Lucene search

K

Dp300,nip6600,secospace Usg6500,te60,tp3106,vp9660,viewpoint 8660,viewpoint 9030,ecns210 Td,espace U1981 Security Vulnerabilities

cvelist
cvelist

CVE-2021-22310

There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions...

4.8AI Score

0.0004EPSS

2021-03-22 06:38 PM
cve
cve

CVE-2020-9213

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module,...

7.5CVSS

7.4AI Score

0.001EPSS

2021-03-22 06:15 PM
19
2
nvd
nvd

CVE-2020-9213

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module,...

7.5CVSS

0.001EPSS

2021-03-22 06:15 PM
prion
prion

Denial of service

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module,...

7.5CVSS

7.4AI Score

0.001EPSS

2021-03-22 06:15 PM
4
cvelist
cvelist

CVE-2020-9213

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module,...

7.5AI Score

0.001EPSS

2021-03-22 05:39 PM
mmpc
mmpc

Finalists announced in second annual Microsoft Security 20/20 awards

2020 was a transformational year. Seemingly overnight, COVID-19 reshaped our perspective on work, home life, and security. Setting up home offices and powering through online presentations in our pajama bottoms (with cameos by pets and children), our industry rose to the challenge. All that...

0.7AI Score

2021-03-11 10:00 PM
47
mssecure
mssecure

Finalists announced in second annual Microsoft Security 20/20 awards

2020 was a transformational year. Seemingly overnight, COVID-19 reshaped our perspective on work, home life, and security. Setting up home offices and powering through online presentations in our pajama bottoms (with cameos by pets and children), our industry rose to the challenge. All that...

0.7AI Score

2021-03-11 10:00 PM
37
huawei
huawei

Security Advisory - Use After Free Vulnerability in Huawei Product

There is a use-after-free vulnerability in Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. (Vulnerability ID:...

5.3CVSS

5.4AI Score

0.001EPSS

2021-02-10 12:00 AM
17
huawei
huawei

Security Advisory - Denial of Service Vulnerability in Huawei Product

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to affected module. This can lead to denial of service. (Vulnerability ID: HWPSIRT-2020-65315) This...

7.5CVSS

6.9AI Score

0.001EPSS

2021-02-10 12:00 AM
14
huawei
huawei

Security Advisory - Memory Leak Vulnerability in Some Huawei Products

There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause some service abnormal. (Vulnerability...

6.5CVSS

6.1AI Score

0.001EPSS

2021-02-10 12:00 AM
38
huawei
huawei

Security Advisory - Denial of Service Vulnerability in Some Products

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services abnormal. (Vulnerability ID: HWPSIRT-2020-32540) This vulnerability has...

7.5CVSS

6.9AI Score

0.001EPSS

2021-02-10 12:00 AM
33
cve
cve

CVE-2021-22267

Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows a remote replay attack for T0320L01^ABP through T0320L01^ABZ, T0952L01^AAH through T0952L01^AAR, T0986L01 through T0986L01^AAF, T0665L01^AAP, and T0662L01^AAP (L) and T0320H01^ABO through T0320H01^ABY, T0952H01^AAG through....

5.9CVSS

5.8AI Score

0.002EPSS

2021-02-09 07:15 PM
16
nvd
nvd

CVE-2021-3191

Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows Remote Unauthorized Access for T0320L01^ABY and T0320L01^ACD, T0952L01^AAR through T0952L01^AAX, and T0986L01^AAD through T0986L01^AAJ (L) and T0320H01^ABW through T0320H01^ACC, T0952H01^AAQ through T0952H01^AAW, and...

8.8CVSS

0.004EPSS

2021-02-09 07:15 PM
nvd
nvd

CVE-2021-22267

Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows a remote replay attack for T0320L01^ABP through T0320L01^ABZ, T0952L01^AAH through T0952L01^AAR, T0986L01 through T0986L01^AAF, T0665L01^AAP, and T0662L01^AAP (L) and T0320H01^ABO through T0320H01^ABY, T0952H01^AAG through....

5.9CVSS

0.002EPSS

2021-02-09 07:15 PM
cve
cve

CVE-2021-3191

Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows Remote Unauthorized Access for T0320L01^ABY and T0320L01^ACD, T0952L01^AAR through T0952L01^AAX, and T0986L01^AAD through T0986L01^AAJ (L) and T0320H01^ABW through T0320H01^ACC, T0952H01^AAQ through T0952H01^AAW, and...

