rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-3989 Open Redirect in star7th/showdoc
showdoc is vulnerable to URL Redirection to Untrusted Site
Problem types: cwe_id: CWE-601
description: CWE-601 URL Redirection to Untrusted Site
Affected products: vendor: star7th
product: star7th/showdoc
Published: 2021-12-01T10:55:10.000Z
CVE-2021-3990 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Problem types: cwe_id: CWE-338
description: CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Affected products: vendor: star7th
product: star7th/showdoc
Published: 2021-12-01T10:50:10.000Z
CVE-2021-3991 Improper Authorization in dolibarr/dolibarr
An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions.
Problem types: cwe_id: CWE-285
description: CWE-285 Improper Authorization
Affected products: vendor: dolibarr
product: dolibarr/dolibarr
Published: 2024-11-15T10:52:49.304Z
CVE-2021-3992 Improper Access Control in kevinpapst/kimai2
kimai2 is vulnerable to Improper Access Control
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: kevinpapst
product: kevinpapst/kimai2
Published: 2021-12-01T10:45:11.000Z
CVE-2021-3993 Cross-Site Request Forgery (CSRF) in star7th/showdoc
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: star7th
product: star7th/showdoc
Published: 2021-12-01T10:40:09.000Z
CVE-2021-3994 Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: django-helpdesk
product: django-helpdesk/django-helpdesk
Published: 2021-12-01T10:40:14.000Z
CVE-2021-3995 
A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to unmount FUSE filesystems that belong to certain other users who have a UID that is a prefix of the UID of the attacker in its string form. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.
Problem types: cwe_id: CWE-552
description: CWE-552 - Files or Directories Accessible to External Parties
Affected products: vendor: n/a
product: util-linux
Published: 2022-08-23T00:00:00.000Z
CVE-2021-3996 
A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves (like /tmp) or mounted in a world-writable directory. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.
Problem types: cwe_id: CWE-552
description: CWE-552 - Files or Directories Accessible to External Parties
Affected products: vendor: n/a
product: util-linux
Published: 2022-08-23T00:00:00.000Z
CVE-2021-3997 
A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp.
Problem types: cwe_id: CWE-674
description: CWE-674 - Uncontrolled Recursion
Affected products: vendor: n/a
product: systemd
Published: 2022-08-23T00:00:00.000Z
CVE-2021-3998 
A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.
Problem types: cwe_id: CWE-125
description: CWE-125 - Out-of-bounds Read
Affected products: vendor: n/a
product: glibc
Published: 2022-08-24T00:00:00.000Z
CVE-2021-3999 
A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to potentially execute arbitrary code and escalate their privileges on the system.
Problem types: cwe_id: CWE-193
description: CWE-193 - Off-by-one Error
Affected products: vendor: n/a
product: glibc
Published: 2022-08-24T00:00:00.000Z
CVE-2021-40000 
The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the remote end.
Problem types: description: Heap-based Buffer Overflow
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2022-01-07T22:39:26.000Z
CVE-2021-40001 
The CaasKit module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the MeeTime application to be unavailable.
Problem types: description: Path Traversal
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2022-01-07T22:39:26.000Z
CVE-2021-40002 
The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the remote end.
Problem types: description: Heap-based Buffer Overflow
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2022-01-07T22:39:27.000Z
CVE-2021-40003 
HwPCAssistant has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
Problem types: description: Path Traversal
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2022-01-07T22:39:28.000Z
CVE-2021-40004 
The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may affect data confidentiality.
Problem types: description: Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2022-01-07T22:39:29.000Z
CVE-2021-40005 
The distributed data service component has a vulnerability in data access control. Successful exploitation of this vulnerability may affect data confidentiality.
Problem types: description: Improper Access Control
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2022-01-07T22:39:30.000Z
CVE-2021-40006 
Vulnerability of design defects in the security algorithm component. Successful exploitation of this vulnerability may affect confidentiality.
Problem types: cwe_id: CWE-254
description: CWE-254 7PK - Security Features
Affected products: vendor: Huawei
product: HarmonyOS
default_status: unaffected
vendor: Huawei
product: EMUI
default_status: unaffected
Published: 2022-01-07T22:39:30.000Z
CVE-2021-40007 
There is an information leak vulnerability in eCNS280_TD V100R005C10SPC650. The vulnerability is caused by improper log output management. An attacker with the ability to access the log file of device may lead to information disclosure.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: eCNS280_TD
Published: 2021-12-13T15:48:04.000Z
CVE-2021-40008 
There is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine 5800 V200R019C00SPC800, CloudEngine 6800 V200R019C00SPC800 and CloudEngine 7800 V200R019C00SPC800. The software does not sufficiently track and release allocated memory while parse a series of crafted binary messages, which could consume remaining memory. Successful exploit could cause memory exhaust.
