rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-37068 
There is a Resource Management Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to denial of Service Attacks.
Problem types: description: Resource Management Errors vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:03:42.000Z
CVE-2021-37069 
There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.
Problem types: description: Race Condition vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2021-12-08T14:12:48.000Z
CVE-2021-37070 
There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to process crash.
Problem types: description: Out-of-bounds Read vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:03:47.000Z
CVE-2021-37071 
There is a Business Logic Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to persistent dos.
Problem types: description: Business Logic Errors vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:03:52.000Z
CVE-2021-37072 
There is a Incorrect Calculation of Buffer Size vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to memory crash.
Problem types: description: Incorrect Calculation of Buffer Size vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:03:57.000Z
CVE-2021-37073 
There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the detection result is tampered with.
Problem types: description: Race Condition vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:04:02.000Z
CVE-2021-37074 
There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user root privilege escalation.
Problem types: description: Race Condition vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2021-12-08T14:12:53.000Z
CVE-2021-37075 
There is a Credentials Management Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to confidentiality affected.
Problem types: description: Credentials Management Errors vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2021-12-08T14:13:00.000Z
CVE-2021-37076 
There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.
Problem types: description: Out-of-bounds Read vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:04:08.000Z
CVE-2021-37077 
There is a NULL Pointer Dereference vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to kernel crash.
Problem types: description: NULL Pointer Dereference vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:04:14.000Z
CVE-2021-37078 
There is a Uncaught Exception vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to remote Denial of Service.
Problem types: description: Uncaught Exception vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:04:19.000Z
CVE-2021-37079 
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to delete arbitrary file by system_app permission.
Problem types: description: Improper Input Validation vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:04:24.000Z
CVE-2021-37080 
There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.
Problem types: description: Incomplete Cleanup vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:04:32.000Z
CVE-2021-37081 
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to nearby crash.
Problem types: description: Improper Input Validation vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:04:39.000Z
CVE-2021-37082 
There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to motionhub crash.
Problem types: description: Race Condition vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:04:47.000Z
CVE-2021-37083 
There is a NULL Pointer Dereference vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Denial of Service Attacks.
Problem types: description: NULL Pointer Dereference vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:04:54.000Z
CVE-2021-37084 
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious invoking other functions of the Smart Assistant through text messages.
Problem types: description: Improper Input Validation vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:05:02.000Z
CVE-2021-37085 
There is a Encoding timing vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to denial of service.
Problem types: description: Encoding timing vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:05:10.000Z
CVE-2021-37086 
There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers which can isolate and read synchronization files of other applications across the UID sandbox.
Problem types: description: Improper Preservation of Permissions vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:05:19.000Z
CVE-2021-37087 
There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers can create arbitrary file.
Problem types: description: Path Traversal vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:05:44.000Z
CVE-2021-37088 
There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers can write any content to any file.
Problem types: description: Path Traversal vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:05:48.000Z
CVE-2021-37089 
There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to kernel restart.
Problem types: description: Incomplete Cleanup vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:05:54.000Z
CVE-2021-37090 
There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to process crash.
Problem types: description: Out-of-bounds Read vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:06:00.000Z
CVE-2021-37091 
There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to confidentiality affected.
Problem types: description: Permissions,Privileges,and Access Controls vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:06:07.000Z
CVE-2021-37092 
There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.
Problem types: description: Incomplete Cleanup vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2021-12-08T14:13:05.000Z
CVE-2021-37093 
There is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers steal short messages.
Problem types: description: Improper Access Control vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2021-12-08T14:13:11.000Z
CVE-2021-37094 
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system denial of service.
Problem types: description: Improper Input Validation vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:06:17.000Z
CVE-2021-37095 
There is a Integer Overflow or Wraparound vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to remote denial of service and potential remote code execution.
Problem types: description: Integer Overflow or Wraparound vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:06:22.000Z
CVE-2021-37096 
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to user privacy disclosed.
Problem types: description: Improper Input Validation vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:06:28.000Z
CVE-2021-37097 
There is a Code Injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system restart.
Problem types: description: Code Injection vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2021-12-08T14:13:16.000Z
CVE-2021-37098 
Hilinksvc service exists a Data Processing Errors vulnerability .Successful exploitation of this vulnerability may cause application crash.
Problem types: description: Data Processing Errors
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2022-01-03T21:07:14.000Z
CVE-2021-37099 
There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to delete any file.
Problem types: description: Path Traversal vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:06:32.000Z
CVE-2021-37100 
There is a Improper Authentication vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to account authentication bypassed.
Problem types: description: Improper Authentication vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-12-07T16:06:39.000Z
CVE-2021-37101 
There is an improper authorization vulnerability in AIS-BW50-00 9.0.6.2(H100SP10C00) and 9.0.6.2(H100SP15C00). Due to improper authorization mangement, an attakcer can exploit this vulnerability by physical accessing the device and implant malicious code. Successfully exploit could leads to arbitrary code execution in the target device.
