rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-9099 
Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 with versions of V500R001C00; V500R001C20; V500R001C30; V500R001C50; V500R001C60; V500R001C80; V500R005C00; V500R005C10; V500R005C20; V500R002C00; V500R002C10; V500R002C20; V500R002C30 have an improper authentication vulnerability. Attackers need to perform some operations to exploit the vulnerability. Successful exploit may obtain certain permissions on the device.
Problem types: description: Improper Authentication
Affected products: vendor: n/a
product: IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500
Published: 2020-06-08T13:55:12.000Z
CVE-2020-9100 
Earlier than HiSuite 10.1.0.500 have a DLL hijacking vulnerability. This vulnerability exists due to some DLL file is loaded by HiSuite improperly. And it allows an attacker to load this DLL file of the attacker's choosing.
Problem types: description: DLL Hijacking
Affected products: vendor: n/a
product: HiSuite
Published: 2020-07-06T17:24:56.000Z
CVE-2020-9101 
There is an out-of-bounds write vulnerability in some products. An unauthenticated attacker crafts malformed packets with specific parameter and sends the packets to the affected products. Due to insufficient validation of packets, which may be exploited to cause the process reboot. Affected product versions include: IPS Module versions V500R005C00, V500R005C10; NGFW Module versions V500R005C00, V500R005C10; Secospace USG6300 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10; Secospace USG6500 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10; Secospace USG6600 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10; USG9500 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10
Problem types: description: Out-of-bounds Write
Affected products: vendor: Huawei
product: IPS Module
vendor: Huawei
product: NGFW Module
vendor: Huawei
product: Secospace USG6300
vendor: Huawei
product: Secospace USG6500
vendor: Huawei
product: Secospace USG6600
vendor: Huawei
product: USG9500
Published: 2020-07-17T23:05:27.000Z
CVE-2020-9102 
There is a information leak vulnerability in some Huawei products, and it could allow a local attacker to get information. The vulnerability is due to the improper management of the username. An attacker with the ability to access the device and cause the username information leak. Affected product versions include: CloudEngine 12800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 5800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 6800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800
Problem types: description: Information Disclosure
Affected products: vendor: Huawei
product: CloudEngine 12800
vendor: Huawei
product: CloudEngine 5800
vendor: Huawei
product: CloudEngine 6800
vendor: Huawei
product: CloudEngine 7800
Published: 2020-07-17T22:59:38.000Z
CVE-2020-9103 
HUAWEI Mate 20 smartphones with 9.0.0.205(C00E205R2P1) have a logic error vulnerability. In a special scenario, the system does not properly process. As a result, attackers can perform a series of operations to successfully establish P2P connections that are rejected by the peer end. As a result, the availability of the device is affected.
Problem types: description: Logic Error
Affected products: vendor: n/a
product: HUAWEI Mate 20
Published: 2020-08-17T14:59:47.000Z
CVE-2020-9104 
HUAWEI P30 smartphones with Versions earlier than 10.1.0.123(C431E22R2P5),Versions earlier than 10.1.0.123(C432E22R2P5),Versions earlier than 10.1.0.126(C10E7R5P1),Versions earlier than 10.1.0.126(C185E4R7P1),Versions earlier than 10.1.0.126(C461E7R3P1),Versions earlier than 10.1.0.126(C605E19R1P3),Versions earlier than 10.1.0.126(C636E7R3P4),Versions earlier than 10.1.0.128(C635E3R2P4),Versions earlier than 10.1.0.160(C00E160R2P11),Versions earlier than 10.1.0.160(C01E160R2P11) have a denial of service vulnerability. In specific scenario, due to the improper resource management and memory leak of some feature, the attacker could exploit this vulnerability to cause the device reset.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: HUAWEI P30
Published: 2020-08-21T13:16:29.000Z
CVE-2020-9105 
Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an insufficient input validation vulnerability. Due to the input validation logic is incorrect, an attacker can exploit this vulnerability to access and modify the memory of the device by doing a series of operations. Successful exploit may cause the service abnormal.
