CVE-2019-14835

The CVE-2019-14835 entry describes a buffer overflow in Linux kernel vhost functionality (virtqueue buffers translated to IOVs) during VM live migration. A privileged guest user could pass descriptors with invalid length while migration is underway, potentially causing a host privilege escalation...

CVE-2021-22293

CVE-2021-22293 concerns an inconsistency in how some Huawei products interpret HTTP requests, allowing information leakage. Affected products include CampusInsight (V100R019C10), ManageOne (6.5.1.1, 6.5.1.SPC100, 6.5.1.SPC200, 6.5.1RC1, 6.5.1RC2, 8.0.RC2) and Taurus-AL00A (10.0.0.1(C00E1R1P1)). T...

CVE-2021-22298

CVE-2021-22298 has two distinct threads in the provided connected documents. First, the initial Huawei ManageOne entry describes a logic vulnerability in Huawei Gauss100 OLTP Product (ManageOne) where an attacker with certain permissions could execute specific SQL statements, due to insufficient ...

CVE-2021-22299

CVE-2021-22299 describes a local privilege escalation in certain Huawei products. The vulnerability affects multiple ManageOne, NFV_FusionSphere, SMC2.0, and iMaster MAE-M release lines (for example ManageOne versions 6.5.0 and 8.0.x series, NFV_FusionSphere 6.5.x and 8.0.x, SMC2.0 V600R019C00/C1...

CVE-2020-9205

CVE-2020-9205 is a CSV injection vulnerability affecting Huawei ManageOne 8.0.1. The root cause is insufficient input validation of certain parameters during CSV-related operations, enabling an attacker with basic privileges to inject CSV content into generated files. Several connected sources co...

CVE-2021-22409

CVE-2021-22409 describes a denial-of-service vulnerability in Huawei ManageOne, arising from a logic error in a module’s function. Under heavy service pressure, there is a low probability of an exception, which could lead to some services behaving abnormally (availability impact). Connected sourc...

CVE-2021-22339

CVE-2021-22339 is a Denial-of-Service vulnerability in Huawei ManageOne . The issue arises from insufficient verification of a parameter, enabling an attacker to craft specific input that may cause some services to behave abnormally. Public references describe the impact (DoS) and Huawei’s respon...

CVE-2020-9115

CVE-2020-9115 affects Huawei ManageOne versions 6.5.1.1.B010/B020/B030/B040/B050, and 8.0.0/8.0.1. The root cause is insufficient input validation in the plug-in component, enabling a high-privilege attacker to inject commands on the target device via certain operations. The vulnerability has a h...

CVE-2021-22314

CVE-2021-22314 affects Huawei ManageOne with a local privilege escalation vulnerability in some versions. An authenticated, local attacker can perform specific operations to gain higher privileges and compromise the service. Connected documents confirm this vulnerability across multiple sources (...

CVE-2021-37131

CVE-2021-37131 is a CSV injection vulnerability affecting Huawei iManager NetEco (and related products) stemming from insufficient input validation of certain parameters, enabling an attacker with high privileges to inject CSV data into the target device through specific operations. Public disclo...

CVE-2021-22340

CVE-2021-22340 describes a multiple-threads race condition vulnerability in Huawei products, caused by a race in concurrent I/O reads by multiple threads. The flaw can be exploited by an attacker with root permissions to trigger a system crash. Affected products include Huawei ManageOne (multiple...

CVE-2020-1862

The CVE-2020-1862 entry concerns a double free vulnerability in Huawei products, affecting CampusInsight V100R019C00 and ManageOne 6.5.RC2.B050. A local, low-privilege attacker could trigger memory mismanagement, potentially causing service abnormality. Public documentation confirms affected prod...

CVE-2019-5289

CVE-2019-5289 affects Huawei GaussDB 100 OLTP (ManageOne) with version 6.5.0, where an out-of-bounds read occurs due to insufficient checks of packet length. The vulnerability allows an attacker to craft invalid packets targeting the active and standby communication channels, with the documented ...

CVE-2021-22397

CVE-2021-22397 affects Huawei ManageOne 8.0.0. Root cause: external file parameters are not verified when called, enabling privilege escalation. Impact: privilege escalation that can compromise normal service. Exploitation details are not provided in the available documents. Remediation: Huawei h...

CVE-2021-22311

Summary: CVE-2021-22311 affects Huawei ManageOne, specifically version 8.0.0 and 8.0.1, due to an improper permission assignment vulnerability from weak security hardening. The issue allows a process to run with higher privileges, enabling affected users to perform operations with improper permis...