# CVEs published 2017-11-22

162 CVEs were published on November 22, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-16879](https://cve.now/CVE-2017-16879.md): Stack-based buffer overflow in the \_nc\_write\_entry function in tinfo/write\_entry.c in ncurses 6.0 allows attackers to cause a denial of… (no CVSS)
- [CVE-2017-7501](https://cve.now/CVE-2017-7501.md): It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. (no CVSS, Red Hat rpm)
- [CVE-2017-12172](https://cve.now/CVE-2017-12172.md): PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs (no CVSS, Red Hat postgresql)
- [CVE-2017-2690](https://cve.now/CVE-2017-2690.md): SoftCo with software V200R003C20,eSpace U1910 with software V200R003C00, V200R003C20 and V200R003C30,eSpace U1911 with software… (no CVSS, Huawei Technologies Co. SoftCo,eSpace U1910,eSpace U1911,eS…)
- [CVE-2017-2691](https://cve.now/CVE-2017-2691.md): Huawei P9 versions earlier before EVA-AL10C00B373, versions earlier before EVA-CL00C92B373, versions earlier before EVA-DL00C17B373… (no CVSS, Huawei Technologies Co. Huawei P9)
- [CVE-2017-2692](https://cve.now/CVE-2017-2692.md): The Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier… (no CVSS, Huawei Technologies Co. P8 Lite,Mate 7,Mate S,P8,honor 6,ho…)
- [CVE-2017-2693](https://cve.now/CVE-2017-2693.md): ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier… (no CVSS, Huawei Technologies Co. P8 Lite,Mate 7,Mate S,P8,honor 6,ho…)
- [CVE-2017-2694](https://cve.now/CVE-2017-2694.md): The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any… (no CVSS, Huawei Technologies Co. HwVmall)
- [CVE-2017-2695](https://cve.now/CVE-2017-2695.md): TIT-AL00C583B211 has a directory traversal vulnerability which allows an attacker to obtain the files in email application. (no CVSS, Huawei Technologies Co. TIT-AL00)
- [CVE-2017-2696](https://cve.now/CVE-2017-2696.md): The emerg\_data driver in CAM-L21C10B130 and earlier versions, CAM-L21C185B141 and earlier versions has a buffer overflow vulnerability. (no CVSS, Huawei Technologies Co. Y6¢ò)
- [CVE-2017-2697](https://cve.now/CVE-2017-2697.md): The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier versions,NEM-L51C432B120 and earlier… (no CVSS)
- [CVE-2017-2698](https://cve.now/CVE-2017-2698.md): The ddr\_devfreq driver in versions earlier than GRA-UL00C00B197 has buffer overflow vulnerability. (no CVSS, Huawei Technologies Co. P8)
- [CVE-2017-2699](https://cve.now/CVE-2017-2699.md): The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than… (no CVSS, Huawei Technologies Co. Honor 7, Mate S,LYO-L21)
- [CVE-2017-2700](https://cve.now/CVE-2017-2700.md): AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability. (no CVSS, Huawei Technologies Co. AC6005,AC6605)
- [CVE-2017-2701](https://cve.now/CVE-2017-2701.md): Mate 9 with software MHA-AL00AC00B125 has a denial of service (DoS) vulnerability. (no CVSS, Huawei Technologies Co. Mate)
- [CVE-2017-2702](https://cve.now/CVE-2017-2702.md): Phone Finder in versions earlier before MHA-AL00C00B170 can be bypass. (no CVSS, Huawei Technologies Co. Mate)
- [CVE-2017-2703](https://cve.now/CVE-2017-2703.md): Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions earlier before… (no CVSS, Huawei Technologies Co. Mate 9, P9)
- [CVE-2017-2704](https://cve.now/CVE-2017-2704.md): Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0.0 and earlier… (no CVSS, Huawei Technologies Co. Smarthome,HiAPP,HwParentControl,HwP…)
- [CVE-2017-2705](https://cve.now/CVE-2017-2705.md): Huawei P9 smartphones with software versions earlier before EVA-AL10C00B365, versions earlier before EVA-AL00C00B365, versions earlier… (no CVSS, Huawei Technologies Co. Huawei P9)
- [CVE-2017-2706](https://cve.now/CVE-2017-2706.md): Mate 9 smartphones with software MHA-AL00AC00B125 have a directory traversal vulnerability in Push module. (no CVSS, Huawei Technologies Co. Mate)