Problem types: description: Insufficient Input
Affected products: vendor: n/a
product: Taurus-AN00B
Published: 2020-10-09T12:30:51.000Z
CVE-2020-9106 
HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have a path traversal vulnerability. The system does not sufficiently validate certain pathname, successful exploit could allow the attacker access files and cause information disclosure.
Problem types: description: Path Traversal
Affected products: vendor: n/a
product: HUAWEI P30 Pro
Published: 2020-10-12T13:43:54.000Z
CVE-2020-9107 
HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have an out-of-bounds read and write vulnerability. An unauthenticated attacker crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be exploited to cause the process reboot.
Problem types: description: Out-of-bounds Read and Write
Affected products: vendor: n/a
product: HUAWEI P30 Pro
Published: 2020-10-12T13:33:25.000Z
CVE-2020-9108 
HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have an out-of-bounds read and write vulnerability. An unauthenticated attacker crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be exploited to cause the process reboot.
Problem types: description: Out-of-bounds Read and Write
Affected products: vendor: n/a
product: HUAWEI P30 Pro
Published: 2020-10-12T13:27:20.000Z
CVE-2020-9109 
There is an information disclosure vulnerability in several smartphones. The device does not sufficiently validate the identity of smart wearable device in certain specific scenario, the attacker need to gain certain information in the victim's smartphone to launch the attack, and successful exploit could cause information disclosure.Affected product versions include:HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8),versions earlier than 10.1.0.160(C01E160R2P8);HUAWEI Mate 20 X versions earlier than 10.1.0.160(C00E160R2P8),versions earlier than 10.1.0.160(C01E160R2P8);HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8);Laya-AL00EP versions earlier than 10.1.0.160(C786E160R3P8);Tony-AL00B versions earlier than 10.1.0.160(C00E160R2P11);Tony-TL00B versions earlier than 10.1.0.160(C01E160R2P11).
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: HUAWEI Mate 20;HUAWEI Mate 20 X;HUAWEI P30 Pro;Laya-AL00EP;Tony-AL00B;Tony-TL00B
Published: 2020-10-12T13:39:33.000Z
CVE-2020-9110 
Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an information disclosure vulnerability. The device does not sufficiently validate the output of device in certain specific scenario, the attacker can gain information in the victim's smartphone to launch the attack, successful exploit could cause information disclosure.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Taurus-AN00B
Published: 2020-10-12T14:03:07.000Z
CVE-2020-9111 
E6878-370 versions 10.0.3.1(H557SP27C233),10.0.3.1(H563SP21C233) and E6878-870 versions 10.0.3.1(H557SP27C233),10.0.3.1(H563SP11C233) have a denial of service vulnerability. The system does not properly check some events, an attacker could launch the events continually, successful exploit could cause reboot of the process.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: E6878-370;E6878-870
Published: 2020-10-19T20:02:04.000Z
CVE-2020-9112 
Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a privilege elevation vulnerability. Due to lack of privilege restrictions on some of the business functions of the device. An attacker could exploit this vulnerability to access the protecting information, resulting in the elevation of the privilege.
Problem types: description: Privilege Escalation
Affected products: vendor: n/a
product: Taurus-AN00B
Published: 2020-10-19T19:32:32.000Z
CVE-2020-9113 
HUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8) have a buffer overflow vulnerability in the Bluetooth module. Due to insufficient input validation, an unauthenticated attacker may craft Bluetooth messages after successful paring, causing buffer overflow. Successful exploit may cause code execution.
Problem types: description: Buffer Overflow
Affected products: vendor: n/a
product: HUAWEI Mate 20
Published: 2020-10-19T19:59:39.000Z
CVE-2020-9114 
FusionCompute versions 6.3.0, 6.3.1, 6.5.0, 6.5.1 and 8.0.0 have a privilege escalation vulnerability. Due to improper privilege management, an attacker with common privilege may access some specific files and get the administrator privilege in the affected products. Successful exploit will cause privilege escalation.
