rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-22378 
There is a race condition vulnerability in eCNS280_TD V100R005C00 and V100R005C10. There is a timing window exists in which the database can be operated by another thread that is operating concurrently. Successful exploit may cause the affected device abnormal.
Problem types: description: Race Condition
Affected products: vendor: n/a
product: eCNS280_TD
Published: 2021-06-22T18:32:08.000Z
CVE-2021-22379 
There is an Integer Underflow (Wrap or Wraparound) Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause DoS of Samgr.
Problem types: description: Integer Underflow (Wrap or Wraparound)
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T16:39:57.000Z
CVE-2021-22380 
There is a Cleartext Transmission of Sensitive Information Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality and availability.
Problem types: description: Cleartext Transmission of Sensitive Information
Affected products: vendor: n/a
product: EMUI
Published: 2021-06-30T13:37:17.000Z
CVE-2021-22381 
There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause an infinite loop in DoS.
Problem types: description: Input Verification Vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T16:39:25.000Z
CVE-2021-22382 
Huawei LTE USB Dongle products have an improper permission assignment vulnerability. An attacker can locally access and log in to a PC to induce a user to install a specially crafted application. After successfully exploiting this vulnerability, the attacker can perform unauthenticated operations. Affected product versions include:E3372 E3372h-153TCPU-V200R002B333D01SP00C00.
Problem types: description: Improper Permission Assignment
Affected products: vendor: n/a
product: E3372
Published: 2021-06-22T18:53:41.000Z
CVE-2021-22383 
There is an out-of-bounds read vulnerability in eCNS280_TD V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. The vulnerability is due to a message-handling function that contains an out-of-bounds read vulnerability. An attacker can exploit this vulnerability by sending a specific message to the target device, which could cause a Denial of Service (DoS).
Problem types: description: Out-Of-Bounds Read
Affected products: vendor: n/a
product: eCNS280_TD;eSE620X vESS
Published: 2021-06-22T18:59:03.000Z
CVE-2021-22384 
There is an Information Disclosure Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass.
Problem types: description: Information Disclosure Vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T16:41:53.000Z
CVE-2021-22385 
A component of the Huawei smartphone has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause Kernel Code Execution.
Problem types: description: External Control of System or Configuration Setting
Affected products: vendor: n/a
product: EMUI;Magic UI;HarmonyOS
Published: 2021-08-10T13:04:34.000Z
CVE-2021-22386 
A component of the Huawei smartphone has a Double Free vulnerability. Local attackers may exploit this vulnerability to cause Root Elevation of Privileges.
Problem types: description: Double Free
Affected products: vendor: n/a
product: EMUI;Magic UI;HarmonyOS
Published: 2021-08-10T13:04:18.000Z
CVE-2021-22387 
There is an Improper Control of Dynamically Managing Code Resources Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to remotely execute commands.
Problem types: description: Improper Control of Dynamically Managing Code Resources
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T16:42:51.000Z
CVE-2021-22388 
There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed.
Problem types: description: Integer Overflow Vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T16:43:28.000Z
CVE-2021-22389 
There is a Permission Control Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed.
Problem types: description: Permission Control Vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T16:43:54.000Z
CVE-2021-22390 
There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed.
Problem types: description: Memory Buffer Improper Operation Limit Vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T16:44:40.000Z
CVE-2021-22391 
There is an Incorrect Calculation of Buffer Size in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset.
Problem types: description: Incorrect Calculation of Buffer Size
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T16:45:01.000Z
CVE-2021-22392 
There is an Incorrect Calculation of Buffer Size in Huawei Smartphone.Successful exploitation of this vulnerability may cause verification bypass and directions to abnormal addresses.
Problem types: description: Incorrect Calculation of Buffer Size
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T16:45:43.000Z
CVE-2021-22393 
There is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. The affected product cannot deal with some messages because of module design weakness . Attackers can exploit this vulnerability by sending a large amount of specific messages to cause denial of service. This can compromise normal service.
Problem types: description: Remote Code Execution
Affected products: vendor: n/a
product: CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800
Published: 2021-04-28T11:36:48.000Z
CVE-2021-22394 
There is a buffer overflow vulnerability in smartphones. Successful exploitation of this vulnerability may cause DoS of the apps during Multi-Screen Collaboration.
Problem types: description: Buffer overflow vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-02-25T18:11:06.000Z
CVE-2021-22395 
There is a code injection vulnerability in smartphones. Successful exploitation of this vulnerability may affect service confidentiality.
Problem types: description: Code injection vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-02-25T18:11:06.000Z
CVE-2021-22396 
There is a privilege escalation vulnerability in some Huawei products. Due to improper privilege management, a local attacker with common privilege may access some specific files in the affected products. Successful exploit will cause privilege escalation.Affected product versions include:eCNS280_TD V100R005C00,V100R005C10;eSE620X vESS V100R001C10SPC200,V100R001C20SPC200.