- [CVE-2017-2707](https://cve.now/CVE-2017-2707.md): Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. (no CVSS, Huawei Technologies Co. Mate)
- [CVE-2017-2708](https://cve.now/CVE-2017-2708.md): The 'Find Phone' function in Nice smartphones with software versions earlier before Nice-AL00C00B0135 has an authentication bypass… (no CVSS, Huawei Technologies Co. Nice)
- [CVE-2017-2709](https://cve.now/CVE-2017-2709.md): HiGame with software earlier than 7.3.0 versions, SkyTone with software earlier than 8.1.1 versions have a DoS Vulnerability. (no CVSS, Huawei Technologies Co. HiGame, SkyTone)
- [CVE-2017-2710](https://cve.now/CVE-2017-2710.md): BTV-W09C229B002CUSTC229D005,BTV-W09C233B029, earlier than BTV-W09C100B006CUSTC100D002 versions, earlier than BTV-W09C128B003CUSTC128D002… (no CVSS, Huawei Technologies Co. Beethoven-W09A, CRR-L09)
- [CVE-2017-2711](https://cve.now/CVE-2017-2711.md): P9 Plus smartphones with software earlier than VIE-AL10C00B352 versions have an input validation vulnerability in the touchscreen Driver. (no CVSS, Huawei Technologies Co. P9 Plus)
- [CVE-2017-2712](https://cve.now/CVE-2017-2712.md): S3300 V100R006C05 have an Ethernet in the First Mile (EFM) flapping vulnerability due to the lack of type-length-value (TLV) consistency… (no CVSS, Huawei Technologies Co. S3300)
- [CVE-2017-2713](https://cve.now/CVE-2017-2713.md): HUAWEI P9 smartphones with software versions earlier before EVA-L09C432B383, versions earlier before EVA-L09C636B380, versions earlier… (no CVSS, Huawei Technologies Co. HUAWEI P9)
- [CVE-2017-2714](https://cve.now/CVE-2017-2714.md): The GaussDB in FusionSphere OpenStack V100R005C10SPC705 and earlier versions has a buffer overflow vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-2715](https://cve.now/CVE-2017-2715.md): The Files APP 7.1.1.309 and earlier versions in some Huawei mobile phones has a brute-force password cracking vulnerability due to the… (no CVSS, Huawei Technologies Co. Files £¨Files is the smar…)
- [CVE-2017-2716](https://cve.now/CVE-2017-2716.md): The camerafs driver in Mate 9 Versions earlier than MHA-AL00BC00B173 has buffer overflow vulnerability. (no CVSS, Huawei Technologies Co. Mate)
- [CVE-2017-2717](https://cve.now/CVE-2017-2717.md): honor 8 Pro with software Duke-L09C10B120 and earlier versions,Duke-L09C432B120 and earlier versions,Duke-L09C636B120 and earlier versions… (no CVSS, Huawei Technologies Co. honor 8 Pro)
- [CVE-2017-2718](https://cve.now/CVE-2017-2718.md): FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient… (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-2719](https://cve.now/CVE-2017-2719.md): FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient… (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-2720](https://cve.now/CVE-2017-2720.md): FusionSphere OpenStack V100R006C00 has an information exposure vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-2721](https://cve.now/CVE-2017-2721.md): Some Huawei smart phones with software Berlin-L21C10B130,Berlin-L21C185B133,Berlin-L21HNC10B131,Berlin-L21HNC185B140,Berlin-L21HNC432B151,B… (no CVSS, Huawei Technologies Co. Berlin-L21,Berlin-L21HN,Berlin-L22,…)
- [CVE-2017-2722](https://cve.now/CVE-2017-2722.md): DP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06… (no CVSS, Huawei Technologies Co. DP300,TE60,TP3106,ViewPoint 9030,eC…)
- [CVE-2017-2723](https://cve.now/CVE-2017-2723.md): The Files APP 7.1.1.308 and earlier versions in some Huawei mobile phones has a vulnerability of plaintext storage of users' Safe passwords. (no CVSS, Huawei Technologies Co. Files)
- [CVE-2017-2724](https://cve.now/CVE-2017-2724.md): Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a… (no CVSS, Huawei Technologies Co. P10 Plus,P10)
- [CVE-2017-2725](https://cve.now/CVE-2017-2725.md): Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a… (no CVSS, Huawei Technologies Co. P10 Plus,P10)