Problem types: description: Privilege Escalation
Affected products: vendor: n/a
product: FusionCompute
Published: 2020-12-01T00:04:44.000Z
CVE-2020-9115 
ManageOne versions 6.5.1.1.B010, 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, ,6.5.1.1.B050, 8.0.0 and 8.0.1 have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the plug-in component. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject commands to the target device.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: ManageOne
Published: 2020-11-30T23:57:23.000Z
CVE-2020-9116 
Huawei FusionCompute versions 6.5.1 and 8.0.0 have a command injection vulnerability. An authenticated, remote attacker can craft specific request to exploit this vulnerability. Due to insufficient verification, this could be exploited to cause the attackers to obtain higher privilege.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: FusionCompute
Published: 2020-11-30T23:53:58.000Z
CVE-2020-9117 
HUAWEI nova 4 versions earlier than 10.0.0.165(C01E34R2P4) and SydneyM-AL00 versions earlier than 10.0.0.165(C00E66R1P5) have an out-of-bounds read and write vulnerability. An attacker with specific permissions crafts malformed packet with specific parameter and sends the packet to the affected products. Due to insufficient validation of packet, which may be exploited to cause the information leakage or arbitrary code execution.
Problem types: description: Out-of-bounds Read
Affected products: vendor: n/a
product: HUAWEI nova 4;SydneyM-AL00
Published: 2020-12-01T00:02:54.000Z
CVE-2020-9118 
There is an insufficient integrity check vulnerability in Huawei Sound X Product. The system does not check certain software package's integrity sufficiently. Successful exploit could allow an attacker to load a crafted software package to the device. Affected product versions include:AIS-BW80H-00 versions 9.0.3.1(H100SP13C00),9.0.3.1(H100SP18C00),9.0.3.1(H100SP3C00),9.0.3.1(H100SP9C00),9.0.3.2(H100SP1C00),9.0.3.2(H100SP2C00),9.0.3.2(H100SP5C00),9.0.3.2(H100SP8C00),9.0.3.3(H100SP1C00).
Problem types: description: Insufficient Integrity Check
Affected products: vendor: n/a
product: AIS-BW80H-00
Published: 2021-02-06T01:10:51.000Z
CVE-2020-9119 
There is a privilege escalation vulnerability on some Huawei smart phones due to design defects. The attacker needs to physically contact the mobile phone and obtain higher privileges, and execute relevant commands, resulting in the user's privilege promotion.
Problem types: description: Privilege Escalation
Affected products: vendor: n/a
product: HUAWEI Mate 10;HUAWEI Mate 30;HUAWEI Mate 30 Pro;HUAWEI P40;HUAWEI P40 Pro
Published: 2020-12-24T15:49:40.000Z
CVE-2020-9120 
CloudEngine 1800V versions V100R019C10SPC500 has a resource management error vulnerability. Remote unauthorized attackers could send specific types of messages to the device, resulting in the message received by the system can't be forwarded normally.
Problem types: description: Resource Management Error
Affected products: vendor: n/a
product: CloudEngine 1800V
Published: 2020-12-24T15:51:07.000Z
CVE-2020-9122 
Some Huawei products have an insufficient input verification vulnerability. Attackers can exploit this vulnerability in the LAN to cause service abnormal on affected devices.Affected product versions include:HiRouter-CD30-10 version 10.0.2.5;HiRouter-CT31-10 version 10.0.2.20;WS5200-12 version 10.0.1.9;WS5281-10 version 10.0.5.10;WS5800-10 version 10.0.3.25;WS7100-10 version 10.0.5.21;WS7200-10 version 10.0.5.21.
Problem types: description: Insufficient Input Verification
Affected products: vendor: n/a
product: HiRouter-CD30-10;HiRouter-CT31-10;WS5200-12;WS5281-10;WS5800-10;WS7100-10;WS7200-10
Published: 2020-10-12T13:37:31.000Z
CVE-2020-9123 
HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) and versions earlier than 10.1.0.160(C01E160R2P8) have a buffer overflow vulnerability. An attacker induces users to install malicious applications and sends specially constructed packets to affected devices after obtaining the root permission. Successful exploit may cause code execution.
Problem types: description: Buffer Overflow
Affected products: vendor: n/a
product: HUAWEI P30 Pro
Published: 2020-10-12T13:41:48.000Z
CVE-2020-9124 
There is a memory leak vulnerability in some versions of Huawei CloudEngine product. An unauthenticated, remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause memory leak.
