stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2021-36916 (severity: CRITICAL, weakness: CWE-89)
The SQL injection vulnerability in the Hide My WP WordPress plugin (versions <= 6.2.3) is possible because of how the IP address is retrieved and used inside a SQL query. The function "hmwp_get_user_ip" tries to retrieve the IP address from multiple headers, including IP address headers that the user can spoof, such as "X-Forwarded-For." As a result, the malicious payload supplied in one of these IP address headers will be directly inserted into the SQL query, making SQL injection possible.
CVE-2021-36917 (severity: HIGH, weakness: CWE-284)
WordPress Hide My WP plugin (versions <= 6.2.3) can be deactivated by any unauthenticated user. It is possible to retrieve a reset token which can then be used to deactivate the plugin.
CVE-2021-36919 (severity: MEDIUM, weakness: CWE-79)
Multiple Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilities in WordPress Awesome Support plugin (versions <= 6.0.6), vulnerable parameters (&id, &assignee).
CVE-2021-3692 (severity: HIGH, weakness: CWE-1241)
yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator
CVE-2021-36920 (severity: MEDIUM, weakness: CWE-79)
Authenticated Reflected Cross-Site Scripting (XSS) vulnerability discovered in WordPress plugin Download Monitor (versions <= 4.4.6).
CVE-2021-36921 (severity: HIGH, weakness: CWE-287)
AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 has Improper Authentication. An attacker can gain administrative access by modifying the response to an authentication check request.
CVE-2021-36922 (severity: HIGH, weakness: NVD-CWE-Other)
RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB devices (Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure) via a crafted Device IO Control packet to a device.
CVE-2021-36923 (severity: HIGH, weakness: NVD-CWE-Other)
RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB device privileged IN and OUT instructions (leading to Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure) via a crafted Device IO Control packet to a device.
CVE-2021-36924 (severity: HIGH, weakness: CWE-367)
RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve a pool overflow (leading to Escalation of Privileges, Denial of Service, and Code Execution) via a crafted Device IO Control packet to a device.
CVE-2021-36925 (severity: HIGH, weakness: NVD-CWE-Other)
RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve an arbitrary read or write operation from/to physical memory (leading to Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure) via a crafted Device IO Control packet to a device.
CVE-2021-36926 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
CVE-2021-36927 (severity: HIGH, weakness: CWE-269)
Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability
CVE-2021-36928 (severity: HIGH, weakness: CWE-59)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2021-36929 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
CVE-2021-3693 (severity: CRITICAL, weakness: CWE-79)
LedgerSMB does not check the origin of HTML fragments merged into the browser's DOM. By sending a specially crafted URL to an authenticated user, this flaw can be abused for remote code execution and information disclosure.
CVE-2021-36930 (severity: HIGH, weakness: CWE-269)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2021-36931 (severity: HIGH, weakness: CWE-269)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2021-36932 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
CVE-2021-36933 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
CVE-2021-36934 (severity: HIGH, weakness: NVD-CWE-Other)
<p>An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>An attacker must have the ability to execute code on a victim system to exploit this vulnerability.</p> <p>After installing this security update, you <em>must</em> manually delete all shadow copies of system files, including the SAM database, to fully mitigate this vulnerabilty. <strong>Simply installing this security update will not fully mitigate this vulnerability.</strong> See <a href="https://support.microsoft.com/topic/1ceaa637-aaa3-4b58-a48b-baf72a2fa9e7">KB5005357- Delete Volume Shadow Copies</a>.</p>
CVE-2021-36936 (severity: CRITICAL, weakness: NVD-CWE-Other)
Windows Print Spooler Remote Code Execution Vulnerability
CVE-2021-36937 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability
CVE-2021-36938 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Cryptographic Primitives Library Information Disclosure Vulnerability
CVE-2021-3694 (severity: CRITICAL, weakness: CWE-79)
LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted URL to an authenticated user, this flaw can be abused for remote code execution and information disclosure.
