2017 CVEs (page 53)
Page 53 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-8182 | Medium | 6.1 | 2017-11-22 | MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a out-of-bound read vul… |
CVE-2017-8181 | High | 7.8 | 2017-11-22 | The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a arbitrary memory write vulnerability.Due… |
CVE-2017-8180 | High | 7.8 | 2017-11-22 | The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability.Due to the… |
CVE-2017-8179 | High | 7.8 | 2017-11-22 | The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability.Due to the… |
CVE-2017-8178 | Medium | 5.4 | 2017-11-22 | Huawei Email APP Vicky-AL00 smartphones with software of earlier than VKY-AL00C00B171 versions has a stored cross-site scripting vulnerability. A remote attack… |
CVE-2017-8177 | Medium | 5.3 | 2017-11-22 | Huawei APP HiWallet earlier than 5.0.3.100 versions do not support signature verification for APK file. An attacker could exploit this vulnerability to hijack… |
CVE-2017-8175 | Medium | 5.5 | 2017-11-22 | The Bastet of some Huawei mobile phones with software earlier than Vicky-AL00AC00B167 versions, earlier than Victoria-AL00AC00B167 versions, earlier than Warsa… |
CVE-2017-8174 | High | 7.5 | 2017-11-22 | Huawei USG6300 V100R001C30SPC300 and USG6600 with software of V100R001C30SPC500,V100R001C30SPC600,V100R001C30SPC700,V100R001C30SPC800 have a weak algorithm vul… |
CVE-2017-8173 | Medium | 4.6 | 2017-11-22 | Maya-L02,VKY-L09,VTR-L29,Vicky-AL00A,Victoria-AL00A,Warsaw-AL00 smart phones with software of earlier than Maya-L02C636B126 versions,earlier than VKY-L29C10B15… |
CVE-2017-8172 | Medium | 5.5 | 2017-11-22 | Isub service in P10 Plus and P10 smart phones with earlier than VKY-AL00C00B157 versions and earlier than VTR-AL00C00B157 versions has a denial of service (DoS… |
CVE-2017-8171 | Medium | 4.6 | 2017-11-22 | Huawei smart phones with software earlier than Vicky-AL00AC00B172D versions have a Factory Reset Protection (FRP) bypass security vulnerability. When re-config… |
CVE-2017-8170 | High | 7.8 | 2017-11-22 | Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacke… |
CVE-2017-8169 | High | 7.8 | 2017-11-22 | Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacke… |
CVE-2017-8168 | Medium | 4.3 | 2017-11-22 | FusionSphere OpenStack with software V100R006C00SPC102(NFV) and V100R006C10 have an information leak vulnerability. Due to an incorrect configuration item, the… |
CVE-2017-8167 | High | 7.5 | 2017-11-22 | Huawei firewall products USG9500 V500R001C50 has a DoS vulnerability.A remote attacker who controls the peer device could exploit the vulnerability by sending… |
CVE-2017-8166 | Medium | 6.8 | 2017-11-22 | Huawei mobile phones Honor V9 with the software versions before Duke-AL20C00B195 have an App Lock bypass vulnerability. An attacker could perform specific oper… |
CVE-2017-8163 | Medium | 6.5 | 2017-11-22 | AR120-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR1200 with software V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02… |
CVE-2017-8162 | Medium | 6.5 | 2017-11-22 | AR120-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR1200 with software V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02… |
CVE-2017-8161 | Medium | 4.6 | 2017-11-22 | EVA-L09 smartphones with software Earlier than EVA-L09C25B150CUSTC25D003 versions,Earlier than EVA-L09C440B140 versions,Earlier than EVA-L09C464B361 versions,E… |
CVE-2017-8160 | High | 7.8 | 2017-11-22 | The Madapt Driver of some Huawei smart phones with software Earlier than Vicky-AL00AC00B172 versions,Vicky-AL00CC768B122,Vicky-TL00AC01B167,Earlier than Victor… |
CVE-2017-8159 | High | 7.8 | 2017-11-22 | Some Huawei smartphones with software AGS-L09C233B019,AGS-W09C233B019,KOB-L09C233B017,KOB-W09C233B012 have a type confusion vulnerability. The program initiali… |
CVE-2017-8158 | Medium | 6.5 | 2017-11-22 | FusionCompute V100R005C00 and V100R005C10 have an improper authorization vulnerability due to improper permission settings for a certain file on the host machi… |
