# CVEs published 2017-11-22

162 CVEs were published on November 22, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-16879](https://cve.now/CVE-2017-16879.md): Stack-based buffer overflow in the \_nc\_write\_entry function in tinfo/write\_entry.c in ncurses 6.0 allows attackers to cause a denial of serv (no CVSS)
- [CVE-2017-7501](https://cve.now/CVE-2017-7501.md): It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. (no CVSS, Red Hat rpm)
- [CVE-2017-12172](https://cve.now/CVE-2017-12172.md): PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs (no CVSS, Red Hat postgresql)
- [CVE-2017-2690](https://cve.now/CVE-2017-2690.md): SoftCo with software V200R003C20,eSpace U1910 with software V200R003C00, V200R003C20 and V200R003C30,eSpace U1911 with software V200R003C20, (no CVSS, Huawei Technologies Co. SoftCo,eSpace U1910,eSpace U1911,eS…)
- [CVE-2017-2691](https://cve.now/CVE-2017-2691.md): Huawei P9 versions earlier before EVA-AL10C00B373, versions earlier before EVA-CL00C92B373, versions earlier before EVA-DL00C17B373, version (no CVSS, Huawei Technologies Co. Huawei P9)
- [CVE-2017-2692](https://cve.now/CVE-2017-2692.md): The Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,AL (no CVSS, Huawei Technologies Co. P8 Lite,Mate 7,Mate S,P8,honor 6,ho…)
- [CVE-2017-2693](https://cve.now/CVE-2017-2693.md): ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier ve (no CVSS, Huawei Technologies Co. P8 Lite,Mate 7,Mate S,P8,honor 6,ho…)
- [CVE-2017-2694](https://cve.now/CVE-2017-2694.md): The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any thir (no CVSS, Huawei Technologies Co. HwVmall)
- [CVE-2017-2695](https://cve.now/CVE-2017-2695.md): TIT-AL00C583B211 has a directory traversal vulnerability which allows an attacker to obtain the files in email application. (no CVSS, Huawei Technologies Co. TIT-AL00)
- [CVE-2017-2696](https://cve.now/CVE-2017-2696.md): The emerg\_data driver in CAM-L21C10B130 and earlier versions, CAM-L21C185B141 and earlier versions has a buffer overflow vulnerability. (no CVSS, Huawei Technologies Co. Y6¢ò)
- [CVE-2017-2697](https://cve.now/CVE-2017-2697.md): The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier versions,NEM-L51C432B120 and earlier versions,KNT-A (no CVSS)
- [CVE-2017-2698](https://cve.now/CVE-2017-2698.md): The ddr\_devfreq driver in versions earlier than GRA-UL00C00B197 has buffer overflow vulnerability. (no CVSS, Huawei Technologies Co. P8)
- [CVE-2017-2699](https://cve.now/CVE-2017-2699.md): The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 (no CVSS, Huawei Technologies Co. Honor 7, Mate S,LYO-L21)
- [CVE-2017-2700](https://cve.now/CVE-2017-2700.md): AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability. (no CVSS, Huawei Technologies Co. AC6005,AC6605)
- [CVE-2017-2701](https://cve.now/CVE-2017-2701.md): Mate 9 with software MHA-AL00AC00B125 has a denial of service (DoS) vulnerability. (no CVSS, Huawei Technologies Co. Mate)
- [CVE-2017-2702](https://cve.now/CVE-2017-2702.md): Phone Finder in versions earlier before MHA-AL00C00B170 can be bypass. (no CVSS, Huawei Technologies Co. Mate)
- [CVE-2017-2703](https://cve.now/CVE-2017-2703.md): Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions earlier before MHA-DL00BC00B156,V (no CVSS, Huawei Technologies Co. Mate 9, P9)
- [CVE-2017-2704](https://cve.now/CVE-2017-2704.md): Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0.0 and earlier versions,HwParentControlPare (no CVSS, Huawei Technologies Co. Smarthome,HiAPP,HwParentControl,HwP…)
- [CVE-2017-2705](https://cve.now/CVE-2017-2705.md): Huawei P9 smartphones with software versions earlier before EVA-AL10C00B365, versions earlier before EVA-AL00C00B365, versions earlier befor (no CVSS, Huawei Technologies Co. Huawei P9)
- [CVE-2017-2706](https://cve.now/CVE-2017-2706.md): Mate 9 smartphones with software MHA-AL00AC00B125 have a directory traversal vulnerability in Push module. (no CVSS, Huawei Technologies Co. Mate)