CVE-2021-36940 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-36941 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Word Remote Code Execution Vulnerability
CVE-2021-36942 (severity: HIGH, weakness: NVD-CWE-Other)
Windows LSA Spoofing Vulnerability
CVE-2021-36943 (severity: HIGH, weakness: CWE-269)
Azure CycleCloud Elevation of Privilege Vulnerability
CVE-2021-36945 (severity: HIGH, weakness: CWE-269)
Windows 10 Update Assistant Elevation of Privilege Vulnerability
CVE-2021-36946 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
CVE-2021-36947 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Print Spooler Remote Code Execution Vulnerability
CVE-2021-36948 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Update Medic Service Elevation of Privilege Vulnerability
CVE-2021-36949 (severity: HIGH, weakness: CWE-287)
Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability
CVE-2021-3695 (severity: MEDIUM, weakness: CWE-787)
A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot protections. This issue has a high complexity to be exploited as an attacker needs to perform some triage over the heap layout to achieve signifcant results, also the values written into the memory are repeated three times in a row making difficult to produce valid payloads. This flaw affects grub2 versions prior grub-2.12.
CVE-2021-36950 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2021-36952 (severity: HIGH, weakness: CWE-787)
Visual Studio Remote Code Execution Vulnerability
CVE-2021-36953 (severity: HIGH, weakness: NVD-CWE-Other)
Windows TCP/IP Denial of Service Vulnerability
CVE-2021-36954 (severity: HIGH, weakness: CWE-269)
Windows Bind Filter Driver Elevation of Privilege Vulnerability
CVE-2021-36955 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-36956 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Sphere Information Disclosure Vulnerability
CVE-2021-36957 (severity: HIGH, weakness: CWE-269)
Windows Desktop Bridge Elevation of Privilege Vulnerability
CVE-2021-36958 (severity: HIGH, weakness: NVD-CWE-Other)
<p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
CVE-2021-36959 (severity: LOW, weakness: NVD-CWE-Other)
Windows Authenticode Spoofing Vulnerability
CVE-2021-3696 (severity: MEDIUM, weakness: CWE-787)
A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding and positioning of corrupted Huffman entries to achieve results such as arbitrary code execution and/or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12.
CVE-2021-36960 (severity: HIGH, weakness: NVD-CWE-Other)
Windows SMB Information Disclosure Vulnerability
CVE-2021-36961 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Installer Denial of Service Vulnerability
CVE-2021-36962 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Installer Information Disclosure Vulnerability
CVE-2021-36963 (severity: HIGH, weakness: CWE-269)
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-36964 (severity: HIGH, weakness: CWE-269)
Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-36965 (severity: CRITICAL, weakness: NVD-CWE-Other)
Windows WLAN AutoConfig Service Remote Code Execution Vulnerability
CVE-2021-36966 (severity: HIGH, weakness: CWE-269)
Windows Subsystem for Linux Elevation of Privilege Vulnerability
CVE-2021-36967 (severity: HIGH, weakness: CWE-269)
Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
CVE-2021-36968 (severity: HIGH, weakness: CWE-269)
Windows DNS Elevation of Privilege Vulnerability
CVE-2021-36969 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
CVE-2021-3697 (severity: HIGH, weakness: CWE-787)
A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an image with a malicious format and payload. This vulnerability can lead to data corruption and eventual code execution or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12.
CVE-2021-36970 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Print Spooler Spoofing Vulnerability
CVE-2021-36972 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows SMB Information Disclosure Vulnerability
CVE-2021-36973 (severity: HIGH, weakness: CWE-269)
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
CVE-2021-36974 (severity: HIGH, weakness: CWE-269)
Windows SMB Elevation of Privilege Vulnerability
CVE-2021-36975 (severity: HIGH, weakness: CWE-269)
Win32k Elevation of Privilege Vulnerability
CVE-2021-36976 (severity: MEDIUM, weakness: CWE-416)
libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).