- [CVE-2017-2726](https://cve.now/CVE-2017-2726.md): Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a… (no CVSS, Huawei Technologies Co. P10 Plus,P10)
- [CVE-2017-2727](https://cve.now/CVE-2017-2727.md): Huawei P9 smart phones with software versions earlier before EVA-AL00C00B365, versions earlier before EVA-AL10C00B365,Versions earlier… (no CVSS, Huawei Technologies Co. Huawei P9)
- [CVE-2017-2728](https://cve.now/CVE-2017-2728.md): Some Huawei mobile phones Honor 6X Berlin-L22C636B150 and earlier versions have a Bluetooth unlock bypassing vulnerability. (no CVSS, Huawei Technologies Co. Honor)
- [CVE-2017-2729](https://cve.now/CVE-2017-2729.md): The boot loaders in Honor 5A smart phones with software Versions earlier than CAM-TL00C01B193,Versions earlier than… (no CVSS, Huawei Technologies Co. Honor)
- [CVE-2017-2730](https://cve.now/CVE-2017-2730.md): HUAWEI HiLink APP (for IOS) versions earlier before 5.0.25.306 and HUAWEI Tech Support APP (for IOS) versions earlier before 5.0.0 have an… (no CVSS, Huawei Technologies Co. HUAWEI HiLink APP (for IOS), HUAWEI…)
- [CVE-2017-2731](https://cve.now/CVE-2017-2731.md): The vibrator service in P9 Plus smart phones with software versions earlier before VIE-AL10C00B386 has DoS vulnerability. (no CVSS, Huawei Technologies Co. P9 Plus)
- [CVE-2017-2732](https://cve.now/CVE-2017-2732.md): Huawei Hilink APP Versions earlier before 5.0.25.306 has an information leak vulnerability. (no CVSS, Huawei Technologies Co. HUAWEI HiLink APP)
- [CVE-2017-2733](https://cve.now/CVE-2017-2733.md): Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information… (no CVSS, Huawei Technologies Co. Honor)
- [CVE-2017-2734](https://cve.now/CVE-2017-2734.md): P9 Plus smartphones with software versions earlier before VIE-AL10BC00B386 have a denial of service (DoS) vulnerability. (no CVSS, Huawei Technologies Co. P9 Plus)
- [CVE-2017-2735](https://cve.now/CVE-2017-2735.md): TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. (no CVSS, Huawei Technologies Co. TIT-AL00)
- [CVE-2017-2736](https://cve.now/CVE-2017-2736.md): VCM5010 with software versions earlier before V100R002C50SPC100 has a command injection vulnerability. (no CVSS, Huawei Technologies Co. VCM5010)
- [CVE-2017-2737](https://cve.now/CVE-2017-2737.md): VCM5010 with software versions earlier before V100R002C50SPC100 has an arbitrary file upload vulnerability. (no CVSS, Huawei Technologies Co. VCM5010)
- [CVE-2017-2738](https://cve.now/CVE-2017-2738.md): VCM5010 with software versions earlier before V100R002C50SPC100 has an authentication bypass vulnerability. (no CVSS, Huawei Technologies Co. VCM5010)
- [CVE-2017-2739](https://cve.now/CVE-2017-2739.md): The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. (no CVSS, Huawei Technologies Co. Vmall)
- [CVE-2017-8117](https://cve.now/CVE-2017-8117.md): The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper… (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8118](https://cve.now/CVE-2017-8118.md): The UMA product with software V200R001 and V300R001 has an information leak vulnerability. (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8119](https://cve.now/CVE-2017-8119.md): The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper… (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8120](https://cve.now/CVE-2017-8120.md): The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper… (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8121](https://cve.now/CVE-2017-8121.md): The UMA product with software V200R001 and V300R001 has an information leak vulnerability. (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8122](https://cve.now/CVE-2017-8122.md): The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of… (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8123](https://cve.now/CVE-2017-8123.md): The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of… (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8124](https://cve.now/CVE-2017-8124.md): The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of… (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8125](https://cve.now/CVE-2017-8125.md): The