- [CVE-2017-2707](https://cve.now/CVE-2017-2707.md): Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. (no CVSS, Huawei Technologies Co. Mate)
- [CVE-2017-2708](https://cve.now/CVE-2017-2708.md): The 'Find Phone' function in Nice smartphones with software versions earlier before Nice-AL00C00B0135 has an authentication bypass vulnerabi (no CVSS, Huawei Technologies Co. Nice)
- [CVE-2017-2709](https://cve.now/CVE-2017-2709.md): HiGame with software earlier than 7.3.0 versions, SkyTone with software earlier than 8.1.1 versions have a DoS Vulnerability. (no CVSS, Huawei Technologies Co. HiGame, SkyTone)
- [CVE-2017-2710](https://cve.now/CVE-2017-2710.md): BTV-W09C229B002CUSTC229D005,BTV-W09C233B029, earlier than BTV-W09C100B006CUSTC100D002 versions, earlier than BTV-W09C128B003CUSTC128D002 ver (no CVSS, Huawei Technologies Co. Beethoven-W09A, CRR-L09)
- [CVE-2017-2711](https://cve.now/CVE-2017-2711.md): P9 Plus smartphones with software earlier than VIE-AL10C00B352 versions have an input validation vulnerability in the touchscreen Driver. (no CVSS, Huawei Technologies Co. P9 Plus)
- [CVE-2017-2712](https://cve.now/CVE-2017-2712.md): S3300 V100R006C05 have an Ethernet in the First Mile (EFM) flapping vulnerability due to the lack of type-length-value (TLV) consistency che (no CVSS, Huawei Technologies Co. S3300)
- [CVE-2017-2713](https://cve.now/CVE-2017-2713.md): HUAWEI P9 smartphones with software versions earlier before EVA-L09C432B383, versions earlier before EVA-L09C636B380, versions earlier befor (no CVSS, Huawei Technologies Co. HUAWEI P9)
- [CVE-2017-2714](https://cve.now/CVE-2017-2714.md): The GaussDB in FusionSphere OpenStack V100R005C10SPC705 and earlier versions has a buffer overflow vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-2715](https://cve.now/CVE-2017-2715.md): The Files APP 7.1.1.309 and earlier versions in some Huawei mobile phones has a brute-force password cracking vulnerability due to the impro (no CVSS, Huawei Technologies Co. Files £¨Files is the smar…)
- [CVE-2017-2716](https://cve.now/CVE-2017-2716.md): The camerafs driver in Mate 9 Versions earlier than MHA-AL00BC00B173 has buffer overflow vulnerability. (no CVSS, Huawei Technologies Co. Mate)
- [CVE-2017-2717](https://cve.now/CVE-2017-2717.md): honor 8 Pro with software Duke-L09C10B120 and earlier versions,Duke-L09C432B120 and earlier versions,Duke-L09C636B120 and earlier versions h (no CVSS, Huawei Technologies Co. honor 8 Pro)
- [CVE-2017-2718](https://cve.now/CVE-2017-2718.md): FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-2719](https://cve.now/CVE-2017-2719.md): FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-2720](https://cve.now/CVE-2017-2720.md): FusionSphere OpenStack V100R006C00 has an information exposure vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-2721](https://cve.now/CVE-2017-2721.md): Some Huawei smart phones with software Berlin-L21C10B130,Berlin-L21C185B133,Berlin-L21HNC10B131,Berlin-L21HNC185B140,Berlin-L21HNC432B151,Be (no CVSS, Huawei Technologies Co. Berlin-L21,Berlin-L21HN,Berlin-L22,…)
- [CVE-2017-2722](https://cve.now/CVE-2017-2722.md): DP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and (no CVSS, Huawei Technologies Co. DP300,TE60,TP3106,ViewPoint 9030,eC…)
- [CVE-2017-2723](https://cve.now/CVE-2017-2723.md): The Files APP 7.1.1.308 and earlier versions in some Huawei mobile phones has a vulnerability of plaintext storage of users' Safe passwords. (no CVSS, Huawei Technologies Co. Files)
- [CVE-2017-2724](https://cve.now/CVE-2017-2724.md): Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a bu (no CVSS, Huawei Technologies Co. P10 Plus,P10)
- [CVE-2017-2725](https://cve.now/CVE-2017-2725.md): Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a bu (no CVSS, Huawei Technologies Co. P10 Plus,P10)
- [CVE-2017-2726](https://cve.now/CVE-2017-2726.md): Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a bu (no CVSS, Huawei Technologies Co. P10 Plus,P10)