CVE-2021-36977 (severity: MEDIUM, weakness: CWE-787)
matio (aka MAT File I/O Library) 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MM_memcpy (called from H5MM_malloc and H5C_load_entry), related to use of HDF5 1.12.0.
CVE-2021-36978 (severity: MEDIUM, weakness: CWE-787)
QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in Pl_ASCII85Decoder::write (called from Pl_AES_PDF::flush and Pl_AES_PDF::finish) when a certain downstream write fails.
CVE-2021-36979 (severity: MEDIUM, weakness: CWE-787)
Unicorn Engine 1.0.2 has an out-of-bounds write in tb_flush_armeb (called from cpu_arm_exec_armeb and tcg_cpu_exec_armeb).
CVE-2021-3698 (severity: HIGH, weakness: CWE-295)
A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon (SSSD). This flaw allows client certificates to authenticate successfully, regardless of the Certificate Revocation List (CRL) configuration or the certificate status. The highest threat from this vulnerability is to confidentiality.
CVE-2021-36980 (severity: MEDIUM, weakness: CWE-416)
Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.
CVE-2021-36981 (severity: HIGH, weakness: CWE-502)
In the server in SerNet verinice before 1.22.2, insecure Java deserialization allows remote authenticated attackers to execute arbitrary code.
CVE-2021-36982 (severity: HIGH, weakness: CWE-20)
AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 allows OS Command Injection because of missing input validation on one of the parameters of an HTTP request.
CVE-2021-36983 (severity: HIGH, weakness: CWE-59)
replay-sorcery-kms in Replay Sorcery 0.6.0 allows a local attacker to gain root privileges via a symlink attack on /tmp/replay-sorcery or /tmp/replay-sorcery/device.sock.
CVE-2021-36985 (severity: HIGH, weakness: CWE-94)
There is a Code injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may exhaust system resources and cause the system to restart.
CVE-2021-36986 (severity: CRITICAL, weakness: NVD-CWE-Other)
There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permissions.
CVE-2021-36987 (severity: MEDIUM, weakness: CWE-362)
There is a issue that nodes in the linked list being freed for multiple times in Huawei Smartphone due to race conditions. Successful exploitation of this vulnerability can cause the system to restart.
CVE-2021-36988 (severity: HIGH, weakness: NVD-CWE-Other)
There is a Parameter verification issue in Huawei Smartphone.Successful exploitation of this vulnerability can affect service integrity.
CVE-2021-36989 (severity: CRITICAL, weakness: CWE-276)
There is a Kernel crash vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permissions.
CVE-2021-36990 (severity: CRITICAL, weakness: CWE-276)
There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permissions.
CVE-2021-36991 (severity: HIGH, weakness: NVD-CWE-Other)
There is an Unauthorized file access vulnerability in Huawei Smartphone due to unstandardized path input.Successful exploitation of this vulnerability by creating malicious file paths can cause unauthorized file access.
CVE-2021-36992 (severity: HIGH, weakness: NVD-CWE-Other)
There is a Public key verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2021-36993 (severity: HIGH, weakness: CWE-401)
There is a Memory leaks vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.
CVE-2021-36994 (severity: LOW, weakness: CWE-362)
There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Smartphone due to race conditions. Successful exploitation of this vulnerability can cause exceptions when managing the system trustlist.
CVE-2021-36995 (severity: HIGH, weakness: NVD-CWE-Other)
There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by modifying soft links may tamper with the files restored from backups.
CVE-2021-36996 (severity: MEDIUM, weakness: NVD-CWE-Other)
There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission of certain virtual information.
CVE-2021-36997 (severity: MEDIUM, weakness: NVD-CWE-Other)
There is a Low memory error in Huawei Smartphone due to the unlimited size of images to be parsed.Successful exploitation of this vulnerability may cause the Gallery or Files app to exit unexpectedly.
CVE-2021-36998 (severity: MEDIUM, weakness: NVD-CWE-Other)
There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to read an array that is out of bounds.