UMA product with software V200R001 and V300R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8126](https://cve.now/CVE-2017-8126.md): The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of… (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8127](https://cve.now/CVE-2017-8127.md): The UMA product with software V200R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8128](https://cve.now/CVE-2017-8128.md): The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper… (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8129](https://cve.now/CVE-2017-8129.md): The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper… (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8130](https://cve.now/CVE-2017-8130.md): The UMA product with software V200R001 and V300R001 has an information leak vulnerability. (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8131](https://cve.now/CVE-2017-8131.md): The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input… (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8132](https://cve.now/CVE-2017-8132.md): The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input… (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8133](https://cve.now/CVE-2017-8133.md): Huawei iManager NetEco with software V600R008C00 and V600R008C10 has a command injection vulnerability. (no CVSS, Huawei Technologies Co. iManager NetEco)
- [CVE-2017-8134](https://cve.now/CVE-2017-8134.md): The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input… (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8135](https://cve.now/CVE-2017-8135.md): The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input… (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8136](https://cve.now/CVE-2017-8136.md): HedEx Earlier than V200R006C00 versions has an arbitrary file download vulnerability. (no CVSS, Huawei Technologies Co. HedEx Lite)
- [CVE-2017-8137](https://cve.now/CVE-2017-8137.md): HedEx Earlier than V200R006C00 versions has a dynamic link library (DLL) hijacking vulnerability due to calling the DDL file by accessing… (no CVSS, Huawei Technologies Co. HedEx Lite)
- [CVE-2017-8138](https://cve.now/CVE-2017-8138.md): HedEx Earlier than V200R006C00 versions has a cross-site request forgery (CSRF) vulnerability. (no CVSS, Huawei Technologies Co. HedEx Lite)
- [CVE-2017-8139](https://cve.now/CVE-2017-8139.md): HedEx Earlier than V200R006C00 versions have the stored cross-site scripting (XSS) vulnerability. (no CVSS, Huawei Technologies Co. HedEx Lite)
- [CVE-2017-8140](https://cve.now/CVE-2017-8140.md): The soundtrigger driver in P9 Plus smart phones with software versions earlier than VIE-AL10BC00B353 has a memory double free vulnerability. (no CVSS, Huawei Technologies Co. P9 Plus)
- [CVE-2017-8141](https://cve.now/CVE-2017-8141.md): The Touch Panel (TP) driver in P10 Plus smart phones with software versions earlier than VKY-AL00C00B153 has a memory double free… (no CVSS, Huawei Technologies Co. P10 Plus)
- [CVE-2017-8142](https://cve.now/CVE-2017-8142.md): The Trusted Execution Environment (TEE) module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than… (no CVSS, Huawei Technologies Co. Mate 9, Mate 9 Pro)
- [CVE-2017-8143](https://cve.now/CVE-2017-8143.md): Wi-Fi driver of Honor 5C and P9 Lite Huawei smart phones with software versions earlier than NEM-L21C432B351 and versions earlier than… (no CVSS, Huawei Technologies Co. Honor 5C, P9 Lite)
- [CVE-2017-8144](https://cve.now/CVE-2017-8144.md): Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Huawei smartphones with software the versions before CAM-L03C605B143CUSTC605D003,the… (no CVSS, Huawei Technologies Co. Honor 5A,Honor 8 Lite,Mate9,Mate9 P…)
