CVSS: 7.5EPSS: 0%CPEs: 9EXPL: 0CVE-2021-22293
https://notcve.org/view.php?id=CVE-2021-22293
Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Attackers can exploit this vulnerability to cause information leak. Affected product versions include: CampusInsight versions V100R019C10; ManageOne versions 6.5.1.1, 6.5.1.SPC100, 6.5.1.SPC200, 6.5.1RC1, 6.5.1RC2, 8.0.RC2. Affected product versions include: Taurus-AL00A versions 10.0.0.1(C00E1R1P1). Algunos productos de Huawei presentan una vulnerabilidad de interpretación inconsistente de peticiones HTTP. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210120-01-http-en • CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') •
CVSS: 3.3EPSS: 0%CPEs: 2EXPL: 0CVE-2020-1862
https://notcve.org/view.php?id=CVE-2020-1862
There is a double free vulnerability in some Huawei products. A local attacker with low privilege may perform some operations to exploit the vulnerability. Due to doubly freeing memory, successful exploit may cause some service abnormal. Affected product versions include:CampusInsight versions V100R019C00;ManageOne versions 6.5.RC2.B050. Se presenta una vulnerabilidad de doble liberación en algunos productos Huawei. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-01-free-en • CWE-415: Double Free •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2019-5278
https://notcve.org/view.php?id=CVE-2019-5278
There is an out-of-bounds read vulnerability in the Advanced Packages feature of the Gauss100 OLTP database in CampusInsight before V100R019C00SPC200. Attackers who gain the specific permission can use this vulnerability by sending elaborate SQL statements to the database. Successful exploit of this vulnerability may cause the database to crash. Hay una vulnerabilidad de lectura fuera de límites en la funcionalidad Advanced Packages de la base de datos Gauss100 OLTP en CampusInsight versiones anteriores a la versión V100R019C00SPC200. Los atacantes que consiguen el permiso específico pueden usar esta vulnerabilidad mediante el envío de sentencias SQL especialmente diseñadas hacia la base de datos. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-gauss100-en • CWE-125: Out-of-bounds Read •