Lucene search

K

DP300,TE60,TP3106,ViewPoint 9030,eCNS210 TD,eSpace 7950,eSpace IAD,eSpace U1981 Security Vulnerabilities

zdi
zdi

Dell SonicWALL GMS Virtual Appliance Multiple Remote Code Execution Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Dell SonicWALL GMS Virtual Appliance. Authentication is required to exploit this vulnerability. The specific flaw exists within the GMS ViewPoint (GMSVP) web application. The issue lies in the...

9.9CVSS

3.6AI Score

0.022EPSS

2016-02-10 12:00 AM
11
openbugbounty
openbugbounty

clear.msu.edu XSS vulnerability

Vulnerable URL: http://clear.msu.edu/viewpoint/ourvideos.php?txtTitle=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

6.3AI Score

2016-02-04 11:21 AM
9
nvd
nvd

CVE-2015-8673

Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 do not require entry of the old password when changing the password for the Debug account, which allows physically proximate attackers to change the password by leveraging an unattended....

6.8CVSS

6.7AI Score

0.001EPSS

2016-01-12 08:59 PM
cve
cve

CVE-2015-8673

Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 do not require entry of the old password when changing the password for the Debug account, which allows physically proximate attackers to change the password by leveraging an unattended....

6.8CVSS

6.7AI Score

0.001EPSS

2016-01-12 08:59 PM
28
cve
cve

CVE-2015-8672

The presentation transmission permission management mechanism in Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 allows remote attackers to cause a denial of service (wired presentation outage) via unspecified vectors involving a...

5.3CVSS

5.2AI Score

0.002EPSS

2016-01-12 08:59 PM
27
nvd
nvd

CVE-2015-8672

The presentation transmission permission management mechanism in Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 allows remote attackers to cause a denial of service (wired presentation outage) via unspecified vectors involving a...

5.3CVSS

5.6AI Score

0.002EPSS

2016-01-12 08:59 PM
prion
prion

Design/Logic Flaw

Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 do not require entry of the old password when changing the password for the Debug account, which allows physically proximate attackers to change the password by leveraging an unattended....

6.8CVSS

7.2AI Score

0.001EPSS

2016-01-12 08:59 PM
5
prion
prion

Design/Logic Flaw

The presentation transmission permission management mechanism in Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 allows remote attackers to cause a denial of service (wired presentation outage) via unspecified vectors involving a...

5.3CVSS

7.1AI Score

0.002EPSS

2016-01-12 08:59 PM
3
cvelist
cvelist

CVE-2015-8672

The presentation transmission permission management mechanism in Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 allows remote attackers to cause a denial of service (wired presentation outage) via unspecified vectors involving a...

5.4AI Score

0.002EPSS

2016-01-12 08:00 PM
cvelist
cvelist

CVE-2015-8673

Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 do not require entry of the old password when changing the password for the Debug account, which allows physically proximate attackers to change the password by leveraging an unattended....

6.7AI Score

0.001EPSS

2016-01-12 08:00 PM
cve
cve

CVE-2015-8231

Huawei eSpace 7910 and 7950 IP phones with software before V200R002C00SPC800 allow remote attackers with established sessions to cause a denial of service (device restart) via unspecified...

7.5CVSS

7.4AI Score

0.002EPSS

2016-01-11 03:59 PM
82
nvd
nvd

CVE-2015-8231

Huawei eSpace 7910 and 7950 IP phones with software before V200R002C00SPC800 allow remote attackers with established sessions to cause a denial of service (device restart) via unspecified...

7.5CVSS

7.5AI Score

0.002EPSS

2016-01-11 03:59 PM
nvd
nvd

CVE-2015-8230

Memory leak in Huawei eSpace 8950 IP phones with software before V200R003C00SPC300 allows remote attackers to cause a denial of service (memory consumption and restart) via a large number of crafted ARP...

