Lucene search
+L

598 matches found

NVD
NVD
•added 2020/12/29 6:15 p.m.•28 views

CVE-2020-9093

There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1C00E1R1P1. A module does not deal with specific message properly, which makes a function refer to memory after it has been freed. Attackers can exploit this vulnerability by running a crafted application with common privileg...

5.5CVSS5.4AI score0.00494EPSS
SaveExploits0References1
Prion
Prion
•added 2020/12/29 6:15 p.m.•29 views

Design/Logic Flaw

There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1C00E1R1P1. A module does not deal with specific message properly, which makes a function refer to memory after it has been freed. Attackers can exploit this vulnerability by running a crafted application with common privileg...

4.3CVSS5.5AI score0.00494EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2020/12/29 6:15 p.m.•8 views

CVE-2020-9093

There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1C00E1R1P1. A module does not deal with specific message properly, which makes a function refer to memory after it has been freed. Attackers can exploit this vulnerability by running a crafted application with common privileg...

5.5CVSS5.8AI score0.00494EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/12/29 5:24 p.m.•36 views

CVE-2020-9093

There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1C00E1R1P1. A module does not deal with specific message properly, which makes a function refer to memory after it has been freed. Attackers can exploit this vulnerability by running a crafted application with common privileg...

5.4AI score0.00494EPSS
SaveExploits0References1
CVE
CVE
•added 2020/12/29 5:24 p.m.•65 views

CVE-2020-9093

This CVE (CVE-2020-9093) affects Huawei Taurus-AL00A smartphones, specifically version 10.0.0.1 (C00E1R1P1). The underlying issue is a use-after-free vulnerability in a module that mishandles certain messages, allowing a memory-after-free reference and potential service disruption. Exploitation i...

5.5CVSS5.4AI score0.00494EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2020/12/29 12:00 a.m.•1 views

PT-2020-20487

Name of the Vulnerable Software and Affected Versions Taurus-AL00A version 10.0.0.1C00E1R1P1 Description A use after free issue exists due to a module not handling specific messages properly, causing a function to reference memory after it has been freed. Attackers can exploit this by running a...

5.5CVSS0.00494EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/29 12:00 a.m.•5 views

CVE-2020-9093: Use After Free

There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1C00E1R1P1. A module does not deal with specific message properly, which makes a function refer to memory after it has been freed. Attackers can exploit this vulnerability by running a crafted application with common privileg...

5.5CVSS5.9AI score0.00494EPSS
SaveExploits0References2
CNVD
CNVD
•added 2020/12/17 12:00 a.m.•57 views

Huawei Taurus-AL00A Resource Management Error Vulnerability

Huawei Taurus-AL00A is a smartphone from Huawei of China.Huawei Taurus-AL00A is vulnerable to a resource management error. A module fails to properly process a message, and a function references freed memory. An attacker could use this vulnerability to trick a user into running a carefully...

5.5CVSS2AI score0.00494EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2020/12/16 12:00 a.m.•17 views

Huawei Taurus-AL00A 资源管理错误漏洞

Huawei Taurus-AL00A is a smartphone from Huawei of China.Huawei Taurus-AL00A is vulnerable to a resource management error. A module fails to properly process a message, and a function references freed memory. An attacker could use this vulnerability to trick a user into running a carefully...

5.5CVSS6.1AI score0.00494EPSS
SaveExploits0References3
CNVD
CNVD
•added 2020/11/03 12:00 a.m.•15 views

Huawei Taurus-AN00B Buffer Overflow Vulnerability

Huawei Mate 305G Taurus-AN00B is the official firmware for Huawei Mate 305G. A security vulnerability exists in Huawei Taurus-AN00B versions prior to 10.1.0.156, which stems from some functions failing to adequately validate input. An attacker could exploit the vulnerability by sending a specific...

5.5CVSS6.7AI score0.00199EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/11/03 12:00 a.m.•14 views

Huawei Taurus-AL00B Resource Management Error Vulnerability (CNVD-2020-60319)

The Huawei Taurus-AL00B is a smartphone from the Chinese company Huawei Huawei. A resource management error vulnerability exists in certain Huawei phones. The vulnerability stems from use-after-free UAF, which can be exploited by an attacker to be able to extract power and affect services...