Problem types: description: Memory Leak
Affected products: vendor: Huawei
product: CloudEngine 12800
vendor: Huawei
product: CloudEngine 5800
vendor: Huawei
product: CloudEngine 6800
vendor: Huawei
product: CloudEngine 7800
Published: 2020-12-29T17:17:07.000Z
CVE-2020-9125 
There is an out-of-bound read vulnerability in huawei smartphone Mate 30 versions earlier than 10.1.0.156 (C00E155R7P2). An attacker with specific permission can exploit this vulnerability by sending crafted packet with specific parameter to the target device. Due to insufficient validation of the parameter, successful exploit can cause the device to behave abnormally.
Problem types: description: Out Of Bound Read
Affected products: vendor: n/a
product: HUAWEI Mate 30
Published: 2020-12-29T17:22:09.000Z
CVE-2020-9127 
Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may inject some malicious codes in some files of the affected products. Successful exploit may cause command injection.Affected product versions include:NIP6300 versions V500R001C30,V500R001C60;NIP6600 versions V500R001C30,V500R001C60;Secospace USG6300 versions V500R001C30,V500R001C60;Secospace USG6500 versions V500R001C30,V500R001C60;Secospace USG6600 versions V500R001C30,V500R001C60;USG9500 versions V500R001C30,V500R001C60.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: NIP6300;NIP6600;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG9500
Published: 2020-11-13T14:46:52.000Z
CVE-2020-9128 
FusionCompute versions 8.0.0 have an insecure encryption algorithm vulnerability. Attackers with high permissions can exploit this vulnerability to cause information leak.
Problem types: description: Insecure Encryption Algorithm
Affected products: vendor: n/a
product: FusionCompute
Published: 2020-11-12T13:50:46.000Z
CVE-2020-9129 
HUAWEI Mate 30 versions earlier than 10.1.0.159(C00E159R7P2) have a vulnerability of improper buffer operation. Due to improper restrictions, local attackers with high privileges can exploit the vulnerability to cause system heap overflow.
Problem types: description: Improper Buffer Operation Restrictions
Affected products: vendor: n/a
product: HUAWEI Mate 30
Published: 2020-11-13T14:48:28.000Z
CVE-2020-9137 
There is a privilege escalation vulnerability in some versions of CloudEngine 12800,CloudEngine 5800,CloudEngine 6800 and CloudEngine 7800. Due to insufficient input validation, a local attacker with high privilege may execute some specially crafted scripts in the affected products. Successful exploit will cause privilege escalation.
Problem types: description: Privilege Escalation
Affected products: vendor: n/a
product: CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800
Published: 2020-12-24T15:47:56.000Z
CVE-2020-9138 
There is a heap-based buffer overflow vulnerability in some Huawei Smartphone, Successful exploit of this vulnerability can cause process exceptions during updating.
Problem types: description: Heap-based Buffer Overflow
Affected products: vendor: n/a
product: EMUI;Magic UI
Published: 2021-01-13T22:00:00.000Z
CVE-2020-9139 
There is a improper input validation vulnerability in some Huawei Smartphone.Successful exploit of this vulnerability can cause memory access errors and denial of service.
Problem types: description: Improper Input Validation
Affected products: vendor: n/a
product: EMUI;Magic UI
Published: 2021-01-13T21:58:39.000Z
CVE-2020-9140 
There is a vulnerability with buffer access with incorrect length value in some Huawei Smartphone.Unauthorized users may trigger code execution when a buffer overflow occurs.
Problem types: description: Buffer Access with Incorrect Length Value
Affected products: vendor: n/a
product: EMUI;Magic UI
Published: 2021-01-13T21:55:57.000Z
CVE-2020-9141 
There is a improper privilege management vulnerability in some Huawei smartphone. Successful exploitation of this vulnerability can cause information disclosure and malfunctions due to insufficient verification of data authenticity.