- [CVE-2017-2727](https://cve.now/CVE-2017-2727.md): Huawei P9 smart phones with software versions earlier before EVA-AL00C00B365, versions earlier before EVA-AL10C00B365,Versions earlier befor (no CVSS, Huawei Technologies Co. Huawei P9)
- [CVE-2017-2728](https://cve.now/CVE-2017-2728.md): Some Huawei mobile phones Honor 6X Berlin-L22C636B150 and earlier versions have a Bluetooth unlock bypassing vulnerability. (no CVSS, Huawei Technologies Co. Honor)
- [CVE-2017-2729](https://cve.now/CVE-2017-2729.md): The boot loaders in Honor 5A smart phones with software Versions earlier than CAM-TL00C01B193,Versions earlier than CAM-TL00HC00B193,Version (no CVSS, Huawei Technologies Co. Honor)
- [CVE-2017-2730](https://cve.now/CVE-2017-2730.md): HUAWEI HiLink APP (for IOS) versions earlier before 5.0.25.306 and HUAWEI Tech Support APP (for IOS) versions earlier before 5.0.0 have an i (no CVSS, Huawei Technologies Co. HUAWEI HiLink APP (for IOS), HUAWEI…)
- [CVE-2017-2731](https://cve.now/CVE-2017-2731.md): The vibrator service in P9 Plus smart phones with software versions earlier before VIE-AL10C00B386 has DoS vulnerability. (no CVSS, Huawei Technologies Co. P9 Plus)
- [CVE-2017-2732](https://cve.now/CVE-2017-2732.md): Huawei Hilink APP Versions earlier before 5.0.25.306 has an information leak vulnerability. (no CVSS, Huawei Technologies Co. HUAWEI HiLink APP)
- [CVE-2017-2733](https://cve.now/CVE-2017-2733.md): Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information leak (no CVSS, Huawei Technologies Co. Honor)
- [CVE-2017-2734](https://cve.now/CVE-2017-2734.md): P9 Plus smartphones with software versions earlier before VIE-AL10BC00B386 have a denial of service (DoS) vulnerability. (no CVSS, Huawei Technologies Co. P9 Plus)
- [CVE-2017-2735](https://cve.now/CVE-2017-2735.md): TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. (no CVSS, Huawei Technologies Co. TIT-AL00)
- [CVE-2017-2736](https://cve.now/CVE-2017-2736.md): VCM5010 with software versions earlier before V100R002C50SPC100 has a command injection vulnerability. (no CVSS, Huawei Technologies Co. VCM5010)
- [CVE-2017-2737](https://cve.now/CVE-2017-2737.md): VCM5010 with software versions earlier before V100R002C50SPC100 has an arbitrary file upload vulnerability. (no CVSS, Huawei Technologies Co. VCM5010)
- [CVE-2017-2738](https://cve.now/CVE-2017-2738.md): VCM5010 with software versions earlier before V100R002C50SPC100 has an authentication bypass vulnerability. (no CVSS, Huawei Technologies Co. VCM5010)
- [CVE-2017-2739](https://cve.now/CVE-2017-2739.md): The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. (no CVSS, Huawei Technologies Co. Vmall)
- [CVE-2017-8117](https://cve.now/CVE-2017-8117.md): The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper proce (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8118](https://cve.now/CVE-2017-8118.md): The UMA product with software V200R001 and V300R001 has an information leak vulnerability. (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8119](https://cve.now/CVE-2017-8119.md): The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper proce (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8120](https://cve.now/CVE-2017-8120.md): The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper proce (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8121](https://cve.now/CVE-2017-8121.md): The UMA product with software V200R001 and V300R001 has an information leak vulnerability. (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8122](https://cve.now/CVE-2017-8122.md): The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of para (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8123](https://cve.now/CVE-2017-8123.md): The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of para (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8124](https://cve.now/CVE-2017-8124.md): The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of para (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8125](https://cve.now/CVE-2017-8125.md): The UMA product with software V200R001 and V300R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8126](https://cve.now/CVE-2017-8126.md): The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of para (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8127](https://cve.now/CVE-2017-8127.md): The UMA product with software V200R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8128](https://cve.now/CVE-2017-8128.md): The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper proce (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8129](https://cve.now/CVE-2017-8129.md): The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper proce (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8130](https://cve.now/CVE-2017-8130.md): The UMA product with software V200R001 and V300R001 has an information leak vulnerability. (no CVSS, Huawei Technologies Co. UMA)
- [CVE-2017-8131](https://cve.now/CVE-2017-8131.md): The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input val (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8132](https://cve.now/CVE-2017-8132.md): The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input val (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8133](https://cve.now/CVE-2017-8133.md): Huawei iManager NetEco with software V600R008C00 and V600R008C10 has a command injection vulnerability. (no CVSS, Huawei Technologies Co. iManager NetEco)
- [CVE-2017-8134](https://cve.now/CVE-2017-8134.md): The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input val (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8135](https://cve.now/CVE-2017-8135.md): The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input val (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8136](https://cve.now/CVE-2017-8136.md): HedEx Earlier than V200R006C00 versions has an arbitrary file download vulnerability. (no CVSS, Huawei Technologies Co. HedEx Lite)
- [CVE-2017-8137](https://cve.now/CVE-2017-8137.md): HedEx Earlier than V200R006C00 versions has a dynamic link library (DLL) hijacking vulnerability due to calling the DDL file by accessing a (no CVSS, Huawei Technologies Co. HedEx Lite)
- [CVE-2017-8138](https://cve.now/CVE-2017-8138.md): HedEx Earlier than V200R006C00 versions has a cross-site request forgery (CSRF) vulnerability. (no CVSS, Huawei Technologies Co. HedEx Lite)
- [CVE-2017-8139](https://cve.now/CVE-2017-8139.md): HedEx Earlier than V200R006C00 versions have the stored cross-site scripting (XSS) vulnerability. (no CVSS, Huawei Technologies Co. HedEx Lite)
- [CVE-2017-8140](https://cve.now/CVE-2017-8140.md): The soundtrigger driver in P9 Plus smart phones with software versions earlier than VIE-AL10BC00B353 has a memory double free vulnerability. (no CVSS, Huawei Technologies Co. P9 Plus)
- [CVE-2017-8141](https://cve.now/CVE-2017-8141.md): The Touch Panel (TP) driver in P10 Plus smart phones with software versions earlier than VKY-AL00C00B153 has a memory double free vulnerabil (no CVSS, Huawei Technologies Co. P10 Plus)
- [CVE-2017-8142](https://cve.now/CVE-2017-8142.md): The Trusted Execution Environment (TEE) module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than MHA-AL00BC00 (no CVSS, Huawei Technologies Co. Mate 9, Mate 9 Pro)
- [CVE-2017-8143](https://cve.now/CVE-2017-8143.md): Wi-Fi driver of Honor 5C and P9 Lite Huawei smart phones with software versions earlier than NEM-L21C432B351 and versions earlier than VNS-L (no CVSS, Huawei Technologies Co. Honor 5C, P9 Lite)
- [CVE-2017-8144](https://cve.now/CVE-2017-8144.md): Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Huawei smartphones with software the versions before CAM-L03C605B143CUSTC605D003,the vers (no CVSS, Huawei Technologies Co. Honor 5A,Honor 8 Lite,Mate9,Mate9 P…)