CVE-2021-36999 (severity: HIGH, weakness: CWE-120)
There is a Buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by sending malicious images and inducing users to open the images may cause remote code execution.
CVE-2021-3700 (severity: MEDIUM, weakness: CWE-416)
A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c. This issue occurs when serializing large amounts of buffered write data in the case of a slow or blocked destination.
CVE-2021-37000 (severity: HIGH, weakness: CWE-255)
Some Huawei wearables have a permission management vulnerability.
CVE-2021-37001 (severity: HIGH, weakness: NVD-CWE-Other)
There is a Register tampering vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow the register value to be modified.
CVE-2021-37002 (severity: CRITICAL, weakness: CWE-119)
There is a Memory out-of-bounds access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause malicious code to be executed.
CVE-2021-37003 (severity: HIGH, weakness: CWE-20)
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.
CVE-2021-37004 (severity: HIGH, weakness: CWE-20)
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.
CVE-2021-37005 (severity: HIGH, weakness: CWE-20)
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.
CVE-2021-37006 (severity: HIGH, weakness: CWE-281)
There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the confidentiality of users is affected.
CVE-2021-37007 (severity: HIGH, weakness: CWE-125)
There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.
CVE-2021-37008 (severity: HIGH, weakness: CWE-20)
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.
CVE-2021-37009 (severity: HIGH, weakness: NVD-CWE-Other)
There is a Configuration vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the confidentiality of users is affected.
CVE-2021-3701 (severity: MEDIUM, weakness: CWE-276)
A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R/W locations. This flaw allows an attacker to pre-create the directory, resulting in reading private information or forcing ansible-runner to write files as the legitimate user in a place they did not expect. The highest threat from this vulnerability is to confidentiality and integrity.
CVE-2021-37010 (severity: HIGH, weakness: CWE-200)
There is a Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the confidentiality of users is affected.
CVE-2021-37011 (severity: CRITICAL, weakness: CWE-787)
There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read.
CVE-2021-37012 (severity: HIGH, weakness: NVD-CWE-Other)
There is a Data Processing Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.
CVE-2021-37013 (severity: MEDIUM, weakness: CWE-20)
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the availability of users is affected.
CVE-2021-37014 (severity: HIGH, weakness: CWE-787)
There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to device cannot be used properly.
CVE-2021-37015 (severity: HIGH, weakness: CWE-125)
There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.
CVE-2021-37016 (severity: CRITICAL, weakness: CWE-125)
There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause Information Disclosure or Denial of Service.
CVE-2021-37017 (severity: HIGH, weakness: CWE-20)
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.
CVE-2021-37018 (severity: HIGH, weakness: NVD-CWE-Other)
There is a Data Processing Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.
CVE-2021-37019 (severity: HIGH, weakness: CWE-20)
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.
CVE-2021-3702 (severity: MEDIUM, weakness: CWE-362)
A race condition flaw was found in ansible-runner, where an attacker could watch for rapid creation and deletion of a temporary directory, substitute their directory at that name, and then have access to ansible-runner's private_data_dir the next time ansible-runner made use of the private_data_dir. The highest Threat out of this flaw is to integrity and confidentiality.
CVE-2021-37020 (severity: CRITICAL, weakness: CWE-787)
There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read.
CVE-2021-37021 (severity: CRITICAL, weakness: CWE-787)
There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read.
CVE-2021-37022 (severity: CRITICAL, weakness: CWE-787)
There is a Heap-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause root permission which can be escalated.
CVE-2021-37023 (severity: MEDIUM, weakness: CWE-22)
There is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause media files which can be reads and writes in non-distributed directories on any device on the network..
CVE-2021-37024 (severity: HIGH, weakness: CWE-20)
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.
CVE-2021-37025 (severity: HIGH, weakness: CWE-20)
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.
CVE-2021-37026 (severity: HIGH, weakness: CWE-20)
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.
CVE-2021-37027 (severity: HIGH, weakness: NVD-CWE-Other)
There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service integrity.