Problem types: description: Improper Authorization
Affected products: vendor: n/a
product: AIS-BW50-00
Published: 2021-09-09T13:13:40.000Z
CVE-2021-37102 
There is a command injection vulnerability in CMA service module of FusionCompute product when processing the default certificate file. The software constructs part of a command using external special input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands to the system. Affected product versions include: FusionCompute 6.0.0, 6.3.0, 6.3.1, 6.5.0, 6.5.1, 8.0.0.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: FusionCompute
Published: 2021-11-23T15:02:39.000Z
CVE-2021-37103 
There is an improper permission management vulnerability in the Wallet apps. Successful exploitation of this vulnerability may affect service confidentiality.
Problem types: description: Improper permission management vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2022-02-25T18:11:13.000Z
CVE-2021-37104 
There is a server-side request forgery vulnerability in HUAWEI P40 versions 10.1.0.118(C00E116R3P3). This vulnerability is due to insufficient validation of parameters while dealing with some messages. A successful exploit could allow the attacker to gain access to certain resource which the attacker are supposed not to do.
Problem types: description: Server-Side Request Forgery
Affected products: vendor: n/a
product: HUAWEI P40
Published: 2021-09-28T14:01:27.000Z
CVE-2021-37105 
There is an improper file upload control vulnerability in FusionCompute 6.5.0, 6.5.1 and 8.0.0. Due to the improper verification of file to be uploaded and does not strictly restrict the file access path, attackers may upload malicious files to the device, resulting in the service abnormal.
Problem types: description: Improper File Upload Control
Affected products: vendor: n/a
product: FusionCompute
Published: 2021-09-28T14:03:53.000Z
CVE-2021-37106 
There is a command injection vulnerability in CMA service module of FusionCompute 6.3.0, 6.3.1, 6.5.0 and 8.0.0 when processing the default certificate file. The software constructs part of a command using external special input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands to the system.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: FusionCompute
Published: 2021-09-28T14:02:38.000Z
CVE-2021-37107 
There is an improper memory access permission configuration on ACPU.Successful exploitation of this vulnerability may cause out-of-bounds access.
Problem types: description: Improper Privilege Management
Affected products: vendor: Huawei
product: EMUI
Published: 2022-02-09T22:03:52.000Z
CVE-2021-37109 
There is a security protection bypass vulnerability with the modem.Successful exploitation of this vulnerability may cause memory protection failure.
Problem types: description: Security protection bypass vulnerability
Affected products: vendor: Huawei
product: EMUI
Published: 2022-02-09T22:03:51.000Z
CVE-2021-37110 
There is a Timing design defects in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
Problem types: description: Timing design defects
Affected products: vendor: n/a
product: EMUI;Magic UI;Harmony OS
Published: 2022-01-03T21:07:44.000Z
CVE-2021-37111 
There is a Memory leakage vulnerability in Smartphone.Successful exploitation of this vulnerability may cause memory exhaustion.
Problem types: description: Memory leakage
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: Harmony OS
Published: 2022-01-03T21:07:27.000Z
CVE-2021-37112 
Hisuite module has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability may lead to Firmware leak.
Problem types: description: External Control of System or Configuration Setting
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2022-01-03T21:07:32.000Z
CVE-2021-37113 
There is a Privilege escalation vulnerability with the file system component in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
Problem types: description: Privilege escalation
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: Harmony OS
Published: 2022-01-03T21:07:28.000Z
CVE-2021-37114 
There is an Out-of-bounds read vulnerability in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
Problem types: description: Out-of-bounds read
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: Harmony OS
Published: 2022-01-03T21:07:28.000Z
CVE-2021-37115 
There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect service confidentiality.
Problem types: description: Unauthorized rewriting vulnerability
Affected products: vendor: Huawei
product: EMUI
Published: 2022-02-09T22:03:50.000Z
CVE-2021-37116 
PCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of this vulnerability may cause that the PIN of the subscriber is changed.
Problem types: description: Weaknesses Introduced During Design
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2022-01-03T21:07:15.000Z
CVE-2021-37117 
There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.
Problem types: description: Service logic
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: Harmony OS
Published: 2022-01-03T21:07:29.000Z
CVE-2021-37118 
The HwNearbyMain module has a Improper Handling of Exceptional Conditions vulnerability.Successful exploitation of this vulnerability may lead to message leak.
Problem types: description: Improper Handling of Exceptional Conditions
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2022-01-03T21:07:33.000Z
CVE-2021-37119 
There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.
Problem types: description: Service logic
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: Harmony OS
Published: 2022-01-03T21:07:30.000Z
CVE-2021-37120 
There is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability may cause a kernel crash or privilege escalation.
Problem types: description: Double free
Affected products: vendor: n/a
product: EMUI;Magic UI
Published: 2022-01-03T21:07:13.000Z
CVE-2021-37121 
There is a Configuration defects in Smartphone.Successful exploitation of this vulnerability may elevate the MEID (IMEI) permission.