CVE-2017-8157 | Medium | 5.9 | 2017-11-22 | OceanStor 5800 V3 with software V300R002C00 and V300R002C10, OceanStor 6900 V3 V300R001C00 has an information leakage vulnerability. Products use TLS1.0 to enc… |
CVE-2017-8156 | Medium | 6.8 | 2017-11-22 | The outdoor unit of Customer Premise Equipment (CPE) product B2338-168 V100R001C00 has a no authentication vulnerability on the serial port. An attacker can ac… |
CVE-2017-8155 | High | 8.4 | 2017-11-22 | The outdoor unit of Customer Premise Equipment (CPE) product B2338-168 V100R001C00 has a no authentication vulnerability on a certain port. After accessing the… |
CVE-2017-8153 | High | 7.1 | 2017-11-22 | Huawei VMall (for Android) with the versions before 1.5.8.5 have a privilege elevation vulnerability due to improper design. An attacker can trick users into i… |
CVE-2017-8152 | Medium | 4.6 | 2017-11-22 | Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have a Factory Reset Protection (FRP) bypass security vulnerability due to the i… |
CVE-2017-8151 | Medium | 6.8 | 2017-11-22 | Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have an authentication bypass vulnerability due to the improper design of some c… |
CVE-2017-8150 | High | 7.8 | 2017-11-22 | The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, t… |
CVE-2017-8149 | Medium | 5.5 | 2017-11-22 | The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, t… |
CVE-2017-8148 | Medium | 4.7 | 2017-11-22 | Audio driver in P9 smartphones with software The versions before EVA-AL10C00B389 has a denial of service (DoS) vulnerability. An attacker tricks a user into in… |
CVE-2017-8147 | High | 7.5 | 2017-11-22 | AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C… |
CVE-2017-8146 | Medium | 5.5 | 2017-11-22 | The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions before VKY-AL00C00B167… |
CVE-2017-8145 | Medium | 5.5 | 2017-11-22 | The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions before VKY-AL00C00B167… |
CVE-2017-8144 | Medium | 5.5 | 2017-11-22 | Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Huawei smartphones with software the versions before CAM-L03C605B143CUSTC605D003,the versions before Prague-… |
CVE-2017-8143 | Medium | 5.5 | 2017-11-22 | Wi-Fi driver of Honor 5C and P9 Lite Huawei smart phones with software versions earlier than NEM-L21C432B351 and versions earlier than VNS-L21C10B381 has a DoS… |
CVE-2017-8142 | High | 7.8 | 2017-11-22 | The Trusted Execution Environment (TEE) module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than MHA-AL00BC00B221 and versions e… |
CVE-2017-8141 | High | 7.8 | 2017-11-22 | The Touch Panel (TP) driver in P10 Plus smart phones with software versions earlier than VKY-AL00C00B153 has a memory double free vulnerability. An attacker wi… |
CVE-2017-8140 | High | 7.8 | 2017-11-22 | The soundtrigger driver in P9 Plus smart phones with software versions earlier than VIE-AL10BC00B353 has a memory double free vulnerability. An attacker tricks… |
CVE-2017-8139 | Medium | 6.1 | 2017-11-22 | HedEx Earlier than V200R006C00 versions have the stored cross-site scripting (XSS) vulnerability. Attackers can exploit the vulnerability to plant malicious sc… |
CVE-2017-8138 | High | 8.8 | 2017-11-22 | HedEx Earlier than V200R006C00 versions has a cross-site request forgery (CSRF) vulnerability. An attacker could trick a user into accessing a website containi… |
CVE-2017-8137 | High | 7.8 | 2017-11-22 | HedEx Earlier than V200R006C00 versions has a dynamic link library (DLL) hijacking vulnerability due to calling the DDL file by accessing a relative path. An a… |
CVE-2017-8136 | Medium | 5.5 | 2017-11-22 | HedEx Earlier than V200R006C00 versions has an arbitrary file download vulnerability. An attacker could exploit it to download arbitrary files on a target devi… |
CVE-2017-8135 | High | 8.8 | 2017-11-22 | The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP… |
CVE-2017-8134 | High | 8.8 | 2017-11-22 | The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP… |
CVE-2017-8133 | High | 8.8 | 2017-11-22 | Huawei iManager NetEco with software V600R008C00 and V600R008C10 has a command injection vulnerability. An authenticated, remote attacker could exploit this vu… |
