|
248461
|
6.7 |
MEDIUM
Local
|
huawei
|
files
|
The Files APP 7.1.1.308 and earlier versions in some Huawei mobile phones has a vulnerability of plaintext storage of users' Safe passwords. An attacker with the root privilege of an Android system c…
|
CWE-312
Cleartext Storage of Sensitive Information
|
CVE-2017-2723
|
2024-11-21 12:24 |
2017-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248462
|
5.3 |
MEDIUM
Network
|
huawei
|
fusionsphere_openstack
|
FusionSphere OpenStack V100R006C00 has an information exposure vulnerability. The software uses hard-coded cryptographic key to encrypt messages between certain components, which significantly increa…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2017-2720
|
2024-11-21 12:24 |
2017-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248463
|
8.8 |
HIGH
Adjacent
|
huawei
|
fusionsphere_openstack
|
FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the vulnera…
|
CWE-77
Command Injection
|
CVE-2017-2719
|
2024-11-21 12:24 |
2017-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248464
|
8.8 |
HIGH
Network
|
huawei
|
dp300_firmware te60_firmware tp3106_firmware viewpoint_9030_firmware ecns210_td_firmware espace_7950_firmware espace_iad_firmware espace_u1981_firmware
|
DP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and V100R002C00,ViewPoint 9030 with software V100R011C02, V100…
|
CWE-20
Improper Input Validation
|
CVE-2017-2722
|
2024-11-21 12:24 |
2017-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248465
|
4.6 |
MEDIUM
Physics
|
huawei
|
berlin-l21_firmware berlin-l21hn_firmware berlin-l22_firmware berlin-l22hn_firmware berlin-l23_firmware berlin-l24hn_firmware frd-l02_firmware frd-l04_firmware frd-l09_firmwar…
|
Some Huawei smart phones with software Berlin-L21C10B130,Berlin-L21C185B133,Berlin-L21HNC10B131,Berlin-L21HNC185B140,Berlin-L21HNC432B151,Berlin-L22C636B160,Berlin-L22HNC636B130,Berlin-L22HNC675B150C…
|
CWE-287
Improper Authentication
|
CVE-2017-2721
|
2024-11-21 12:24 |
2017-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248466
|
8.8 |
HIGH
Adjacent
|
huawei
|
fusionsphere_openstack
|
FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the vulnera…
|
CWE-77
Command Injection
|
CVE-2017-2718
|
2024-11-21 12:24 |
2017-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248467
|
6.5 |
MEDIUM
Adjacent
|
huawei
|
honor_8_pro_firmware
|
honor 8 Pro with software Duke-L09C10B120 and earlier versions,Duke-L09C432B120 and earlier versions,Duke-L09C636B120 and earlier versions has an integer overflow vulnerability. The attacker sends a …
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2017-2717
|
2024-11-21 12:24 |
2017-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248468
|
7.8 |
HIGH
Local
|
huawei
|
mate_9_firmware
|
The camerafs driver in Mate 9 Versions earlier than MHA-AL00BC00B173 has buffer overflow vulnerability. An attacker tricks a user into installing a malicious application which has the system privileg…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-2716
|
2024-11-21 12:24 |
2017-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248469
|
7.8 |
HIGH
Local
|
huawei
|
files
|
The Files APP 7.1.1.309 and earlier versions in some Huawei mobile phones has a brute-force password cracking vulnerability due to the improper design of the Safe key database. An unauthorized attack…
|
CWE-200
Information Exposure
|
CVE-2017-2715
|
2024-11-21 12:24 |
2017-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248470
|
8.0 |
HIGH
Adjacent
|
huawei
|
fusionsphere_openstack
|
The GaussDB in FusionSphere OpenStack V100R005C10SPC705 and earlier versions has a buffer overflow vulnerability. An authenticated attacker on the LAN can exploit this vulnerability to execute arbitr…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-2714
|
2024-11-21 12:24 |
2017-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|