20 RS
Published: 2019-11-29T20:11:37.000Z
CVE-2019-5309 
Honor play smartphones with versions earlier than 9.1.0.333(C00E333R1P1T8) have an information disclosure vulnerability in certain Huawei . An attacker could view certain information after a series of operation without unlock the screen lock. Successful exploit could cause an information disclosure condition.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Honor play
Published: 2019-11-29T20:21:44.000Z
CVE-2019-5310 
YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by site_title in an admin/system/basic POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-04T14:00:00.000Z
CVE-2019-5311 
An issue was discovered in YUNUCMS V1.1.8. app/index/controller/Show.php has an XSS vulnerability via the index.php/index/show/index cw parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-04T15:00:00.000Z
CVE-2019-5312 
An issue was discovered in weixin-java-tools v3.3.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for CVE-2018-20318.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-04T16:00:00.000Z
CVE-2019-5314 
Some web components in the ArubaOS software are vulnerable to HTTP Response splitting (CRLF injection) and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability.
Problem types: description: HTTP Response Splitting (CRLF injection) and Reflected XSS
Affected products: vendor: n/a
product: Aruba Mobility Controllers
Published: 2019-09-13T16:49:38.000Z
CVE-2019-5315 
A command injection vulnerability is present in the web management interface of ArubaOS that permits an authenticated user to execute arbitrary commands on the underlying operating system. A malicious administrator could use this ability to install backdoors or change system configuration in a way that would not be logged. This vulnerability only affects ArubaOS 8.x.
Problem types: description: Authenticated command injection
Affected products: vendor: n/a
product: Aruba Mobility Controllers
Published: 2019-09-13T16:53:42.000Z
CVE-2019-5317 
A local authentication bypass vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x: 6.5.4.15 and below; Aruba Instant 8.3.x: 8.3.0.11 and below; Aruba Instant 8.4.x: 8.4.0.5 and below; Aruba Instant 8.5.x: 8.5.0.6 and below; Aruba Instant 8.6.x: 8.6.0.2 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.
Problem types: description: local authentication bypass
Affected products: vendor: n/a
product: Aruba Instant Access Points
Published: 2021-03-29T15:48:03.000Z
CVE-2019-5318 
A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba Operating System Software version(s): 6.x.x.x: all versions, 8.x.x.x: all versions prior to 8.8.0.0. Aruba has released patches for ArubaOS that address this security vulnerability.
Problem types: description: remote cross-site request forgery (csrf)
Affected products: vendor: n/a
product: Aruba Operating System Software
Published: 2021-09-07T12:03:38.000Z
CVE-2019-5319 
A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 and below; Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba Instant 8.5.x: 8.5.0.6 and below; Aruba Instant 8.6.x: 8.6.0.2 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.
Problem types: description: remote buffer overflow
Affected products: vendor: n/a
product: Aruba Instant Access Points
Published: 2021-03-30T01:45:47.000Z
CVE-2019-5320 
Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007, 16.10.* before 16.10.0003 are vulnerable to Cross Site Scripting in the web UI, leading to injection of code.
Problem types: description: Cross-Site Scripting (XSS) in the WebUI
Affected products: vendor: n/a
product: Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M
Published: 2020-08-26T22:30:55.000Z
CVE-2019-5321 
Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007, 16.10.* before 16.10.0003 are vulnerable to Remote Unauthorized Access in the WebUI.
Problem types: description: Remote Unauthorized Access in the WebUI
Affected products: vendor: n/a
product: Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M
Published: 2020-08-26T22:31:19.000Z
CVE-2019-5322 
A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerability impacts firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007 and 16.10.* before 16.10.0003. The vulnerability allows an attacker to retrieve sensitive system information. This attack can be carried out without user authentication under very specific conditions.
Problem types: description: information disclosure vulneraiblity
Affected products: vendor: n/a
product: Aruba Intelligent Edge Switch 5400 3810 2920 2930 2530 with GigT port 2530 10/100 port or 2540
Published: 2020-02-12T23:33:07.000Z
CVE-2019-5323 
There are command injection vulnerabilities present in the AirWave application. Certain input fields controlled by an administrative user are not properly sanitized before being parsed by AirWave. If conditions are met, an attacker can obtain command execution on the host.
Problem types: description: Remote Code Execution via Command Injection
Affected products: vendor: n/a
product: AirWave Management Platform
Published: 2020-02-27T16:20:29.000Z
CVE-2019-5326 
An administrative application user of or application user with write access to Aruba Airwave VisualRF is able to obtain code execution on the AMP platform. This is possible due to the ability to overwrite a file on disk which is subsequently deserialized by the Java application component.
Problem types: description: Remote Code Execution due to unsafe Java Deserialization
Affected products: vendor: n/a
product: AirWave Management Platform
Published: 2020-02-27T16:23:10.000Z
CVE-2019-5338 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:12:03.000Z
CVE-2019-5339 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:12:36.000Z
CVE-2019-5340 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:13:02.000Z
CVE-2019-5341 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:13:26.000Z
CVE-2019-5342 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:13:57.000Z
CVE-2019-5343 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:14:19.000Z
CVE-2019-5344 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:14:47.000Z
CVE-2019-5345 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:15:11.000Z
CVE-2019-5346 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:15:49.000Z
CVE-2019-5347 
A remote authentication bypass vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: authentication bypass
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:16:09.000Z
CVE-2019-5348 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:16:44.000Z
CVE-2019-5349 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:17:21.000Z
CVE-2019-5350 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:17:42.000Z
CVE-2019-5351 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:18:13.000Z
CVE-2019-5352 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:37:10.000Z
CVE-2019-5353 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:37:58.000Z
CVE-2019-5354 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:38:22.000Z
CVE-2019-5355 
A remote denial of service vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: denial of service
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:38:51.000Z
CVE-2019-5356 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:39:12.000Z
CVE-2019-5357 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:39:35.000Z
CVE-2019-5358 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:40:01.000Z
CVE-2019-5359 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:40:25.000Z
CVE-2019-5360 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:41:19.000Z
CVE-2019-5361 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:41:59.000Z
CVE-2019-5362 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:42:28.000Z
CVE-2019-5363 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:43:04.000Z
CVE-2019-5364 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:43:30.000Z
CVE-2019-5365 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:44:00.000Z
CVE-2019-5366 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:44:28.000Z
CVE-2019-5367 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:45:00.000Z
CVE-2019-5368 
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (IMC) PLAT
Published: 2019-06-05T14:45:33.000Z