CVE-2017-8153

Huawei VMall (Android) prior to version 1.5.8.5 contains a privilege-elevation vulnerability due to improper design. An attacker can trick a user into installing a malicious app that can send HTTP requests and execute JavaScript in web pages without Internet permission, potentially causing resour...

CVE-2017-8120

CVE-2017-8120 affects Huawei UMA products (V200R001 and V300R001) with a privilege-elevation vulnerability caused by insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these weaknesses to gain elevated privileges. Public sources (NVD ...

CVE-2017-2692

CVE-2017-2692 affects Huawei EMUI (Keyguard) on numerous devices/builds. The issue is a privilege-elevation vulnerability caused by insufficient validation in the Keyguard app, allowing an attacker to inject commands to gain elevated privileges. Exploitation is described as possible via user inte...

CVE-2017-2692

The Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and earlier versions,ALE-L21C464B150 and earlier versions,ALE-L21C636B200 and earlier...

CVE-2017-8120

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges...

CVE-2017-8119

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges...

CVE-2017-8126

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges...

CVE-2017-8124

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges...

CVE-2017-8128

CVE-2017-8128 affects Huawei UMA product in versions V200R001 and V300R001. Root cause: insufficient validation or improper processing of parameters leading to privilege elevation. Attackers could craft specific packets to gain elevated privileges. From the provided data, the CVSS metrics indicat...

CVE-2017-8124

CVE-2017-8124 affects Huawei UMA product (software V200R001). Root cause: insufficient validation or improper processing of parameters in the UMA component, enabling an attacker to craft specific packets to achieve privilege elevation. Impact: elevation of privileges. Exploitation status is not d...

CVE-2017-8122

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges...

CVE-2017-2699

CVE-2017-2699 affects the Huawei Themes app. A privilege-elevation vulnerability arises from lack of validation of uploaded theme packs, allowing an attacker to deliver malicious theme files that, when installed, could execute arbitrary code with elevated privileges. Affected are Huawei devices w...

CVE-2017-8122

CVE-2017-8122 affects Huawei UMA product (software V200R001). The vulnerability is a privilege elevation due to insufficient validation or improper processing of parameters, where an attacker could craft specific packets to gain elevated privileges. NVD data shows high base scores (CVSSv2: 7.5 / ...

CVE-2017-8119

The CVE-2017-8119 entry concerns Huawei UMA products (V200R001 and V300R001) with a privilege-elevation vulnerability caused by insufficient validation/improper processing of parameters. Attackers could craft specific packets to exploit these flaws to gain elevated privileges. Connected sources c...

CVE-2017-8128

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges...

CVE-2017-8185

The CVE-2017-8185 entry documents a local privilege escalation in Huawei ME906s/ME906S driver where lack of privilege restrictions on certain functions allows a user with local access to modify configuration data containing malicious files, enabling arbitrary code execution. Public references con...

CVE-2017-8123

CVE-2017-8123 concerns the Huawei UMA product (software V200R001) and describes a privilege-elevation vulnerability caused by insufficient validation or improper processing of parameters. The NVD entry attributes an exploitable path via crafted packets that could yield elevated privileges, with C...

CVE-2017-8129

CVE-2017-8129 affects Huawei UMA products (software V200R001 and V300R001). The vulnerability is a privilege-elevation issue caused by insufficient validation/improper processing of parameters, enabling an attacker to craft specific packets to gain elevated privileges. Public details include CVSS...

iBall iB-WRA300N3GT Elevation of Privilege Vulnerability

The iBall iB-WRA300N3GT is a wireless router product from iBall India. The iBall iB-WRA300N3GT using firmware version iB-WRA300N3GT1.1.1 is vulnerable to a power lifting vulnerability. A remote attacker can exploit this vulnerability to gain root privileges...

Google Android Qualcomm Display Mobilization Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, of which Qualcomm Display is one of the components. Qualcomm Display is one of the display components developed by...