CVE-2017-8132 | High | 8.8 | 2017-11-22 | The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP… |
CVE-2017-8131 | High | 8.8 | 2017-11-22 | The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP… |
CVE-2017-8130 | Medium | 6.5 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information… |
CVE-2017-8129 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… |
CVE-2017-8128 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… |
CVE-2017-8127 | Medium | 6.1 | 2017-11-22 | The UMA product with software V200R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craft malicious l… |
CVE-2017-8126 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker… |
CVE-2017-8125 | Medium | 6.1 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craf… |
CVE-2017-8124 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker… |
CVE-2017-8123 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker… |
CVE-2017-8122 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker… |
CVE-2017-8121 | Medium | 5.3 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information… |
CVE-2017-8120 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… |
CVE-2017-8119 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… |
CVE-2017-8118 | Low | 2.3 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information… |
CVE-2017-8117 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… |
CVE-2017-2739 | Low | 3.1 | 2017-11-22 | The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. A man in the middle (MITM) can tamper with the upgra… |
CVE-2017-2738 | Critical | 9.8 | 2017-11-22 | VCM5010 with software versions earlier before V100R002C50SPC100 has an authentication bypass vulnerability. This is due to improper implementation of authentic… |
CVE-2017-2737 | High | 8.8 | 2017-11-22 | VCM5010 with software versions earlier before V100R002C50SPC100 has an arbitrary file upload vulnerability. The software does not validate the files that uploa… |
CVE-2017-2736 | High | 7.2 | 2017-11-22 | VCM5010 with software versions earlier before V100R002C50SPC100 has a command injection vulnerability. This is due to insufficient validation of user's input… |
CVE-2017-2735 | High | 7.1 | 2017-11-22 | TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software provides a system inter… |
CVE-2017-2734 | Medium | 5.5 | 2017-11-22 | P9 Plus smartphones with software versions earlier before VIE-AL10BC00B386 have a denial of service (DoS) vulnerability. An attacker tricks a user into install… |
CVE-2017-2733 | Medium | 5.5 | 2017-11-22 | Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information leak vulnerability due t… |
CVE-2017-2732 | Medium | 5.5 | 2017-11-22 | Huawei Hilink APP Versions earlier before 5.0.25.306 has an information leak vulnerability. An attacker may trick a user into installing a malicious applicatio… |
CVE-2017-2731 | Medium | 5.5 | 2017-11-22 | The vibrator service in P9 Plus smart phones with software versions earlier before VIE-AL10C00B386 has DoS vulnerability. An attacker can tricks a user into in… |
CVE-2017-2730 | Low | 3.5 | 2017-11-22 | HUAWEI HiLink APP (for IOS) versions earlier before 5.0.25.306 and HUAWEI Tech Support APP (for IOS) versions earlier before 5.0.0 have an information leak vul… |
CVE-2017-2729 | High | 7.8 | 2017-11-22 | The boot loaders in Honor 5A smart phones with software Versions earlier than CAM-TL00C01B193,Versions earlier than CAM-TL00HC00B193,Versions earlier than CAM-… |
CVE-2017-2728 | Medium | 6.4 | 2017-11-22 | Some Huawei mobile phones Honor 6X Berlin-L22C636B150 and earlier versions have a Bluetooth unlock bypassing vulnerability. If a user has enabled the smart unl… |
CVE-2017-2727 | Medium | 4.3 | 2017-11-22 | Huawei P9 smart phones with software versions earlier before EVA-AL00C00B365, versions earlier before EVA-AL10C00B365,Versions earlier before EVA-CL00C92B365… |
CVE-2017-2726 | High | 8.4 | 2017-11-22 | Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulne… |
CVE-2017-2725 | High | 7.8 | 2017-11-22 | Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulne… |
CVE-2017-2724 | High | 8.4 | 2017-11-22 | Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulne… |
