CVE Vulnerability Catalog

Versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An attacker with the ability to write in a directory where files will be installed could create symbolic links to an arbitrary location, potentially modifying content and permissions of arbitrary files.

In ncurses 6.0, a stack-based buffer overflow was found in the _nc_write_entry function of tinfo/write_entry.c. Attackers can cause a denial of service or possibly execute arbitrary code via a crafted terminfo file, as demonstrated by tic.

The driver of honor 5C and honor 6X Huawei smartphones with software versions earlier than NEM-AL10C00B356 and Berlin-L21HNC432B360 has a buffer overflow vulnerability due to lack of parameter validation. An attacker can trick a user into installing a malicious app that has root privileges of the Android system.

The driver of honor 5C and honor 6x Huawei smartphones has a buffer overflow vulnerability due to lack of parameter validation. An attacker can trick a user into installing a malicious app with root privileges of the Android system, potentially leading to system reboot or arbitrary code execution.

The driver of honor 5C and honor 6X Huawei smartphones with software versions earlier than NEM-AL10C00B356 and Berlin-L21HNC432B360 has a buffer overflow vulnerability due to lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privileges of the Android system, which can lead to system reboot or arbitrary code execution.

The driver of honor 5C and honor 6X Huawei smartphones with software versions earlier than NEM-AL10C00B356 and Berlin-L21HNC432B360 has a buffer overflow vulnerability due to lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privileges of the Android system, which can lead to system reboot or arbitrary code execution.

The driver of honor 5C and honor 6x Huawei smartphones with software versions earlier than NEM-AL10C00B356 and Berlin-L21HNC432B360 has a buffer overflow vulnerability due to lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privileges of the Android system, which can lead to system reboot or arbitrary code execution.

The driver of honor 5C and honor 6x Huawei smartphones with software versions earlier than NEM-AL10C00B356 and Berlin-L21HNC432B360 has a buffer overflow vulnerability due to lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privileges of the Android system, which can lead to system reboot or arbitrary code execution.

The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has an integer overflow vulnerability due to the lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privileges, allowing arbitrary code execution.

The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the driver of the smart phone, causing arbitrary code execution.

The Bastet Driver in Nova 2 Plus and Nova 2 Huawei smartphones with software versions earlier than BAC-AL00C00B173 and PIC-AL00C00B173 has a use after free (UAF) vulnerability. An attacker can convince a user to install a malicious application, which may lead to arbitrary code execution.

FusionSphere V100R006C00SPC102 (NFV) has an SQL injection vulnerability. An authenticated, remote attacker could craft interface messages carrying malicious SQL statements and send them to a target device.

FusionSphere V100R006C00SPC102 (NFV) has a command injection vulnerability. An authenticated, remote attacker could craft packets with malicious strings and send them to a target device, potentially allowing the execution of system commands.

FusionSphere OpenStack V100R006C00SPC102(NFV) has an authentication vulnerability that allows improper authentication. Due to this vulnerability, an authenticated remote attacker may exploit it to perform additional operations by sending a crafted REST message.

FusionSphere OpenStack V100R006C00SPC102 (NFV) has an improper authentication vulnerability. An authenticated remote attacker may exploit this vulnerability to perform additional operations by sending a crafted REST message.

FusionSphere OpenStack V100R006C00SPC102 (NFV) has a command injection vulnerability. Due to insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sending messages with malicious commands.

FusionSphere OpenStack V100R006C00 has an authorization vulnerability that allows an attacker with low privileges to gain operational access to a specific directory, leading to privilege escalation.

FusionSphere OpenStack V100R006C00SPC102 (NFV) has a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some module of the affected products, causing code execution.

ME906s-158 versions earlier than ME906S_Installer_13.1805.10.3 have a privilege elevation vulnerability. An attacker could exploit this vulnerability to modify configuration information containing malicious files and trick users into executing the files, resulting in the execution of arbitrary code.

The camera driver on the MTK platform in Huawei smartphones with software versions earlier than Nice-AL00C00B155 has an arbitrary memory write vulnerability. Due to insufficient input verification, an attacker can trick a user into installing a malicious application, leading to privilege escalation.