33563 matches found
CVE-2014-9136
CVE-2014-9136 concerns a CSRF vulnerability in Huawei FusionManager web interface. Affected products are FusionManager versions V100R002C03 and V100R003C00 . The issue allows an unauthenticated, remote attacker to perform a CSRF attack against a user of the web interface. The linked Huawei securi...
CVE-2014-9696
The Hyper Module Management HMM software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions allows the operator to modify the user configuration of iMana through privilege escalation...
CVE-2014-8572
Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software V100R006C05 and earlier versions; S5300, S5700, S6300, S6700 with software V100R006, V200R001, V200R002, V200R003,...
CVE-2014-9137
CVE-2014-9137 is a CSRF vulnerability in Huawei USG firewall web interfaces affecting USG9500 (V200R001C01SPC800 and earlier; V300R001C00), USG2100 (V300R001C00SPC900 and earlier), USG2200 (V300R001C00SPC900), and USG5100 (V300R001C00SPC900). An unauthenticated remote attacker could conduct a CSR...
CVE-2014-3224
CVE-2014-3224 affects Huawei Quidway switches: S9700, S9300, S7700, S6700, S6300, S5700, S5300 with specific V200R003C00SPC3xx/500 variants. The vulnerability arises from improper input validation, allowing remote attackers to craft malformed packets that trigger a denial-of-service, including ex...
CVE-2014-9691
Huawei Tecal vulnerabilities CVE-2014-9691 affect multiple Tecal server models (e.g., RH1288 V2, RH2265 V2, RH2288 V2, RH5885 etc.) and variants listed in the Huawei advisory. The issue is an information disclosure via the web UI Online Users page, allowing logged-in users’ session IDs to be view...
CVE-2014-4706
Huawei Campus S3700HI with software V200R001C00SPC300; Campus S5700 with software V200R002C00SPC100; Campus S7700 with software V200R003C00SPC300,V200R003C00SPC500; LSW S9700 with software V200R001C00SPC300,V200R003C00SPC300,V200R003C00SPC500; S2350 with software V200R003C00SPC300; S2750 with...
CVE-2014-9695
The CVE-2014-9695 affects Huawei Tecal E9000 Chassis Hyper Module Management (HMM) software in V100R001C00SPC160 and earlier. Root cause: a design/permission flaw that lets a non-super-domain user accessing HMM via SNMPv3 perform operations as a super-domain user. Impact: privilege escalation wit...
CVE-2014-8572
CVE-2014-8572 affects Huawei VRP-based devices (e.g., AC6605, ACU, S2300/S3300/S2700/S3700, S5300/S5700/S6300/S6700, S7700/S9300/S9300E/S9700) where the SSH server processes a message without valid checksums, allowing remote attackers to send a crafted SSH packet to cause a denial of service. Con...
CVE-2014-3221
CVE-2014-3221 affects Huawei Eudemon8000E firewall (software V200R001C01SPC800 and earlier). The issue arises when an attacker sends a large volume of TCP packets with special structure, causing the login process (via Telnet or SSH) to become slow or fail, effectively a denial of service. Connect...
CVE-2014-4707
CVE-2014-4707 affects Huawei Campus S7700/S9300/S9700 switches (firmware versions listed in the initial entry). The vulnerability allows unauthorized users to upgrade the bootrom/bootload software and bypass Menu protection, enabling a Menu compromise attack or bypass of Menu/upgrade protection. ...
CVE-2014-9696
The CVE-2014-9696 entry concerns Huawei Tecal E9000 Chassis HMM (Hyper Module Management) software. A privilege-escalation flaw in HMM (via IPMICommand) allows an operator to modify the iMana user configuration. Affected: HMM on Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier. Root cause...
CVE-2014-9693
The CVE-2014-9693 entry concerns Huawei Tecal server products (e.g., RH1288 V2, RH2265 V2, RH2285 V2, RH5885, XH31x, DH3xx, CHx, etc.) where DNS processing can mishandle data length, enabling an attacker to execute arbitrary code or cause a system restart via crafted DNS packets. Root cause: insu...
CVE-2014-4706
CVE-2014-4706 affects Huawei Campus switches (multiple models listed with various V200R00xC00SPCy software) where processing certain malformed packets triggers a heap overflow leading to denial of service through repeated device restarts. Connected sources corroborate a heap overflow/vector causi...
CVE-2014-3222
Huawei eSpace Meeting contains a local privilege escalation flaw in V100R001C03SPC201 and earlier versions where attackers with ordinary user permissions can elevate privileges to access and set specific key resources. Multiple sources (NVD/CNVD/China CNVD and Huawei advisory HW-329170) describe ...
CVE-2014-9692
CVE-2014-9692 affects Huawei Tecal servers (multiple models listed in the Intel/ROM update lines) with a vulnerability in RMCP+ session ID handling. The RMCP+ session IDs can be inferred, enabling an attacker to impersonate legitimate users and gain access with forged identities. Public reference...
[SECURITY] [DLA 881-1] ejabberd security update
Package : ejabberd Version : 2.1.10-4+deb7u2 CVE ID : CVE-2014-8760 Debian Bug : 767521 767535 It was found that ejabberd does not enforce the starttlsrequired setting when compression is used, which causes clients to establish connections without encryption. For Debian 7 "Wheezy", this problem h...
UBUNTU-CVE-2014-5008
Snoopy allows remote attackers to execute arbitrary commands...
