CVSS: 3.3EPSS: 0%CPEs: 2EXPL: 0CVE-2020-1862
https://notcve.org/view.php?id=CVE-2020-1862
There is a double free vulnerability in some Huawei products. A local attacker with low privilege may perform some operations to exploit the vulnerability. Due to doubly freeing memory, successful exploit may cause some service abnormal. Affected product versions include:CampusInsight versions V100R019C00;ManageOne versions 6.5.RC2.B050. Se presenta una vulnerabilidad de doble liberación en algunos productos Huawei. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-01-free-en • CWE-415: Double Free •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2019-5278
https://notcve.org/view.php?id=CVE-2019-5278
There is an out-of-bounds read vulnerability in the Advanced Packages feature of the Gauss100 OLTP database in CampusInsight before V100R019C00SPC200. Attackers who gain the specific permission can use this vulnerability by sending elaborate SQL statements to the database. Successful exploit of this vulnerability may cause the database to crash. Hay una vulnerabilidad de lectura fuera de límites en la funcionalidad Advanced Packages de la base de datos Gauss100 OLTP en CampusInsight versiones anteriores a la versión V100R019C00SPC200. Los atacantes que consiguen el permiso específico pueden usar esta vulnerabilidad mediante el envío de sentencias SQL especialmente diseñadas hacia la base de datos. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-gauss100-en • CWE-125: Out-of-bounds Read •