Problem types: description: Improper Privilege Management
Affected products: vendor: n/a
product: EMUI;Magic UI
Published: 2021-01-13T21:53:48.000Z
CVE-2020-9142 
There is a heap base buffer overflow vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability can cause heap overflow and memory overwriting when the system incorrectly processes the update file.
Problem types: description: Heap-based Buffer Overflow
Affected products: vendor: n/a
product: EMUI;Magic UI
Published: 2021-01-13T21:48:46.000Z
CVE-2020-9143 
There is a missing authentication vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability may lead to low-sensitive information exposure.
Problem types: description: Missing Authentication for Critical Function
Affected products: vendor: n/a
product: EMUI;Magic UI
Published: 2021-01-13T21:52:21.000Z
CVE-2020-9144 
There is a heap overflow vulnerability in some Huawei smartphone, attackers can exploit this vulnerability to cause heap overflows due to improper restriction of operations within the bounds of a memory buffer.
Problem types: description: Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: n/a
product: EMUI
vendor: n/a
product: Magic UI
Published: 2021-01-13T18:53:04.000Z
CVE-2020-9145 
There is an Out-of-bounds Write vulnerability in some Huawei smartphone. Successful exploitation of this vulnerability may cause out-of-bounds access to the physical memory.
Problem types: description: Out-of-bounds Write
Affected products: vendor: n/a
product: EMUI;Magic UI
Published: 2021-01-13T19:40:05.000Z
CVE-2020-9146 
A memory buffer error vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to cause memory leakage and doS attacks by carefully constructing attack scenarios.
Problem types: description: Out-of-bounds Read
Affected products: vendor: n/a
product: EMUI;Magic UI
Published: 2021-04-01T17:53:16.000Z
CVE-2020-9147 
A memory buffer error vulnerability exists in a component interface of Huawei Smartphone. Local attackers may exploit this vulnerability by carefully constructing attack scenarios to cause out-of-bounds read.
Problem types: description: Buffer Underwrite
Affected products: vendor: n/a
product: EMUI;Magic UI
Published: 2021-04-01T17:51:54.000Z
CVE-2020-9148 
An application bypass mechanism vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to delete user SMS messages.
Problem types: description: Multiple Unlocks of a Critical Resource
Affected products: vendor: n/a
product: EMUI;Magic UI
Published: 2021-04-01T17:56:39.000Z
CVE-2020-9149 
An application error verification vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to modify and delete user SMS messages.
Problem types: description: Incorrect Authorization
Affected products: vendor: n/a
product: EMUI;Magic UI
Published: 2021-04-01T17:55:04.000Z
CVE-2020-9158 
There is a Missing Cryptographic Step vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause DoS of Samgr.
Problem types: description: Missing Cryptographic Step
Affected products: vendor: n/a
product: EMUI, Magic UI
Published: 2021-07-01T11:21:03.000Z
CVE-2020-9199 
B2368-22 V100R001C00;B2368-57 V100R001C00;B2368-66 V100R001C00 have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the LAN. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject commands to the target device.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: B2368-22;B2368-57;B2368-66
Published: 2020-09-03T17:58:32.000Z
CVE-2020-9200 
There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject CSV files to the target device.
Problem types: description: CSV Injection
Affected products: vendor: n/a
product: iManager NetEco 6000
Published: 2020-12-24T15:41:04.000Z
CVE-2020-9201 
There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service abnormal.
Problem types: description: Out of Bounds Read
Affected products: vendor: n/a
product: NIP6800;Secospace USG6600;USG9500
Published: 2020-12-24T15:44:52.000Z
CVE-2020-9202 
There is an information disclosure vulnerability in TE Mobile software versions V600R006C10,V600R006C10SPC100. Due to the improper storage of some information in certain specific scenario, the attacker can gain information in the victim's device to launch the attack, successful exploit could cause information disclosure.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: TE Mobile
Published: 2020-12-24T15:42:43.000Z
CVE-2020-9203 
There is a resource management errors vulnerability in Huawei P30. Local attackers construct broadcast message for some application, causing this application to send this broadcast message and impact the customer's use experience.
Problem types: description: Resource Management Errors
Affected products: vendor: n/a
product: HUAWEI P30
Published: 2021-01-13T22:01:34.000Z