Problem types: description: Configuration defects
Affected products: vendor: n/a
product: EMUI;Magic UI
Published: 2022-01-03T21:07:13.000Z
CVE-2021-37122 
There is a use-after-free (UAF) vulnerability in Huawei products. An attacker may craft specific packets to exploit this vulnerability. Successful exploitation may cause the service abnormal. Affected product versions include:CloudEngine 12800 V200R005C10SPC800,V200R019C00SPC800;CloudEngine 5800 V200R005C10SPC800,V200R019C00SPC800;CloudEngine 6800 V200R005C10SPC800,V200R005C20SPC800,V200R019C00SPC800;CloudEngine 7800 V200R005C10SPC800,V200R019C00SPC800.
Problem types: description: Use-after-free
Affected products: vendor: n/a
product: CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800
Published: 2021-10-27T00:36:07.000Z
CVE-2021-37123 
There is an improper authentication vulnerability in Hero-CT060 before 1.0.0.200. The vulnerability is due to that when an user wants to do certain operation, the software does not insufficiently validate the user's identity. Successful exploit could allow the attacker to do certain operations which the user are supposed not to do.
Problem types: description: Improper Authentication
Affected products: vendor: n/a
product: Hero-CT060
Published: 2021-10-11T15:53:17.000Z
CVE-2021-37124 
There is a path traversal vulnerability in Huawei PC product. Because the product does not filter path with special characters,attackers can construct a file path with special characters to exploit this vulnerability. Successful exploitation could allow the attacker to transport a file to certain path.Affected product versions include:PC Smart Full Scene 11.1 versions PCManager 11.1.1.97.
Problem types: description: Path Traversal
Affected products: vendor: n/a
product: PC Smart Full Scene 11.1
Published: 2021-10-27T00:30:39.000Z
CVE-2021-37125 
Arbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability .Successful exploitation of this vulnerability may cause confidentiality is affected.
Problem types: description: Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2022-01-03T21:07:16.000Z
CVE-2021-37126 
Arbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability .Successful exploitation of this vulnerability may cause the directory is traversed.
Problem types: description: Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2022-01-03T21:07:17.000Z
CVE-2021-37127 
There is a signature management vulnerability in some huawei products. An attacker can forge signature and bypass the signature check. During firmware update process, successful exploit this vulnerability can cause the forged system file overwrite the correct system file. Affected product versions include:iManager NetEco V600R010C00CP2001,V600R010C00CP2002,V600R010C00SPC100,V600R010C00SPC110,V600R010C00SPC120,V600R010C00SPC200,V600R010C00SPC210,V600R010C00SPC300;iManager NetEco 6000 V600R009C00SPC100,V600R009C00SPC110,V600R009C00SPC120,V600R009C00SPC190,V600R009C00SPC200,V600R009C00SPC201,V600R009C00SPC202,V600R009C00SPC210.
Problem types: description: Improper Signature Management
Affected products: vendor: n/a
product: iManager NetEco;iManager NetEco 6000
Published: 2021-10-27T00:31:45.000Z
CVE-2021-37128 
HwPCAssistant has a Path Traversal vulnerability .Successful exploitation of this vulnerability may write any file.
Problem types: description: Path Traversal
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2022-01-03T21:07:17.000Z
CVE-2021-37129 
There is an out of bounds write vulnerability in some Huawei products. The vulnerability is caused by a function of a module that does not properly verify input parameter. Successful exploit could cause out of bounds write leading to a denial of service condition.Affected product versions include:IPS Module V500R005C00,V500R005C20;NGFW Module V500R005C00;NIP6600 V500R005C00,V500R005C20;S12700 V200R010C00SPC600,V200R011C10SPC500,V200R011C10SPC600,V200R013C00SPC500,V200R019C00SPC200,V200R019C00SPC500,V200R019C10SPC200,V200R020C00,V200R020C10;S1700 V200R010C00SPC600,V200R011C10SPC500,V200R011C10SPC600;S2700 V200R010C00SPC600,V200R011C10SPC500,V200R011C10SPC600;S5700 V200R010C00SPC600,V200R010C00SPC700,V200R011C10SPC500,V200R011C10SPC600,V200R019C00SPC500;S6700 V200R010C00SPC600,V200R011C10SPC500,V200R011C10SPC600;S7700 V200R010C00SPC600,V200R010C00SPC700,V200R011C10SPC500,V200R011C10SPC600;S9700 V200R010C00SPC600,V200R011C10SPC500,V200R011C10SPC600;USG9500 V500R005C00,V500R005C20.
Problem types: description: Out of Bounds Write
Affected products: vendor: n/a
product: IIPS Module;NGFW Module;NIP6600;S12700;S1700;S2700;S5700;S6700;S7700;S9700;USG9500
Published: 2021-10-27T00:41:44.000Z
CVE-2021-37130 
There is a path traversal vulnerability in Huawei FusionCube 6.0.2.The vulnerability is due to that the software uses external input to construct a pathname that is intended to identify a directory that is located underneath a restricted parent directory, but the software does not properly validate the pathname. Successful exploit could allow the attacker to access a location that is outside of the restricted directory by a crafted filename.
Problem types: description: Path Traversal
Affected products: vendor: n/a
product: FusionCube
Published: 2021-10-27T00:33:28.000Z