Problem types: description: Memory Leak
Affected products: vendor: n/a
product: CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800
Published: 2021-12-13T15:48:05.000Z
CVE-2021-40009 
There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.
Problem types: description: Out-of-bounds write vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-01-07T22:39:33.000Z
CVE-2021-40010 
The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution.
Problem types: description: Heap overflow vulnerability
Affected products: vendor: n/a
product: HarmonyOS;EMUI;Magic UI
Published: 2022-01-07T22:39:40.000Z
CVE-2021-40011 
There is an uncontrolled resource consumption vulnerability in the display module. Successful exploitation of this vulnerability may affect integrity.
Problem types: description: Uncontrolled resource consumption vulnerability
Affected products: vendor: n/a
product: EMUI;Magic UI;HarmonyOS
Published: 2022-01-07T22:39:31.000Z
CVE-2021-40012 
Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality.
Problem types: description: Incorrect pointer usage vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2022-07-11T13:53:47.000Z
CVE-2021-40013 
Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity.
Problem types: description: Improper permission control vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2022-07-11T13:53:52.000Z
CVE-2021-40014 
The bone voice ID trusted application (TA) has a heap overflow vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
Problem types: description: Information Management Errors
Affected products: vendor: Huawei
product: HarmonyOS
default_status: unaffected
vendor: Huawei
product: EMUI
default_status: unaffected
Published: 2022-01-07T22:39:41.000Z
CVE-2021-40015 
There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability.
Problem types: description: Race condition vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-02-09T22:03:57.000Z
CVE-2021-40016 
Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect confidentiality.
Problem types: description: Improper permission control vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2022-07-11T13:53:57.000Z
CVE-2021-40017 
The HW_KEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may result in out-of-bounds memory access.
Problem types: description: Out-of-bounds memory access vulnerability
Affected products: vendor: n/a
product: HarmonyOS;EMUI
Published: 2022-09-16T00:00:00.000Z
CVE-2021-40018 
The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
Problem types: description: Null Pointer Reference
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2022-01-07T22:39:42.000Z
CVE-2021-40019 
Out-of-bounds heap read vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds access.
Problem types: description: Out-of-bounds heap read vulnerability
Affected products: vendor: Huawei
product: EMUI
Published: 2022-09-16T17:58:03.000Z
CVE-2021-40020 
There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Successful exploitation of this vulnerability may affect service confidentiality.
Problem types: description: Out-of-bounds array read
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2022-01-07T22:39:32.000Z
CVE-2021-40021 
The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data confidentiality.
Problem types: description: Out-of-bounds write
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2022-01-07T22:39:43.000Z
CVE-2021-40022 
The weaver module has a vulnerability in parameter type verification,Successful exploitation of this vulnerability may affect data confidentiality.
Problem types: description: Improper Input Validation
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2022-01-07T22:39:44.000Z
CVE-2021-40023 
Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality.
Problem types: description: Configuration defects
Affected products: vendor: Huawei
product: EMUI
Published: 2022-09-16T17:57:57.000Z
CVE-2021-40024 
Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
Problem types: description: Information leakage vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
vendor: Huawei
product: EMUI
Published: 2022-09-16T17:55:38.000Z
CVE-2021-40025 
The eID module has a vulnerability that causes the memory to be used without being initialized,Successful exploitation of this vulnerability may affect data confidentiality.
Problem types: description: Information Management Errors
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2022-01-07T22:39:44.000Z
CVE-2021-40026 
There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.
Problem types: description: Heap-based buffer overflow
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-01-07T22:39:34.000Z
CVE-2021-40027 
The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability may affect data confidentiality.
Problem types: cwe_id: CWE-476
description: CWE-476 NULL Pointer Dereference
Affected products: vendor: Huawei
product: HarmonyOS
default_status: unaffected
vendor: Huawei
product: EMUI
default_status: unaffected
Published: 2022-01-07T22:39:45.000Z
CVE-2021-40028 
The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity.
Problem types: description: Out-of-bounds write
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2022-01-07T22:39:46.000Z
CVE-2021-40029 
There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function stability.
Problem types: description: Buffer overflow vulnerability due to a boundary error with the Samba server
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-01-07T22:39:34.000Z
CVE-2021-40030 
The My HUAWEI app has a defect in the design. Successful exploitation of this vulnerability may affect data confidentiality.
Problem types: description: Weaknesses Introduced During Design
Affected products: vendor: Huawei
product: HarmonyOS
vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2022-08-09T20:11:10.000Z
CVE-2021-40031 
There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity.
Problem types: description: Null pointer dereference
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-01-07T22:39:35.000Z
CVE-2021-40032 
The bone voice ID TA has a vulnerability in information management,Successful exploitation of this vulnerability may affect data confidentiality.