- [CVE-2017-8145](https://cve.now/CVE-2017-8145.md): The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions bef (no CVSS, Huawei Technologies Co. P10, P10 Plus)
- [CVE-2017-8146](https://cve.now/CVE-2017-8146.md): The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions bef (no CVSS, Huawei Technologies Co. P10, P10 Plus)
- [CVE-2017-8147](https://cve.now/CVE-2017-8147.md): AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with (no CVSS, Huawei Technologies Co. AC6005,AC6605,AR1200,AR200,AR3200,C…)
- [CVE-2017-8148](https://cve.now/CVE-2017-8148.md): Audio driver in P9 smartphones with software The versions before EVA-AL10C00B389 has a denial of service (DoS) vulnerability. (no CVSS, Huawei Technologies Co. P9)
- [CVE-2017-8149](https://cve.now/CVE-2017-8149.md): The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victo (no CVSS, Huawei Technologies Co. P10, P10 Plus)
- [CVE-2017-8150](https://cve.now/CVE-2017-8150.md): The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victo (no CVSS, Huawei Technologies Co. P10, P10 Plus)
- [CVE-2017-8151](https://cve.now/CVE-2017-8151.md): Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have an authentication bypass vulnerability due to the improp (no CVSS, Huawei Technologies Co. Honor)
- [CVE-2017-8152](https://cve.now/CVE-2017-8152.md): Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have a Factory Reset Protection (FRP) bypass security vulnera (no CVSS, Huawei Technologies Co. Honor)
- [CVE-2017-8153](https://cve.now/CVE-2017-8153.md): Huawei VMall (for Android) with the versions before 1.5.8.5 have a privilege elevation vulnerability due to improper design. (no CVSS, Huawei Technologies Co. VMall)
- [CVE-2017-8155](https://cve.now/CVE-2017-8155.md): The outdoor unit of Customer Premise Equipment (CPE) product B2338-168 V100R001C00 has a no authentication vulnerability on a certain port. (no CVSS, Huawei Technologies Co. B2338-168)
- [CVE-2017-8156](https://cve.now/CVE-2017-8156.md): The outdoor unit of Customer Premise Equipment (CPE) product B2338-168 V100R001C00 has a no authentication vulnerability on the serial port. (no CVSS, Huawei Technologies Co. B2338-168)
- [CVE-2017-8157](https://cve.now/CVE-2017-8157.md): OceanStor 5800 V3 with software V300R002C00 and V300R002C10, OceanStor 6900 V3 V300R001C00 has an information leakage vulnerability. (no CVSS, Huawei Technologies Co. OceanStor 5800 V3, OceanStor 6900)
- [CVE-2017-8158](https://cve.now/CVE-2017-8158.md): FusionCompute V100R005C00 and V100R005C10 have an improper authorization vulnerability due to improper permission settings for a certain fil (no CVSS, Huawei Technologies Co. FusionCompute)
- [CVE-2017-8159](https://cve.now/CVE-2017-8159.md): Some Huawei smartphones with software AGS-L09C233B019,AGS-W09C233B019,KOB-L09C233B017,KOB-W09C233B012 have a type confusion vulnerability. (no CVSS, Huawei Technologies Co. Agassi-L09HN,Agassi-W09HN,Kobe-L09A…)
- [CVE-2017-8160](https://cve.now/CVE-2017-8160.md): The Madapt Driver of some Huawei smart phones with software Earlier than Vicky-AL00AC00B172 versions,Vicky-AL00CC768B122,Vicky-TL00AC01B167, (no CVSS, Huawei Technologies Co. Vicky-AL00A,Vicky-AL00C,Vicky-TL00A…)
- [CVE-2017-8161](https://cve.now/CVE-2017-8161.md): EVA-L09 smartphones with software Earlier than EVA-L09C25B150CUSTC25D003 versions,Earlier than EVA-L09C440B140 versions,Earlier than EVA-L09 (no CVSS, Huawei Technologies Co. EVA-L09)
- [CVE-2017-8162](https://cve.now/CVE-2017-8162.md): AR120-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR1200 with software V200R006C10, V200R006C13, V200R007C00, V200R00 (no CVSS, Huawei Technologies Co. AR120-S,AR1200,AR1200-S,AR150,AR150…)
- [CVE-2017-8163](https://cve.now/CVE-2017-8163.md): AR120-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR1200 with software V200R006C10, V200R006C13, V200R007C00, V200R00 (no CVSS, Huawei Technologies Co. AR120-S,AR1200,AR1200-S,AR150,AR150…)
