CVE-2020-9244

HUAWEI Mate 20 versions Versions earlier than 10.1.0.160C00E160R3P8;HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270C431E7R1P5,Versions earlier than 10.1.0.270C635E3R1P5,Versions earlier than 10.1.0.273C636E7R2P4;HUAWEI Mate 20 X versions Versions earlier than...

CVE-2020-9252

HUAWEI Mate 20 versions earlier than 10.1.0.160C00E160R3P8, HUAWEI Mate 20 X versions earlier than 10.1.0.135C00E135R2P8, HUAWEI Mate 20 RS versions earlier than 10.1.0.160C786E160R3P8, and Honor Magic2 smartphones versions earlier than 10.1.0.160C00E160R2P11 have a path traversal vulnerability...

CVE-2020-9252

HUAWEI Mate 20 versions earlier than 10.1.0.160C00E160R3P8, HUAWEI Mate 20 X versions earlier than 10.1.0.135C00E135R2P8, HUAWEI Mate 20 RS versions earlier than 10.1.0.160C786E160R3P8, and Honor Magic2 smartphones versions earlier than 10.1.0.160C00E160R2P11 have a path traversal vulnerability...

CVE-2020-9252

HUAWEI Mate 20 versions earlier than 10.1.0.160C00E160R3P8, HUAWEI Mate 20 X versions earlier than 10.1.0.135C00E135R2P8, HUAWEI Mate 20 RS versions earlier than 10.1.0.160C786E160R3P8, and Honor Magic2 smartphones versions earlier than 10.1.0.160C00E160R2P11 have a path traversal vulnerability...

CVE-2020-9252

CVE-2020-9252 affects HUAWEI Mate 20 (pre-10.1.0.160), Mate 20 X (pre-10.1.0.135), Mate 20 RS (pre-10.1.0.160) and Honor Magic2 (pre-10.1.0.160). The issue is a path traversal vulnerability caused by insufficient validation of certain pathname handling from a process, enabling a crafted path to w...

OpenWrt LuCI Information Disclosure Vulnerability

OpenWrt LuCI is a graphical configuration interface for OpenWrt Linux distribution. An information disclosure vulnerability exists in the OpenWrt LuCI git-20.x version, which can be exploited by remote attackers to retrieve a list of installed packages and services...

Information disclosure

In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of installed packages and services. NOTE: the vendor disputes the significance of this report because, for instances reachable by an unauthenticated actor, the same information is available in other more complex ways...

CVE-2020-10871

In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of installed packages and services. NOTE: the vendor disputes the significance of this report because, for instances reachable by an unauthenticated actor, the same information is available in other more complex ways...

CVE-2020-10871

OpenWrt LuCI git-20.x contains an information disclosure vulnerability: remote, unauthenticated attackers can retrieve the list of installed packages and services. The vendor disputes the severity, noting the information is publicly obtainable by unauthenticated actors via other methods, and ther...

PT-2020-12389 · Openwrt · Openwrt Luci

Name of the Vulnerable Software and Affected Versions: OpenWrt LuCI versions git-20.x Description: The issue allows remote unauthenticated attackers to retrieve the list of installed packages and services. The vendor disputes the significance of this report, stating that the same information is...

CVE-2020-1882

Huawei mobile phones Ever-L29B versions earlier than 10.0.0.180C185E6R3P3, earlier than 10.0.0.180C432E6R1P7, earlier than 10.0.0.180C636E5R2P3; HUAWEI Mate 20 RS versions earlier than 10.0.0.175C786E70R3P8; HUAWEI Mate 20 X versions earlier than 10.0.0.176C00E70R2P8; and Honor Magic2 versions...

CVE-2019-5221

There is a path traversal vulnerability on Huawei Share. The software does not properly validate the path, an attacker could crafted a file path when transporting file through Huawei Share, successful exploit could allow the attacker to transport a file to arbitrary path on the phone. Affected...

CVE-2019-5220

There is a Factory Reset Protection FRP bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker could do a certain operation on certain step of setup wizard. Successful exploit could allow the attacker bypass the FRP protection. Affected...

CVE-2019-5220

There is a Factory Reset Protection FRP bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker could do a certain operation on certain step of setup wizard. Successful exploit could allow the attacker bypass the FRP protection. Affected...

CVE-2019-5221

There is a path traversal vulnerability on Huawei Share. The software does not properly validate the path, an attacker could crafted a file path when transporting file through Huawei Share, successful exploit could allow the attacker to transport a file to arbitrary path on the phone. Affected...

Design/Logic Flaw

There is a Factory Reset Protection FRP bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker could do a certain operation on certain step of setup wizard. Successful exploit could allow the attacker bypass the FRP protection. Affected...

CVE-2019-5221

There is a path traversal vulnerability on Huawei Share. The software does not properly validate the path, an attacker could crafted a file path when transporting file through Huawei Share, successful exploit could allow the attacker to transport a file to arbitrary path on the phone. Affected...

CVE-2019-5221

Summary: CVE-2019-5221 is a path traversal vulnerability in Huawei Share. Huawei’s security advisory HWPSIRT-2019-03115 confirms an improper validation of the destination path during file transfer, enabling an attacker to place files at arbitrary paths on affected devices. Affected devices includ...

CVE-2019-5220

CVE-2019-5220 describes a Factory Reset Protection (FRP) bypass on Huawei Mate 20 X, Mate 20 and Honor Magic 2. Affected versions are Mate 20 X prior to Ever-AL00B 9.0.0.200, Mate 20 prior to Hima-AL00B/Hima-TL00B 9.0.0.200, and Honor Magic 2 prior to Tony-AL00B/Tony-TL00B 9.0.0.182. Root cause: ...

CVE-2019-5220

There is a Factory Reset Protection FRP bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker could do a certain operation on certain step of setup wizard. Successful exploit could allow the attacker bypass the FRP protection. Affected...