7.5CVSS

7.3AI Score

0.002EPSS

2016-01-11 03:59 PM
cve
cve

CVE-2015-8230

Memory leak in Huawei eSpace 8950 IP phones with software before V200R003C00SPC300 allows remote attackers to cause a denial of service (memory consumption and restart) via a large number of crafted ARP...

7.5CVSS

7.3AI Score

0.002EPSS

2016-01-11 03:59 PM
20
prion
prion

Code injection

Huawei eSpace 7910 and 7950 IP phones with software before V200R002C00SPC800 allow remote attackers with established sessions to cause a denial of service (device restart) via unspecified...

7.5CVSS

7.2AI Score

0.002EPSS

2016-01-11 03:59 PM
4
prion
prion

Memory corruption

Memory leak in Huawei eSpace 8950 IP phones with software before V200R003C00SPC300 allows remote attackers to cause a denial of service (memory consumption and restart) via a large number of crafted ARP...

7.5CVSS

7.1AI Score

0.002EPSS

2016-01-11 03:59 PM
1
cvelist
cvelist

CVE-2015-8231

Huawei eSpace 7910 and 7950 IP phones with software before V200R002C00SPC800 allow remote attackers with established sessions to cause a denial of service (device restart) via unspecified...

7.5AI Score

0.002EPSS

2016-01-11 03:00 PM
cvelist
cvelist

CVE-2015-8230

Memory leak in Huawei eSpace 8950 IP phones with software before V200R003C00SPC300 allows remote attackers to cause a denial of service (memory consumption and restart) via a large number of crafted ARP...

7.3AI Score

0.002EPSS

2016-01-11 03:00 PM
openbugbounty
openbugbounty

espacefoot.fr XSS vulnerability

Open Bug Bounty ID: OBB-117087 Description| Value ---|--- Affected Website:| espacefoot.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1...

6.3AI Score

2015-12-17 01:42 AM
12
nessus
nessus

WordPress < 3.7.9 / 3.8.x < 3.8.9 / 3.9.x < 3.9.7 / 4.1.x < 4.1.6 / 4.2.x < 4.2.3 Multiple Vulnerabilities

Versions of WordPress 3.7.x prior to 3.7.9 , 3.8.x prior to 3.8.9 , 3.9.x prior to 3.9.7 , 4.1.x prior to 4.1.6 , and 4.2.x prior to 4.2.3 are susceptible to the following vulnerabilities : A cross-site scripting (XSS) vulnerability exists due to a flaw in the Shortcode API in which shortcodes...

2.1AI Score

2015-12-17 12:00 AM
10
openbugbounty
openbugbounty

espace-etudiant.com vulnerability

Vulnerable URL: http://www.espace-etudiant.com/inc/link.asp?stat=lienlogo&ref;=284&lien;=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 10137897 Google Pagerank| 5 VIP website...

6.9AI Score

2015-11-28 02:00 AM
8
seebug
seebug

Huawei eSpace U2980/2990拒绝服务漏洞

No description provided by...

7.1AI Score

2015-11-26 12:00 AM
10
seebug
seebug

Huawei eSpace统一网关拒绝服务漏洞

No description provided by...

7.1AI Score

2015-11-25 12:00 AM
16
seebug
seebug

Huawei eSpace U2980和U2990拒绝服务漏洞

No description provided by...

7.1AI Score

2015-11-25 12:00 AM
11
seebug
seebug

Huawei eSpace 8950 IP Phone拒绝服务漏洞

No description provided by...

7.1AI Score

2015-11-25 12:00 AM
74
huawei
huawei

Security Advisory - Two Vulnerabilities in Huawei TE Series Product

Huawei TE series is a multimedia video conferencing endpoint that transfers audio, video, and desktop resources based on IP networks. It offers point-to-point and multiparty conferences for attendees at different places to enjoy face-to-face audio/video communication experience. A security...

6.8CVSS

5.6AI Score

0.002EPSS

2015-11-25 12:00 AM
16
seebug
seebug

多款Huawei eSpace交换机拒绝服务漏洞

No description provided by...