Problem types: description: Privilege Escalation
Affected products: vendor: n/a
product: eCNS280_TD;eSE620X vESS
Published: 2021-08-02T16:08:35.000Z
CVE-2021-22397 
There is a privilege escalation vulnerability in Huawei ManageOne 8.0.0. External parameters of some files are lack of verification when they are be called. Attackers can exploit this vulnerability by performing these files to cause privilege escalation attack. This can compromise normal service.
Problem types: description: Privilege Escalation
Affected products: vendor: n/a
product: ManageOne
Published: 2021-08-02T16:24:40.000Z
CVE-2021-22398 
There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations. Affected product versions include: Hulk-AL00C 9.1.1.201(C00E201R8P1);Jennifer-AN00C 10.1.1.171(C00E170R6P3);Jenny-AL10B 10.1.0.228(C00E220R5P1) and OxfordPL-AN10B 10.1.0.116(C00E110R2P1).
Problem types: description: Logic Error
Affected products: vendor: n/a
product: Hulk-AL00C;Jennifer-AN00C;Jenny-AL10B;OxfordPL-AN10B
Published: 2021-08-02T16:13:25.000Z
CVE-2021-22399 
The Bluetooth function of some Huawei smartphones has a DoS vulnerability. Attackers can install third-party apps to send specific broadcasts, causing the Bluetooth module to crash. This vulnerability is successfully exploited to cause the Bluetooth function to become abnormal. Affected product versions include: HUAWEI P30 10.0.0.195(C432E22R2P5), 10.0.0.200(C00E85R2P11), 10.0.0.200(C461E6R3P1), 10.0.0.201(C10E7R5P1), 10.0.0.201(C185E4R7P1), 10.0.0.206(C605E19R1P3), 10.0.0.209(C636E6R3P4), 10.0.0.210(C635E3R2P4), and versions earlier than 10.1.0.165(C01E165R2P11).
Problem types: description: Bluetooth Function Denial of Service
Affected products: vendor: n/a
product: HUAWEI P30
Published: 2021-07-13T11:37:25.000Z
CVE-2021-22400 
Some Huawei Smartphones has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The app can modify specific parameters, causing the system to crash. Affected product include:OxfordS-AN00A 10.0.1.10(C00E10R1P1),10.0.1.105(C00E103R3P3),10.0.1.115(C00E110R3P3),10.0.1.123(C00E121R3P3),10.0.1.135(C00E130R3P3),10.0.1.135(C00E130R4P1),10.0.1.152(C00E140R4P1),10.0.1.160(C00E160R4P1),10.0.1.167(C00E166R4P1),10.0.1.173(C00E172R5P1),10.0.1.178(C00E175R5P1) and 10.1.0.202(C00E79R5P1).
Problem types: description: Insufficient Input Validation
Affected products: vendor: n/a
product: OxfordS-AN00A
Published: 2021-08-03T13:18:05.000Z
CVE-2021-22401 
There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability can affect service integrity.
Problem types: description: Uncaught Exception
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-10-28T12:21:33.000Z
CVE-2021-22402 
There is a DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause DoS attacks.
Problem types: description: Uncaught Exception
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-10-28T12:21:40.000Z
CVE-2021-22403 
There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to execute malicious commands.
Problem types: description: Insufficient聽Verification聽of聽Data聽Authenticity
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-10-28T12:21:47.000Z
CVE-2021-22404 
There is a Directory traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
Problem types: description: Directory traversal vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-10-28T12:21:54.000Z
CVE-2021-22405 
There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.
Problem types: description: Configuration Defect
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-10-28T12:22:03.000Z
CVE-2021-22406 
There is an Uncaught Exception vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the app to exit unexpectedly.
Problem types: description: Uncaught Exception
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-10-28T12:22:22.000Z
CVE-2021-22407 
There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
Problem types: description: Configuration Defect
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-10-28T12:22:28.000Z
CVE-2021-22409 
There is a denial of service vulnerability in some versions of ManageOne. There is a logic error in the implementation of a function of a module. When the service pressure is heavy, there is a low probability that an exception may occur. Successful exploit may cause some services abnormal.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: ManageOne
Published: 2021-05-20T19:13:06.000Z
CVE-2021-22410 
There is a XSS injection vulnerability in iMaster NCE-Fabric V100R019C10. A module of the client does not verify the input sufficiently. Attackers can exploit this vulnerability by modifying input after logging onto the client. This may compromise the normal service of the client.
Problem types: description: XSS Injection
Affected products: vendor: n/a
product: iMaster NCE-Fabric
Published: 2021-11-23T14:55:41.000Z
CVE-2021-22411 
There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can exploit this vulnerability by performing multiple abnormal activities to trigger the bad logic and cause out-of-bounds write. This may compromise the normal service of the module.Affected product versions include: NGFW Module versions V500R005C00SPC100,V500R005C00SPC200;Secospace USG6300 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;Secospace USG6500 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;Secospace USG6600 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;USG9500 versions V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200.