6.5CVSS6.8AI score0.00225EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/10/27 12:00 a.m.•12 views

Huawei Taurus-AN00B Elevation of Privilege Vulnerability

Huawei Mate 305G Taurus-AN00B is the official firmware for Huawei Mate 305G. A security vulnerability exists in Huawei Taurus-AN00B versions prior to 10.1.0.156, which stems from a lack of privilege restrictions on certain business functions of the product. An attacker can exploit the vulnerabili...

7.8CVSS7.2AI score0.00197EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/10/20 12:00 a.m.•9 views

HUAWEI Taurus-AN00B Information Disclosure Vulnerability

Huawei Mate 305G Taurus-AN00B is the official firmware for Huawei Mate 305G. A security vulnerability exists in HUAWEI Taurus-AN00B. The vulnerability stems from the device's failure to adequately examine the contents of the log output in a particular scenario, which allows an attacker to obtain...

4.6CVSS6.4AI score0.00235EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/10/20 12:00 a.m.•13 views

Huawei Mate 30 (5G) Taurus-AN00B Buffer Overflow Vulnerability

Huawei Mate 305G Taurus-AN00B is the official firmware for Huawei Mate 305G. A buffer overflow vulnerability exists in versions prior to Huawei Taurus-AN00B 10.1.0.156 C00E155R7P2. The vulnerability stems from a function in the module that does not adequately validate input. An attacker could use...

5.5CVSS7.1AI score0.00198EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/10/20 12:00 a.m.•19 views

HUAWEI Taurus-AL00A Information Disclosure Vulnerability

The Huawei Taurus-AL00A is a smartphone from the Chinese company Huawei Huawei. A security vulnerability exists in the HUAWEI Taurus-AL00A XFRM module. The vulnerability stems from a failure to adequately validate parameters, which can be exploited by an authenticated attacker by performing certa...

5.5CVSS6.4AI score0.00208EPSS
SaveExploits0References1
OSV
OSV
•added 2020/10/19 8:15 p.m.•10 views

CVE-2020-9112

Taurus-AN00B versions earlier than 10.1.0.156C00E155R7P2 have a privilege elevation vulnerability. Due to lack of privilege restrictions on some of the business functions of the device. An attacker could exploit this vulnerability to access the protecting information, resulting in the elevation o...

7.8CVSS5.8AI score0.00197EPSS
SaveExploits0References1
NVD
NVD
•added 2020/10/19 8:15 p.m.•26 views

CVE-2020-9112

Taurus-AN00B versions earlier than 10.1.0.156C00E155R7P2 have a privilege elevation vulnerability. Due to lack of privilege restrictions on some of the business functions of the device. An attacker could exploit this vulnerability to access the protecting information, resulting in the elevation o...

7.8CVSS0.00197EPSS
SaveExploits0References1
Prion
Prion
•added 2020/10/19 8:15 p.m.•29 views

Privilege escalation

Taurus-AN00B versions earlier than 10.1.0.156C00E155R7P2 have a privilege elevation vulnerability. Due to lack of privilege restrictions on some of the business functions of the device. An attacker could exploit this vulnerability to access the protecting information, resulting in the elevation o...

4.6CVSS7.5AI score0.00197EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2020/10/19 8:15 p.m.•10 views

CVE-2020-9112

Taurus-AN00B versions earlier than 10.1.0.156C00E155R7P2 have a privilege elevation vulnerability. Due to lack of privilege restrictions on some of the business functions of the device. An attacker could exploit this vulnerability to access the protecting information, resulting in the elevation o...

7.8CVSS7.2AI score0.00197EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/10/19 7:32 p.m.•34 views

CVE-2020-9112

Taurus-AN00B versions earlier than 10.1.0.156C00E155R7P2 have a privilege elevation vulnerability. Due to lack of privilege restrictions on some of the business functions of the device. An attacker could exploit this vulnerability to access the protecting information, resulting in the elevation o...

7.6AI score0.00197EPSS
SaveExploits0References1
Rows per page
Query Builder