- [CVE-2017-8166](https://cve.now/CVE-2017-8166.md): Huawei mobile phones Honor V9 with the software versions before Duke-AL20C00B195 have an App Lock bypass vulnerability. (no CVSS, Huawei Technologies Co. Honor)
- [CVE-2017-8167](https://cve.now/CVE-2017-8167.md): Huawei firewall products USG9500 V500R001C50 has a DoS vulnerability.A remote attacker who controls the peer device could exploit the vulner (no CVSS, Huawei Technologies Co. USG9500)
- [CVE-2017-8168](https://cve.now/CVE-2017-8168.md): FusionSphere OpenStack with software V100R006C00SPC102(NFV) and V100R006C10 have an information leak vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8169](https://cve.now/CVE-2017-8169.md): Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter val (no CVSS, Huawei Technologies Co. VIE-L09)
- [CVE-2017-8170](https://cve.now/CVE-2017-8170.md): Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter val (no CVSS, Huawei Technologies Co. VIE-L09)
- [CVE-2017-8171](https://cve.now/CVE-2017-8171.md): Huawei smart phones with software earlier than Vicky-AL00AC00B172D versions have a Factory Reset Protection (FRP) bypass security vulnerabil (no CVSS, Huawei Technologies Co. Vicky-AL00A)
- [CVE-2017-8172](https://cve.now/CVE-2017-8172.md): Isub service in P10 Plus and P10 smart phones with earlier than VKY-AL00C00B157 versions and earlier than VTR-AL00C00B157 versions has a den (no CVSS, Huawei Technologies Co. P10 Plus,P10)
- [CVE-2017-8173](https://cve.now/CVE-2017-8173.md): Maya-L02,VKY-L09,VTR-L29,Vicky-AL00A,Victoria-AL00A,Warsaw-AL00 smart phones with software of earlier than Maya-L02C636B126 versions,earlier (no CVSS, Huawei Technologies Co. Maya-L02,VKY-L09,VTR-L29,Vicky-AL00…)
- [CVE-2017-8174](https://cve.now/CVE-2017-8174.md): Huawei USG6300 V100R001C30SPC300 and USG6600 with software of V100R001C30SPC500,V100R001C30SPC600,V100R001C30SPC700,V100R001C30SPC800 have a (no CVSS, Huawei Technologies Co. Secospace USG6300,Secospace USG6600)
- [CVE-2017-8175](https://cve.now/CVE-2017-8175.md): The Bastet of some Huawei mobile phones with software earlier than Vicky-AL00AC00B167 versions, earlier than Victoria-AL00AC00B167 versions, (no CVSS, Huawei Technologies Co. Vicky-AL00A,Victoria-AL00A,Warsaw-A…)
- [CVE-2017-8177](https://cve.now/CVE-2017-8177.md): Huawei APP HiWallet earlier than 5.0.3.100 versions do not support signature verification for APK file. (no CVSS, Huawei Technologies Co. HiWallet)
- [CVE-2017-8178](https://cve.now/CVE-2017-8178.md): Huawei Email APP Vicky-AL00 smartphones with software of earlier than VKY-AL00C00B171 versions has a stored cross-site scripting vulnerabili (no CVSS, Huawei Technologies Co. Vicky-AL00)
- [CVE-2017-8179](https://cve.now/CVE-2017-8179.md): The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulne (no CVSS, Huawei Technologies Co. Nice-AL00)
- [CVE-2017-8180](https://cve.now/CVE-2017-8180.md): The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulne (no CVSS, Huawei Technologies Co. Nice-AL00)
- [CVE-2017-8181](https://cve.now/CVE-2017-8181.md): The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a arbitrary memory writ (no CVSS, Huawei Technologies Co. Nice-AL00)
- [CVE-2017-8182](https://cve.now/CVE-2017-8182.md): MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a ou (no CVSS, Huawei Technologies Co. Nice-AL00)
- [CVE-2017-8183](https://cve.now/CVE-2017-8183.md): MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a an (no CVSS, Huawei Technologies Co. Nice-AL00)
- [CVE-2017-8184](https://cve.now/CVE-2017-8184.md): MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a an (no CVSS, Huawei Technologies Co. Nice-AL00)
- [CVE-2017-8185](https://cve.now/CVE-2017-8185.md): ME906s-158 earlier than ME906S\_Installer\_13.1805.10.3 versions has a privilege elevation vulnerability. (no CVSS, Huawei Technologies Co. ME906s-158)