7.1AI Score

2015-11-25 12:00 AM
10
cve
cve

CVE-2015-8229

Huawei eSpace U2980 unified gateway with software before V100R001C10 and U2990 with software before V200R001C10 allow remote authenticated users to cause a denial of service via crafted signaling packets from a registered...

6.5AI Score

0.002EPSS

2015-11-24 08:59 PM
84
nvd
nvd

CVE-2015-8229

Huawei eSpace U2980 unified gateway with software before V100R001C10 and U2990 with software before V200R001C10 allow remote authenticated users to cause a denial of service via crafted signaling packets from a registered...

6.3AI Score

0.002EPSS

2015-11-24 08:59 PM
prion
prion

Code injection

Huawei eSpace U2980 unified gateway with software before V100R001C10 and U2990 with software before V200R001C10 allow remote authenticated users to cause a denial of service via crafted signaling packets from a registered...

6.8AI Score

0.002EPSS

2015-11-24 08:59 PM
2
cvelist
cvelist

CVE-2015-8229

Huawei eSpace U2980 unified gateway with software before V100R001C10 and U2990 with software before V200R001C10 allow remote authenticated users to cause a denial of service via crafted signaling packets from a registered...

6.3AI Score

0.002EPSS

2015-11-24 08:00 PM
nvd
nvd

CVE-2015-8083

An unspecified module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V200R003C00SPC300 does not properly initialize memory when processing timeout messages, which allows remote attackers to cause a denial of service (out-of-bounds memory access.....

6.7AI Score

0.003EPSS

2015-11-19 08:59 PM
1
cve
cve

CVE-2015-8083

An unspecified module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V200R003C00SPC300 does not properly initialize memory when processing timeout messages, which allows remote attackers to cause a denial of service (out-of-bounds memory access.....

6.9AI Score

0.003EPSS

2015-11-19 08:59 PM
17
nvd
nvd

CVE-2015-7845

The exception handling mechanism in the CLI Module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V100R001C20SPH605 allows remote attackers to cause a denial of service (CLI outage) via crafted SSH...

6.6AI Score

0.003EPSS

2015-11-19 08:59 PM
cve
cve

CVE-2015-7845

The exception handling mechanism in the CLI Module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V100R001C20SPH605 allows remote attackers to cause a denial of service (CLI outage) via crafted SSH...

6.8AI Score

0.003EPSS

2015-11-19 08:59 PM
15
prion
prion

Out-of-bounds

An unspecified module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V200R003C00SPC300 does not properly initialize memory when processing timeout messages, which allows remote attackers to cause a denial of service (out-of-bounds memory access.....

7.2AI Score

0.003EPSS

2015-11-19 08:59 PM
2
prion
prion

Code injection

The exception handling mechanism in the CLI Module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V100R001C20SPH605 allows remote attackers to cause a denial of service (CLI outage) via crafted SSH...

7.2AI Score

0.003EPSS

2015-11-19 08:59 PM
2
cvelist
cvelist

CVE-2015-8083

An unspecified module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V200R003C00SPC300 does not properly initialize memory when processing timeout messages, which allows remote attackers to cause a denial of service (out-of-bounds memory access.....

6.7AI Score

0.003EPSS

2015-11-19 08:00 PM
cvelist
cvelist

CVE-2015-7845

The exception handling mechanism in the CLI Module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V100R001C20SPH605 allows remote attackers to cause a denial of service (CLI outage) via crafted SSH...

6.6AI Score

0.003EPSS

2015-11-19 08:00 PM
openbugbounty
openbugbounty

rts.ch XSS vulnerability

Vulnerable URL: http://www.rts.ch/audio/audio/espace-2/programmes/entre-les-lignes/7225854-florian-eglin-holocauste-18-11-2015.html?x"&gt;x=1 Details: Description| Value ---|--- Patched:| Yes, at 12.04.2016 Latest check for patch:| 12.04.2016 02:05 GMT Vulnerability type:| XSS Vulnerability status:...