- [CVE-2017-8145](https://cve.now/CVE-2017-8145.md): The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions… (no CVSS, Huawei Technologies Co. P10, P10 Plus)
- [CVE-2017-8146](https://cve.now/CVE-2017-8146.md): The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions… (no CVSS, Huawei Technologies Co. P10, P10 Plus)
- [CVE-2017-8147](https://cve.now/CVE-2017-8147.md): AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200… (no CVSS, Huawei Technologies Co. AC6005,AC6605,AR1200,AR200,AR3200,C…)
- [CVE-2017-8148](https://cve.now/CVE-2017-8148.md): Audio driver in P9 smartphones with software The versions before EVA-AL10C00B389 has a denial of service (DoS) vulnerability. (no CVSS, Huawei Technologies Co. P9)
- [CVE-2017-8149](https://cve.now/CVE-2017-8149.md): The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before… (no CVSS, Huawei Technologies Co. P10, P10 Plus)
- [CVE-2017-8150](https://cve.now/CVE-2017-8150.md): The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before… (no CVSS, Huawei Technologies Co. P10, P10 Plus)
- [CVE-2017-8151](https://cve.now/CVE-2017-8151.md): Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have an authentication bypass vulnerability due to the… (no CVSS, Huawei Technologies Co. Honor)
- [CVE-2017-8152](https://cve.now/CVE-2017-8152.md): Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have a Factory Reset Protection (FRP) bypass security… (no CVSS, Huawei Technologies Co. Honor)
- [CVE-2017-8153](https://cve.now/CVE-2017-8153.md): Huawei VMall (for Android) with the versions before 1.5.8.5 have a privilege elevation vulnerability due to improper design. (no CVSS, Huawei Technologies Co. VMall)
- [CVE-2017-8155](https://cve.now/CVE-2017-8155.md): The outdoor unit of Customer Premise Equipment (CPE) product B2338-168 V100R001C00 has a no authentication vulnerability on a certain port. (no CVSS, Huawei Technologies Co. B2338-168)
- [CVE-2017-8156](https://cve.now/CVE-2017-8156.md): The outdoor unit of Customer Premise Equipment (CPE) product B2338-168 V100R001C00 has a no authentication vulnerability on the serial port. (no CVSS, Huawei Technologies Co. B2338-168)
- [CVE-2017-8157](https://cve.now/CVE-2017-8157.md): OceanStor 5800 V3 with software V300R002C00 and V300R002C10, OceanStor 6900 V3 V300R001C00 has an information leakage vulnerability. (no CVSS, Huawei Technologies Co. OceanStor 5800 V3, OceanStor 6900)
- [CVE-2017-8158](https://cve.now/CVE-2017-8158.md): FusionCompute V100R005C00 and V100R005C10 have an improper authorization vulnerability due to improper permission settings for a certain… (no CVSS, Huawei Technologies Co. FusionCompute)
- [CVE-2017-8159](https://cve.now/CVE-2017-8159.md): Some Huawei smartphones with software AGS-L09C233B019,AGS-W09C233B019,KOB-L09C233B017,KOB-W09C233B012 have a type confusion vulnerability. (no CVSS, Huawei Technologies Co. Agassi-L09HN,Agassi-W09HN,Kobe-L09A…)
- [CVE-2017-8160](https://cve.now/CVE-2017-8160.md): The Madapt Driver of some Huawei smart phones with software Earlier than Vicky-AL00AC00B172… (no CVSS, Huawei Technologies Co. Vicky-AL00A,Vicky-AL00C,Vicky-TL00A…)
- [CVE-2017-8161](https://cve.now/CVE-2017-8161.md): EVA-L09 smartphones with software Earlier than EVA-L09C25B150CUSTC25D003 versions,Earlier than EVA-L09C440B140 versions,Earlier than… (no CVSS, Huawei Technologies Co. EVA-L09)
- [CVE-2017-8162](https://cve.now/CVE-2017-8162.md): AR120-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR1200 with software V200R006C10, V200R006C13, V200R007C00… (no CVSS, Huawei Technologies Co. AR120-S,AR1200,AR1200-S,AR150,AR150…)
- [CVE-2017-8163](https://cve.now/CVE-2017-8163.md): AR120-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR1200 with software V200R006C10, V200R006C13, V200R007C00… (no CVSS, Huawei Technologies Co. AR120-S,AR1200,AR1200-S,AR150,AR150…)