Problem types: description: Information Management Errors
Affected products: vendor: Huawei
product: HarmonyOS
default_status: unaffected
vendor: Huawei
product: EMUI
default_status: unaffected
Published: 2022-01-07T22:39:47.000Z
CVE-2021-40033 
There is an information exposure vulnerability on several Huawei Products. The vulnerability is due to that the software does not properly protect certain information. Successful exploit could cause information disclosure. Affected product versions include: CloudEngine 12800 V200R005C10SPC800; CloudEngine 5800 V200R005C10SPC800, V200R019C00SPC800; CloudEngine 6800 V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 V200R005C10SPC800, V200R019C00SPC800.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-31T15:57:36.000Z
CVE-2021-40034 
The video framework has the memory overwriting vulnerability caused by addition overflow. Successful exploitation of this vulnerability may affect the availability.
Problem types: description: Memory overwriting vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2022-08-09T20:10:14.000Z
CVE-2021-40035 
There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function stability.
Problem types: description: Buffer overflow vulnerability due to a boundary error with the Samba server
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-01-07T22:39:36.000Z
CVE-2021-40036 
The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in malicious code execution.
Problem types: description: Memory overwrite vulnerability
Affected products: vendor: n/a
product: HarmonyOS
Published: 2022-06-13T18:01:42.000Z
CVE-2021-40037 
There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart.
Problem types: description: Vulnerability of accessing resources using an incompatible type (type confusion)
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-01-07T22:39:37.000Z
CVE-2021-40038 
There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.
Problem types: description: Double free
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-01-07T22:39:38.000Z
CVE-2021-40039 
There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity.
Problem types: description: Null pointer dereference
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-01-07T22:39:39.000Z
CVE-2021-40040 
Vulnerability of writing data to an arbitrary address in the HW_KEYMASTER module. Successful exploitation of this vulnerability may affect confidentiality.
Problem types: description: Write data to arbitrary address vulnerability
Affected products: vendor: n/a
product: HarmonyOS;EMUI;Magic UI
Published: 2022-08-09T20:11:21.000Z
CVE-2021-40041 
There is a Cross-Site Scripting(XSS) vulnerability in HUAWEI WS318n product when processing network settings. Due to insufficient validation of user input, a local authenticated attacker could exploit this vulnerability by injecting special characters. Successful exploit could cause certain information disclosure. Affected product versions include: WS318n-21 10.0.2.2, 10.0.2.5 and 10.0.2.6.
Problem types: description: Cross-Site Scripting(XSS)
Affected products: vendor: n/a
product: WS318n-21
Published: 2022-01-07T22:39:24.000Z
CVE-2021-40042 
There is a release of invalid pointer vulnerability in some Huawei products, successful exploit may cause the process and service abnormal. Affected product versions include: CloudEngine 12800 V200R019C10SPC800, V200R019C10SPC900; CloudEngine 5800 V200R019C10SPC800, V200R020C00SPC600; CloudEngine 6800 versions V200R019C10SPC800, V200R019C10SPC900, V200R020C00SPC600, V300R020C00SPC200; CloudEngine 7800 V200R019C10SPC800.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-31T15:57:35.000Z
CVE-2021-40043 
The laser command injection vulnerability exists on AIS-BW80H-00 versions earlier than AIS-BW80H-00 9.0.3.4(H100SP13C00). The devices cannot effectively defend against external malicious interference. Attackers need the device to be visually exploitable and successful triggering of this vulnerability could execute voice commands on the device.
Problem types: description: Laser Command Injection
Affected products: vendor: n/a
product: AIS-BW80H-00
Published: 2022-02-25T18:11:14.000Z
CVE-2021-40044 
There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorized operations.
Problem types: description: Improper Handling of Insufficient Permissions or Privileges
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2022-02-09T22:03:56.000Z
CVE-2021-40045 
There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this vulnerability may affect service confidentiality.
Problem types: description: Missing Support for Integrity Check
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-02-09T22:03:55.000Z
CVE-2021-40046 
PCManager versions 11.1.1.95 has a privilege escalation vulnerability. Successful exploit could allow the attacker to access certain resource beyond its privilege.
Problem types: description: Privilege Escalation
Affected products: vendor: n/a
product: PCManager
Published: 2022-02-25T18:11:15.000Z
CVE-2021-40047 
There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulnerability may affect integrity.
Problem types: description: Missing Release of Resource after Effective Lifetime
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-03-07T13:51:07.000Z
CVE-2021-40048 
There is an incorrect buffer size calculation vulnerability in the video framework. Successful exploitation of this vulnerability will affect availability.
Problem types: description: Incorrect buffer size calculation vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-03-07T13:51:00.000Z
CVE-2021-40049 
There is a permission control vulnerability in the PMS module. Successful exploitation of this vulnerability can lead to sensitive system information being obtained without authorization.
Problem types: description: Permission control vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-03-07T13:50:55.000Z
CVE-2021-40050 
There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may cause stack overflow.
Problem types: description: Out-of-bounds read vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-03-07T13:50:49.000Z