6.3AI Score

2015-11-19 06:22 PM
10
openbugbounty
openbugbounty

willhaben.at XSS vulnerability

Vulnerable URL: https://www.willhaben.at/iad/kaufen-und-verkaufen/marktplatz?keyword=&ATTRIBUTE;_TREE=&attribute;_tree_level_0=&attribute;_tree_level_1=&sort;="&gt;'&gt;);--&gt; Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerabili...

6.3AI Score

2015-11-16 05:57 PM
17
huawei
huawei

Security Advisory - DoS Vulnerability in Huawei U2990 and U2980

Huawei U2990 and U2980 have a DoS vulnerability caused by no error correction mechanism when handling specific signaling packets. An attacker can send malformed packets to cause a denial of service condition in some services of the U2990 and U2980. (Vulnerability ID: HWPSIRT-2015-09025) This...

0.6AI Score

0.002EPSS

2015-11-11 12:00 AM
32
huawei
huawei

Security Advisory - DoS Vulnerability in Huawei eSpace 8950 IP Phone

When Huawei eSpace 8950 IP phone receive some type of malicious ARP packets, memory leak may occur on the network interface card. When the memory is overloaded by such packets, the IP phone restarts (Vulnerability ID: HWPSIRT-2015-08041). This vulnerability has been assigned Common Vulnerabilities....

7.5CVSS

7.2AI Score

0.002EPSS

2015-11-11 12:00 AM
19
huawei
huawei

Security Advisory - DoS Vulnerability in Huawei U2990 and U2980

Huawei U2990 and U2980 have a DoS vulnerability caused by no error correction mechanism when handling specific signaling packets. An attacker can send malformed packets to cause a denial of service condition in some services of the U2990 and U2980. (Vulnerability ID: HWPSIRT-2015-09025) This...

7.4AI Score

0.002EPSS

2015-11-11 12:00 AM
24
openbugbounty
openbugbounty

espace-recettes.fr XSS vulnerability

Vulnerable URL: http://www.espace-recettes.fr/user/password/"&gt;'&gt;--&gt;); Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:39 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 36616 Google Pagerank| 2 VIP w...

6.3AI Score

2015-11-10 05:39 PM
14
openbugbounty
openbugbounty

eternam.fr XSS vulnerability

Vulnerable URL: http://www.eternam.fr/index.phtml?srub=24&lng;=FR&actionespaceclient;=1&ClientActionLogin;=chargement&BackToUrl;=votre-espace-membre-_l_FR_r_25.html&CLIKEO;_EMAIL=%22%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C%2Fscript%3E&CLIKEO;_MDP=%22%3E%3Cscript%3Ealert&TentaviveLoginClient;= .....

6.3AI Score

2015-11-05 04:10 PM
11
ciscothreats
ciscothreats

Threat Outbreak Alert RuleID19129: Email Messages Distributing Malicious Software on November 3, 2015

Medium Alert ID: 41908 First Published: 2015 November 3 20:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat (RuleID19129) may contain the following...

0.4AI Score

2015-11-03 08:21 PM
9
openbugbounty
openbugbounty

net-iris.fr XSS vulnerability

Vulnerable URL: https://www.net-iris.fr/espace-client/identification.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 30533 Google Pagerank| 6 VIP website status:| Yes Check...

6.3AI Score

2015-10-29 11:34 PM
10
openbugbounty
openbugbounty

espace-aubade.fr XSS vulnerability

Vulnerable URL: https://www.espace-aubade.fr/recherche?recherche=%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 19:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

6.3AI Score

2015-10-25 11:59 PM
12
openbugbounty
openbugbounty

espace-recettes.fr XSS vulnerability

Vulnerable URL: http://www.espace-recettes.fr/search/tmrc_solr_recipe/%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E?filters=type%3Arecipes Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:18 GMT Vulnerability type:| XSS Vulnerability status:|...

6.3AI Score

2015-10-22 10:18 AM
5
Total number of security vulnerabilities1413