- [CVE-2017-8166](https://cve.now/CVE-2017-8166.md): Huawei mobile phones Honor V9 with the software versions before Duke-AL20C00B195 have an App Lock bypass vulnerability. (no CVSS, Huawei Technologies Co. Honor)
- [CVE-2017-8167](https://cve.now/CVE-2017-8167.md): Huawei firewall products USG9500 V500R001C50 has a DoS vulnerability.A remote attacker who controls the peer device could exploit the… (no CVSS, Huawei Technologies Co. USG9500)
- [CVE-2017-8168](https://cve.now/CVE-2017-8168.md): FusionSphere OpenStack with software V100R006C00SPC102(NFV) and V100R006C10 have an information leak vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8169](https://cve.now/CVE-2017-8169.md): Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter… (no CVSS, Huawei Technologies Co. VIE-L09)
- [CVE-2017-8170](https://cve.now/CVE-2017-8170.md): Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter… (no CVSS, Huawei Technologies Co. VIE-L09)
- [CVE-2017-8171](https://cve.now/CVE-2017-8171.md): Huawei smart phones with software earlier than Vicky-AL00AC00B172D versions have a Factory Reset Protection (FRP) bypass security… (no CVSS, Huawei Technologies Co. Vicky-AL00A)
- [CVE-2017-8172](https://cve.now/CVE-2017-8172.md): Isub service in P10 Plus and P10 smart phones with earlier than VKY-AL00C00B157 versions and earlier than VTR-AL00C00B157 versions has a… (no CVSS, Huawei Technologies Co. P10 Plus,P10)
- [CVE-2017-8173](https://cve.now/CVE-2017-8173.md): Maya-L02,VKY-L09,VTR-L29,Vicky-AL00A,Victoria-AL00A,Warsaw-AL00 smart phones with software of earlier than Maya-L02C636B126… (no CVSS, Huawei Technologies Co. Maya-L02,VKY-L09,VTR-L29,Vicky-AL00…)
- [CVE-2017-8174](https://cve.now/CVE-2017-8174.md): Huawei USG6300 V100R001C30SPC300 and USG6600 with software of V100R001C30SPC500,V100R001C30SPC600,V100R001C30SPC700,V100R001C30SPC800 have… (no CVSS, Huawei Technologies Co. Secospace USG6300,Secospace USG6600)
- [CVE-2017-8175](https://cve.now/CVE-2017-8175.md): The Bastet of some Huawei mobile phones with software earlier than Vicky-AL00AC00B167 versions, earlier than Victoria-AL00AC00B167… (no CVSS, Huawei Technologies Co. Vicky-AL00A,Victoria-AL00A,Warsaw-A…)
- [CVE-2017-8177](https://cve.now/CVE-2017-8177.md): Huawei APP HiWallet earlier than 5.0.3.100 versions do not support signature verification for APK file. (no CVSS, Huawei Technologies Co. HiWallet)
- [CVE-2017-8178](https://cve.now/CVE-2017-8178.md): Huawei Email APP Vicky-AL00 smartphones with software of earlier than VKY-AL00C00B171 versions has a stored cross-site scripting… (no CVSS, Huawei Technologies Co. Vicky-AL00)
- [CVE-2017-8179](https://cve.now/CVE-2017-8179.md): The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow… (no CVSS, Huawei Technologies Co. Nice-AL00)
- [CVE-2017-8180](https://cve.now/CVE-2017-8180.md): The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow… (no CVSS, Huawei Technologies Co. Nice-AL00)
- [CVE-2017-8181](https://cve.now/CVE-2017-8181.md): The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a arbitrary memory… (no CVSS, Huawei Technologies Co. Nice-AL00)
- [CVE-2017-8182](https://cve.now/CVE-2017-8182.md): MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a… (no CVSS, Huawei Technologies Co. Nice-AL00)
- [CVE-2017-8183](https://cve.now/CVE-2017-8183.md): MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a… (no CVSS, Huawei Technologies Co. Nice-AL00)
- [CVE-2017-8184](https://cve.now/CVE-2017-8184.md): MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a… (no CVSS, Huawei Technologies Co. Nice-AL00)
- [CVE-2017-8185](https://cve.now/CVE-2017-8185.md): ME906s-158 earlier than ME906S\_Installer\_13.1805.10.3 versions has a privilege elevation vulnerability. (no CVSS, Huawei Technologies Co. ME906s-158)