- [CVE-2017-8186](https://cve.now/CVE-2017-8186.md): The Bastet of some Huawei mobile phones with software of earlier than MHA-AL00BC00B231 versions has a DOS vulnerability due to the lack of p (no CVSS, Huawei Technologies Co. MHA-AL00A)
- [CVE-2017-8188](https://cve.now/CVE-2017-8188.md): FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8189](https://cve.now/CVE-2017-8189.md): FusionSphere OpenStack V100R006C00SPC102(NFV)has a path traversal vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8190](https://cve.now/CVE-2017-8190.md): FusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic signature vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8191](https://cve.now/CVE-2017-8191.md): FusionSphere OpenStack V100R006C00SPC102(NFV)has a week cryptographic algorithm vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8192](https://cve.now/CVE-2017-8192.md): FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8193](https://cve.now/CVE-2017-8193.md): The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8194](https://cve.now/CVE-2017-8194.md): The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8195](https://cve.now/CVE-2017-8195.md): The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-8196](https://cve.now/CVE-2017-8196.md): FusionSphere V100R006C00SPC102(NFV) has an incorrect authorization vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere)
- [CVE-2017-8197](https://cve.now/CVE-2017-8197.md): FusionSphere V100R006C00SPC102(NFV) has a command injection vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere)
- [CVE-2017-8198](https://cve.now/CVE-2017-8198.md): FusionSphere V100R006C00SPC102(NFV) has an SQL injection vulnerability. (no CVSS, Huawei Technologies Co. FusionSphere)
- [CVE-2017-8199](https://cve.now/CVE-2017-8199.md): MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol. (no CVSS, Huawei Technologies Co. MAX PRESENCE,TP3106,TP3206,)
- [CVE-2017-8200](https://cve.now/CVE-2017-8200.md): MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol. (no CVSS, Huawei Technologies Co. MAX PRESENCE,TP3106,TP3206)
- [CVE-2017-8201](https://cve.now/CVE-2017-8201.md): MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an a memory leak vulnerability in H323 protocol. (no CVSS, Huawei Technologies Co. MAX PRESENCE,TP3106,TP3206,)
- [CVE-2017-8202](https://cve.now/CVE-2017-8202.md): The CameraISP driver of some Huawei smart phones with software of versions earlier than Prague-AL00AC00B205,versions earlier than Prague-AL0 (no CVSS, Huawei Technologies Co. Prague-AL00A,Prague-AL00B,Prague-AL…)
- [CVE-2017-8203](https://cve.now/CVE-2017-8203.md): The Bastet Driver of Nova 2 Plus,Nova 2 Huawei smart phones with software of Versions earlier than BAC-AL00C00B173,Versions earlier than PIC (no CVSS, Huawei Technologies Co. Nova 2 Plus,Nova)
- [CVE-2017-8204](https://cve.now/CVE-2017-8204.md): The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has a buffer overflow vulnerabi (no CVSS, Huawei Technologies Co. Honor)
- [CVE-2017-8205](https://cve.now/CVE-2017-8205.md): The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has integer overflow vulnerabil (no CVSS, Huawei Technologies Co. Honor)
- [CVE-2017-8206](https://cve.now/CVE-2017-8206.md): HONOR 7 Lite mobile phones with software of versions earlier than NEM-L21C432B352 have an App Lock bypass vulnerability. (no CVSS, Huawei Technologies Co. HONOR 7 Lite)
- [CVE-2017-8207](https://cve.now/CVE-2017-8207.md): The driver of honor 5C, honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L2 (no CVSS, Huawei Technologies Co. honor 5C,honor)
- [CVE-2017-8208](https://cve.now/CVE-2017-8208.md): The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21 (no CVSS, Huawei Technologies Co. honor 5C,honor)
- [CVE-2017-8209](https://cve.now/CVE-2017-8209.md): The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21 (no CVSS, Huawei Technologies Co. honor 5C,honor)