Problem types: description: Out-of-Bounds Write
Affected products: vendor: n/a
product: NGFW Module;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG9500
Published: 2021-05-27T12:12:55.000Z
CVE-2021-22412 
There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause random kernel address access.
Problem types: description: Integer Overflow Vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T16:46:10.000Z
CVE-2021-22413 
There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset.
Problem types: description: Integer Overflow Vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T16:46:57.000Z
CVE-2021-22414 
There is a Memory Buffer Errors Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset.
Problem types: description: Memory Buffer Errors
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T16:47:23.000Z
CVE-2021-22415 
There is an Incorrect Calculation of Buffer Size Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause kernel exceptions with the code.
Problem types: description: Incorrect Calculation of Buffer Size
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T16:48:38.000Z
CVE-2021-22416 
A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Code Execution.
Problem types: description: Data Processing Errors
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-08-03T17:18:38.000Z
CVE-2021-22417 
A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Memory Leakage.
Problem types: description: Data Processing Errors
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-08-03T17:17:14.000Z
CVE-2021-22418 
A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause memory overwriting.
Problem types: description: Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-08-03T17:21:08.000Z
CVE-2021-22419 
A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to cause persistent dos.
Problem types: description: Insufficient Verification of Data Authenticity
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-08-03T17:20:27.000Z
CVE-2021-22420 
A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause the underlying trust of the application trustlist mechanism is missing..
Problem types: description: External Control of System or Configuration Setting
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-08-03T17:21:45.000Z
CVE-2021-22421 
A component of the HarmonyOS has a Improper Privilege Management vulnerability. Local attackers may exploit this vulnerability to cause further Elevation of Privileges.
Problem types: description: Improper Privilege Management
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-08-03T17:18:19.000Z
CVE-2021-22422 
A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause memory overwriting.
Problem types: description: Integer Overflow or Wraparound
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-08-03T17:16:12.000Z
CVE-2021-22423 
A component of the HarmonyOS has a Out-of-bounds Write Vulnerability. Local attackers may exploit this vulnerability to cause integer overflow.
Problem types: description: Out-of-bounds Write
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-08-03T17:21:56.000Z
CVE-2021-22424 
A component of the HarmonyOS has a Kernel Memory Leakage Vulnerability. Local attackers may exploit this vulnerability to cause Kernel Denial of Service.
Problem types: description: Missing Release of Resource after Effective Lifetime
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-08-03T17:17:48.000Z
CVE-2021-22425 
A component of the HarmonyOS has a Double Free vulnerability. Local attackers may exploit this vulnerability to cause Root Elevating Privileges.
Problem types: description: Double Free
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-08-03T17:20:00.000Z
CVE-2021-22426 
There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed.
Problem types: description: Memory address out of bounds
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-02-25T18:11:10.000Z
CVE-2021-22427 
There is a Heap-based Buffer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass.
Problem types: description: Heap-based Buffer Overflow
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T16:49:06.000Z
CVE-2021-22428 
There is an Incomplete Cleanup Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass.
Problem types: description: Incomplete Cleanup
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T16:54:27.000Z
CVE-2021-22429 
There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed.
Problem types: description: Memory address out of bounds
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-02-25T18:11:12.000Z
CVE-2021-22430 
There is a logic bypass vulnerability in smartphones. Successful exploitation of this vulnerability may cause code injection.
Problem types: description: Logic bypass vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-02-25T18:11:10.000Z
CVE-2021-22431 
There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access.
Problem types: description: Configuring permission isolation vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-02-25T18:11:09.000Z
CVE-2021-22432 
There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access.
Problem types: description: Configuring permission isolation vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-02-25T18:11:11.000Z
CVE-2021-22433 
There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed.
Problem types: description: Memory address out of bounds
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-02-25T18:11:08.000Z
CVE-2021-22434 
There is a memory address out of bounds vulnerability in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed.
Problem types: description: Memory address out of bounds
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-02-25T18:11:07.000Z
CVE-2021-22435 
There is a Configuration Defect Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service integrity and availability.
Problem types: description: Configuration Defect
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T16:54:58.000Z
CVE-2021-22436 
There is a Logic Bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service integrity and availability.
Problem types: description: Logic Bypass Vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-10-28T12:21:15.000Z
CVE-2021-22437 
There is a software integer overflow leading to a TOCTOU condition in smartphones. Successful exploitation of this vulnerability may cause random address access.
Problem types: description: TOCTOU condition vulnerability caused by software integer overflow
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2022-02-25T18:11:01.000Z
CVE-2021-22438 
There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause malicious code to be executed.
Problem types: description: Memory Buffer Improper Operation Limit Vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2021-08-02T16:55:27.000Z
CVE-2021-22439 
There is a deserialization vulnerability in Huawei AnyOffice V200R006C10. An attacker can construct a specific request to exploit this vulnerability. Successfully exploiting this vulnerability, the attacker can execute remote malicious code injection and to control the device.
Problem types: description: Deserialization
Affected products: vendor: n/a
product: AnyOffice
Published: 2021-06-29T18:38:09.000Z