- [CVE-2017-8186](https://cve.now/CVE-2017-8186.md): The Bastet of some Huawei mobile phones with software of earlier than MHA-AL00BC00B231 versions has a DOS vulnerability due to the lack of… (no CVSS, Huawei Technologies Co. MHA-AL00A)
- [CVE-2017-8188](https://cve.now/CVE-2017-8188.md): FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8189](https://cve.now/CVE-2017-8189.md): FusionSphere OpenStack V100R006C00SPC102(NFV)has a path traversal vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8190](https://cve.now/CVE-2017-8190.md): FusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic signature vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8191](https://cve.now/CVE-2017-8191.md): FusionSphere OpenStack V100R006C00SPC102(NFV)has a week cryptographic algorithm vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8192](https://cve.now/CVE-2017-8192.md): FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8193](https://cve.now/CVE-2017-8193.md): The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8194](https://cve.now/CVE-2017-8194.md): The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8195](https://cve.now/CVE-2017-8195.md): The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8196](https://cve.now/CVE-2017-8196.md): FusionSphere V100R006C00SPC102(NFV) has an incorrect authorization vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere)
- [CVE-2017-8197](https://cve.now/CVE-2017-8197.md): FusionSphere V100R006C00SPC102(NFV) has a command injection vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere)
- [CVE-2017-8198](https://cve.now/CVE-2017-8198.md): FusionSphere V100R006C00SPC102(NFV) has an SQL injection vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere)
- [CVE-2017-8199](https://cve.now/CVE-2017-8199.md): MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol. (no CVSS, Huawei Technologies Co. MAX PRESENCE,TP3106,TP3206,)
- [CVE-2017-8200](https://cve.now/CVE-2017-8200.md): MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol. (no CVSS, Huawei Technologies Co. MAX PRESENCE,TP3106,TP3206)
- [CVE-2017-8201](https://cve.now/CVE-2017-8201.md): MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an a memory leak vulnerability in H323 protocol. (no CVSS, Huawei Technologies Co. MAX PRESENCE,TP3106,TP3206,)
- [CVE-2017-8202](https://cve.now/CVE-2017-8202.md): The CameraISP driver of some Huawei smart phones with software of versions earlier than Prague-AL00AC00B205,versions earlier than… (no CVSS, Huawei Technologies Co. Prague-AL00A,Prague-AL00B,Prague-AL…)
- [CVE-2017-8203](https://cve.now/CVE-2017-8203.md): The Bastet Driver of Nova 2 Plus,Nova 2 Huawei smart phones with software of Versions earlier than BAC-AL00C00B173,Versions earlier than… (no CVSS, Huawei Technologies Co. Nova 2 Plus,Nova)
- [CVE-2017-8204](https://cve.now/CVE-2017-8204.md): The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has a buffer overflow… (no CVSS, Huawei Technologies Co. Honor)
- [CVE-2017-8205](https://cve.now/CVE-2017-8205.md): The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has integer overflow… (no CVSS, Huawei Technologies Co. Honor)
- [CVE-2017-8206](https://cve.now/CVE-2017-8206.md): HONOR 7 Lite mobile phones with software of versions earlier than NEM-L21C432B352 have an App Lock bypass vulnerability. (no CVSS, Huawei Technologies Co. HONOR 7 Lite)
- [CVE-2017-8207](https://cve.now/CVE-2017-8207.md): The driver of honor 5C, honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than… (no CVSS, Huawei Technologies Co. honor 5C,honor)
- [CVE-2017-8208](https://cve.now/CVE-2017-8208.md): The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than… (no CVSS, Huawei Technologies Co. honor 5C,honor)
- [CVE-2017-8209](https://cve.now/CVE-2017-8209.md): The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than… (no CVSS, Huawei Technologies Co. honor 5C,honor)
- [CVE-2017-8210](https://cve.now/CVE-2017-8210.md): The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than… (no CVSS, Huawei Technologies Co. honor 5C,honor)