CVE-2017-2723 | Medium | 6.7 | 2017-11-22 | The Files APP 7.1.1.308 and earlier versions in some Huawei mobile phones has a vulnerability of plaintext storage of users' Safe passwords. An attacker with t… |
CVE-2017-2722 | High | 8.8 | 2017-11-22 | DP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and V100R002C00,ViewPo… |
CVE-2017-2721 | Medium | 4.6 | 2017-11-22 | Some Huawei smart phones with software Berlin-L21C10B130,Berlin-L21C185B133,Berlin-L21HNC10B131,Berlin-L21HNC185B140,Berlin-L21HNC432B151,Berlin-L22C636B160,Be… |
CVE-2017-2720 | Medium | 5.3 | 2017-11-22 | FusionSphere OpenStack V100R006C00 has an information exposure vulnerability. The software uses hard-coded cryptographic key to encrypt messages between certai… |
CVE-2017-2719 | High | 8.8 | 2017-11-22 | FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one p… |
CVE-2017-2718 | High | 8.8 | 2017-11-22 | FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one p… |
CVE-2017-2717 | Medium | 6.5 | 2017-11-22 | honor 8 Pro with software Duke-L09C10B120 and earlier versions,Duke-L09C432B120 and earlier versions,Duke-L09C636B120 and earlier versions has an integer overf… |
CVE-2017-2716 | High | 7.8 | 2017-11-22 | The camerafs driver in Mate 9 Versions earlier than MHA-AL00BC00B173 has buffer overflow vulnerability. An attacker tricks a user into installing a malicious a… |
CVE-2017-2715 | High | 7.8 | 2017-11-22 | The Files APP 7.1.1.309 and earlier versions in some Huawei mobile phones has a brute-force password cracking vulnerability due to the improper design of the S… |
CVE-2017-2714 | High | 8.0 | 2017-11-22 | The GaussDB in FusionSphere OpenStack V100R005C10SPC705 and earlier versions has a buffer overflow vulnerability. An authenticated attacker on the LAN can expl… |
CVE-2017-2713 | Medium | 5.4 | 2017-11-22 | HUAWEI P9 smartphones with software versions earlier before EVA-L09C432B383, versions earlier before EVA-L09C636B380, versions earlier before VIE-L09C432B370… |
CVE-2017-2712 | Medium | 5.3 | 2017-11-22 | S3300 V100R006C05 have an Ethernet in the First Mile (EFM) flapping vulnerability due to the lack of type-length-value (TLV) consistency check. An attacker may… |
CVE-2017-2711 | Medium | 5.5 | 2017-11-22 | P9 Plus smartphones with software earlier than VIE-AL10C00B352 versions have an input validation vulnerability in the touchscreen Driver. An attacker can trick… |
CVE-2017-2710 | Medium | 4.6 | 2017-11-22 | BTV-W09C229B002CUSTC229D005,BTV-W09C233B029, earlier than BTV-W09C100B006CUSTC100D002 versions, earlier than BTV-W09C128B003CUSTC128D002 versions, earlier than… |
CVE-2017-2709 | Medium | 5.5 | 2017-11-22 | HiGame with software earlier than 7.3.0 versions, SkyTone with software earlier than 8.1.1 versions have a DoS Vulnerability. An attacker tricks a user into in… |
CVE-2017-2708 | Medium | 4.6 | 2017-11-22 | The 'Find Phone' function in Nice smartphones with software versions earlier before Nice-AL00C00B0135 has an authentication bypass vulnerability. An unauthenti… |
CVE-2017-2707 | High | 7.1 | 2017-11-22 | Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. An attacker tricks a user to save a rich media into… |
CVE-2017-2706 | High | 7.1 | 2017-11-22 | Mate 9 smartphones with software MHA-AL00AC00B125 have a directory traversal vulnerability in Push module. Since the system does not verify the file name durin… |
CVE-2017-2705 | Low | 2.4 | 2017-11-22 | Huawei P9 smartphones with software versions earlier before EVA-AL10C00B365, versions earlier before EVA-AL00C00B365, versions earlier before EVA-CL00C92B365… |
CVE-2017-2704 | High | 7.5 | 2017-11-22 | Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0.0 and earlier versions,HwParentControlParent 5.1.0.12 and ear… |
CVE-2017-2703 | Medium | 6.8 | 2017-11-22 | Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions earlier before MHA-DL00BC00B156,Versions earlier bef… |
CVE-2017-2702 | Medium | 6.8 | 2017-11-22 | Phone Finder in versions earlier before MHA-AL00C00B170 can be bypass. An attacker can bypass the Phone Finder by special steps and obtain the owner of the pho… |