8.8CVSS

8.7AI Score

0.004EPSS

2021-02-09 07:15 PM
19
2
prion
prion

Design/Logic Flaw

Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows Remote Unauthorized Access for T0320L01^ABY and T0320L01^ACD, T0952L01^AAR through T0952L01^AAX, and T0986L01^AAD through T0986L01^AAJ (L) and T0320H01^ABW through T0320H01^ACC, T0952H01^AAQ through T0952H01^AAW, and...

8.8CVSS

8.8AI Score

0.004EPSS

2021-02-09 07:15 PM
2
prion
prion

Design/Logic Flaw

Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows a remote replay attack for T0320L01^ABP through T0320L01^ABZ, T0952L01^AAH through T0952L01^AAR, T0986L01 through T0986L01^AAF, T0665L01^AAP, and T0662L01^AAP (L) and T0320H01^ABO through T0320H01^ABY, T0952H01^AAG through....

5.9CVSS

5.9AI Score

0.002EPSS

2021-02-09 07:15 PM
1
cvelist
cvelist

CVE-2021-22267

Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows a remote replay attack for T0320L01^ABP through T0320L01^ABZ, T0952L01^AAH through T0952L01^AAR, T0986L01 through T0986L01^AAF, T0665L01^AAP, and T0662L01^AAP (L) and T0320H01^ABO through T0320H01^ABY, T0952H01^AAG through....

6.1AI Score

0.002EPSS

2021-02-09 06:23 PM
cvelist
cvelist

CVE-2021-3191

Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows Remote Unauthorized Access for T0320L01^ABY and T0320L01^ACD, T0952L01^AAR through T0952L01^AAX, and T0986L01^AAD through T0986L01^AAJ (L) and T0320H01^ABW through T0320H01^ACC, T0952H01^AAQ through T0952H01^AAW, and...

9AI Score

0.004EPSS

2021-02-09 06:17 PM
akamaiblog
akamaiblog

Inspiring the Next Generation with DigiGirlz

(photo courtesy of Microsoft) DigiGirlz is an initiative organized by Microsoft to engage girls in technological education and careers. The initiative, which launched in 2000, consists of two main programs: DigiGirlz Day and High Tech Camp. This program has been a cornerstone of Microsoft's...

-0.3AI Score

2021-02-08 02:00 PM
38
nessus
nessus

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2021-9030)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9030 advisory. An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c...

8.8CVSS

8.3AI Score

0.004EPSS

2021-02-03 12:00 AM
34
huawei
huawei

Security Advisory - Information Leakage Vulnerability in Some Huawei Products

There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause the information leak. (Vulnerability ID:...

4.4CVSS

4.8AI Score

0.0004EPSS

2021-02-03 12:00 AM
23
oraclelinux
oraclelinux

Unbreakable Enterprise kernel security update

[4.1.12-124.47.3] - sysctl: handle overflow in proc_get_long (Christian Brauner) [Orabug: 31588015] [4.1.12-124.47.2] - mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Qing Xu) [Orabug: 31350932] {CVE-2020-12653} - lockd: don't use interval-based rebinding over TCP...

8.1CVSS

0.5AI Score

0.004EPSS

2021-02-03 12:00 AM
35
githubexploit
githubexploit

Exploit for Vulnerability in Facade Ignition

CVE-2021-3129 Laravel debug rce 食用方法 执行`docker-compse up...

9.8CVSS

9.3AI Score

0.975EPSS

2021-01-22 05:12 AM
131
openvas

6.5CVSS

7AI Score

0.001EPSS

2021-01-19 12:00 AM
4
openvas

6.7CVSS

7.7AI Score

0.0004EPSS

2021-01-19 12:00 AM
4
openvas
openvas

Huawei Data Communication: Out of Bounds Read Vulnerability in Several Products

There is an out-of-bounds read vulnerability in several...

6.5CVSS

7AI Score

0.001EPSS

2021-01-19 12:00 AM
4
openvas

7.5CVSS

7AI Score

0.001EPSS

2021-01-19 12:00 AM
4
cve
cve

CVE-2020-1866

There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could cause certain service abnormal. Affected product versions include:NIP6800 versions...

6.5CVSS

6.5AI Score

0.001EPSS

2021-01-13 11:15 PM
23
nvd
nvd

CVE-2020-1866

There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could cause certain service abnormal. Affected product versions include:NIP6800 versions...

6.5CVSS

6.5AI Score

0.001EPSS

2021-01-13 11:15 PM
prion
prion

Cross site scripting

There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could cause certain service abnormal. Affected product versions include:NIP6800 versions...