- [CVE-2017-8211](https://cve.now/CVE-2017-8211.md): The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than… (no CVSS, Huawei Technologies Co. honor 5C,honor)
- [CVE-2017-8212](https://cve.now/CVE-2017-8212.md): The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than… (no CVSS, Huawei Technologies Co. honor 5C,honor)
- [CVE-2017-8213](https://cve.now/CVE-2017-8213.md): Huawei SMC2.0 with software of V100R003C10, V100R005C00SPC100, V100R005C00SPC101B001T, V100R005C00SPC102, V100R005C00SPC103… (no CVSS, Huawei Technologies Co. SMC2.0)
- [CVE-2017-8214](https://cve.now/CVE-2017-8214.md): Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than… (no CVSS, Huawei Technologies Co. Honor 8,Honor V8,Honor 9,Honor V9,N…)
- [CVE-2017-8215](https://cve.now/CVE-2017-8215.md): Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than… (no CVSS, Huawei Technologies Co. Honor 8,Honor V8,Honor 9,Honor V9,N…)
- [CVE-2017-8216](https://cve.now/CVE-2017-8216.md): Warsaw Huawei Smart phones with software of versions earlier than Warsaw-AL00C00B180, versions earlier than Warsaw-TL10C01B180 have a… (no CVSS, Huawei Technologies Co. Warsaw)
- [CVE-2017-12190](https://cve.now/CVE-2017-12190.md): The bio\_map\_user\_iov and bio\_unmap\_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI… (no CVSS, Linux kernel through v4.14-rc5)
- [CVE-2017-12193](https://cve.now/CVE-2017-12193.md): The assoc\_array\_insert\_into\_terminal\_node function in lib/assoc\_array.c in the Linux kernel before 4.13.11 mishandles node splitting… (no CVSS, Linux kernel since 3.13 up to)
- [CVE-2017-15099](https://cve.now/CVE-2017-15099.md): INSERT ... (no CVSS, Red Hat postgresql)
- [CVE-2017-15528](https://cve.now/CVE-2017-15528.md): Prior to v 7.6, the Install Norton Security (INS) product can be susceptible to a certificate spoofing vulnerability, which is a type of… (no CVSS)
- [CVE-2017-13071](https://cve.now/CVE-2017-13071.md): QNAP has already patched this vulnerability. (no CVSS, QNAP Video Station)
- [CVE-2017-15098](https://cve.now/CVE-2017-15098.md): Invalid json\_populate\_recordset or jsonb\_populate\_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x… (no CVSS, Red Hat postgresql)
- [CVE-2017-7736](https://cve.now/CVE-2017-7736.md): A stored Cross-site Scripting (XSS) vulnerability in Fortinet FortiWeb webUI Certificate View page in 5.8.0, 5.7.1 and earlier, allows… (no CVSS, Fortinet FortiWeb)
- [CVE-2017-6166](https://cve.now/CVE-2017-6166.md): In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic… (no CVSS, F5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…)
- [CVE-2017-16926](https://cve.now/CVE-2017-16926.md): Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by… (no CVSS)
- [CVE-2017-8860](https://cve.now/CVE-2017-8860.md): Information disclosure through directory listing on the Cohu 3960HD allows an attacker to view and download source code, log files, and… (no CVSS)
- [CVE-2017-8861](https://cve.now/CVE-2017-8861.md): Missing authentication for the remote configuration port 1236/tcp on the Cohu 3960HD allows an attacker to change configuration parameters… (no CVSS)
- [CVE-2017-8862](https://cve.now/CVE-2017-8862.md): The webupgrade function on the Cohu 3960HD does not verify the firmware upgrade files or process, allowing an attacker to upload a… (no CVSS)
- [CVE-2017-8863](https://cve.now/CVE-2017-8863.md): Information disclosure of .esp source code on the Cohu 3960 allows an attacker to view sensitive information such as application logic… (no CVSS)
- [CVE-2017-8864](https://cve.now/CVE-2017-8864.md): Client-side enforcement using JavaScript of server-side security options on the Cohu 3960HD allows an attacker to manipulate options sent… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2017-11-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.