- [CVE-2017-8210](https://cve.now/CVE-2017-8210.md): The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21 (no CVSS, Huawei Technologies Co. honor 5C,honor)
- [CVE-2017-8211](https://cve.now/CVE-2017-8211.md): The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21 (no CVSS, Huawei Technologies Co. honor 5C,honor)
- [CVE-2017-8212](https://cve.now/CVE-2017-8212.md): The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21 (no CVSS, Huawei Technologies Co. honor 5C,honor)
- [CVE-2017-8213](https://cve.now/CVE-2017-8213.md): Huawei SMC2.0 with software of V100R003C10, V100R005C00SPC100, V100R005C00SPC101B001T, V100R005C00SPC102, V100R005C00SPC103, V100R005C00SPC2 (no CVSS, Huawei Technologies Co. SMC2.0)
- [CVE-2017-8214](https://cve.now/CVE-2017-8214.md): Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00 (no CVSS, Huawei Technologies Co. Honor 8,Honor V8,Honor 9,Honor V9,N…)
- [CVE-2017-8215](https://cve.now/CVE-2017-8215.md): Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00 (no CVSS, Huawei Technologies Co. Honor 8,Honor V8,Honor 9,Honor V9,N…)
- [CVE-2017-8216](https://cve.now/CVE-2017-8216.md): Warsaw Huawei Smart phones with software of versions earlier than Warsaw-AL00C00B180, versions earlier than Warsaw-TL10C01B180 have a permis (no CVSS, Huawei Technologies Co. Warsaw)
- [CVE-2017-12190](https://cve.now/CVE-2017-12190.md): The bio\_map\_user\_iov and bio\_unmap\_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O (no CVSS, Linux kernel through v4.14-rc5)
- [CVE-2017-12193](https://cve.now/CVE-2017-12193.md): The assoc\_array\_insert\_into\_terminal\_node function in lib/assoc\_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which (no CVSS, Linux kernel since 3.13 up to)
- [CVE-2017-15099](https://cve.now/CVE-2017-15099.md): INSERT ... (no CVSS, Red Hat postgresql)
- [CVE-2017-15528](https://cve.now/CVE-2017-15528.md): Prior to v 7.6, the Install Norton Security (INS) product can be susceptible to a certificate spoofing vulnerability, which is a type of att (no CVSS)
- [CVE-2017-13071](https://cve.now/CVE-2017-13071.md): QNAP has already patched this vulnerability. (no CVSS, QNAP Video Station)
- [CVE-2017-15098](https://cve.now/CVE-2017-15098.md): Invalid json\_populate\_recordset or jsonb\_populate\_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before (no CVSS, Red Hat postgresql)
- [CVE-2017-7736](https://cve.now/CVE-2017-7736.md): A stored Cross-site Scripting (XSS) vulnerability in Fortinet FortiWeb webUI Certificate View page in 5.8.0, 5.7.1 and earlier, allows attac (no CVSS, Fortinet FortiWeb)
- [CVE-2017-6166](https://cve.now/CVE-2017-6166.md): In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Ma (no CVSS, F5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…)
- [CVE-2017-16926](https://cve.now/CVE-2017-16926.md): Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an (no CVSS)
- [CVE-2017-8860](https://cve.now/CVE-2017-8860.md): Information disclosure through directory listing on the Cohu 3960HD allows an attacker to view and download source code, log files, and othe (no CVSS)
- [CVE-2017-8861](https://cve.now/CVE-2017-8861.md): Missing authentication for the remote configuration port 1236/tcp on the Cohu 3960HD allows an attacker to change configuration parameters s (no CVSS)
- [CVE-2017-8862](https://cve.now/CVE-2017-8862.md): The webupgrade function on the Cohu 3960HD does not verify the firmware upgrade files or process, allowing an attacker to upload a specially (no CVSS)
- [CVE-2017-8863](https://cve.now/CVE-2017-8863.md): Information disclosure of .esp source code on the Cohu 3960 allows an attacker to view sensitive information such as application logic with (no CVSS)
- [CVE-2017-8864](https://cve.now/CVE-2017-8864.md): Client-side enforcement using JavaScript of server-side security options on the Cohu 3960HD allows an attacker to manipulate options sent to (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-11-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.