6.5CVSS

6.4AI Score

0.001EPSS

2021-01-13 11:15 PM
5
cvelist
cvelist

CVE-2020-1866

There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could cause certain service abnormal. Affected product versions include:NIP6800 versions...

6.5AI Score

0.001EPSS

2021-01-13 10:22 PM
1
threatpost
threatpost

FBI Warn Hackers are Using Hijacked Home Security Devices for 'Swatting'

Stolen email passwords are being used to hijack smart home security systems to “swat” unsuspecting users, the Federal Bureau of Investigation warned this week. The announcement comes after concerned device manufacturers alerted law enforcement about the issue. Swatting is a dangerous prank where...

-0.1AI Score

2020-12-30 09:42 PM
47
nvd
nvd

CVE-2020-9201

There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service...

6.5CVSS

6.5AI Score

0.001EPSS

2020-12-24 04:15 PM
cve
cve

CVE-2020-9201

There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service...

6.5CVSS

6.5AI Score

0.001EPSS

2020-12-24 04:15 PM
42
2
prion
prion

Cross site scripting

There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service...

6.5CVSS

6.4AI Score

0.001EPSS

2020-12-24 04:15 PM
2
cvelist
cvelist

CVE-2020-9201

There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service...

6.5AI Score

0.001EPSS

2020-12-24 03:44 PM
nvd
nvd

CVE-2020-35338

The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout Server 20.2.8 and earlier has a default account with a password of...

9.8CVSS

9.6AI Score

0.249EPSS

2020-12-14 06:15 PM
cve
cve

CVE-2020-35338

The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout Server 20.2.8 and earlier has a default account with a password of...

9.8CVSS

9.5AI Score

0.249EPSS

2020-12-14 06:15 PM
25
prion
prion

Default credentials

The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout Server 20.2.8 and earlier has a default account with a password of...

9.8CVSS

9.5AI Score

0.249EPSS

2020-12-14 06:15 PM
1
cvelist
cvelist

CVE-2020-35338

The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout Server 20.2.8 and earlier has a default account with a password of...

9.6AI Score

0.249EPSS

2020-12-14 05:02 PM
1
githubexploit
githubexploit

Exploit for Cross-site Scripting in Ant.Design Ant Design Pro

English | 简体中文 |...

6.1CVSS

-0.4AI Score

0.001EPSS

2020-12-01 09:18 AM
80
nvd
nvd

CVE-2020-9127

Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may inject some malicious codes in some files of the affected products. Successful exploit may cause command injection.Affected product versions include:NIP6300...

6.7CVSS

6.7AI Score

0.0004EPSS

2020-11-13 03:15 PM
cve
cve

CVE-2020-9127

Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may inject some malicious codes in some files of the affected products. Successful exploit may cause command injection.Affected product versions include:NIP6300...

6.7CVSS

6.6AI Score

0.0004EPSS

2020-11-13 03:15 PM
25
cve
cve

CVE-2020-1847

There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthorized attackers can construct attack scenarios, which leads to denial of service.Affected product versions include:NIP6300 versions...

7.5CVSS

7.3AI Score

0.001EPSS

2020-11-13 03:15 PM
29
nvd
nvd

CVE-2020-1847

There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthorized attackers can construct attack scenarios, which leads to denial of service.Affected product versions include:NIP6300 versions...

7.5CVSS

7.3AI Score

0.001EPSS

2020-11-13 03:15 PM
prion
prion

Command injection

Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may inject some malicious codes in some files of the affected products. Successful exploit may cause command injection.Affected product versions include:NIP6300...

6.7CVSS

6.7AI Score

0.0004EPSS

2020-11-13 03:15 PM
1
prion
prion

Denial of service

There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthorized attackers can construct attack scenarios, which leads to denial of service.Affected product versions include:NIP6300 versions...

7.5CVSS

7.2AI Score

0.001EPSS

2020-11-13 03:15 PM
3
cvelist
cvelist

CVE-2020-1847

There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthorized attackers can construct attack scenarios, which leads to denial of service.Affected product versions include:NIP6300 versions...

7.4AI Score

0.001EPSS

2020-11-13 02:50 PM
cvelist
cvelist

CVE-2020-9127

Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may inject some malicious codes in some files of the affected products. Successful exploit may cause command injection.Affected product versions include:NIP6300...

6.7AI Score

0.0004EPSS

2020-11-13 02:46 PM
Total number of security vulnerabilities1813