46 matches found
Huawei CloudLink Phone 7900 SIP TLS Module TLS Certificate Validation Vulnerability
Huawei CloudLink Phone 7900 is an IP phone from Huawei, China.SIP TLS is one of the transport layer security modules. A security vulnerability exists in the SIP TLS module in the Huawei CloudLink Phone 7900 V600R019C10 version, which stems from the program not adequately validating the parameters...
Security Advisory - TLS Certificate Verification Vulnerability in Huawei 7900 IP Phones
There is a TLS certificate verification vulnerability in the SIP TLS module of Huawei 7900 IP Phones. Due to insufficient verification of specific parameters of the TLS server certificate, attackers can perform man-in-the-middle attacks, leading to the affected phones registered abnormally,...
CVE-2019-10966
In GE Aestiva and Aespire versions 7100 and 7900, a vulnerability exists where serial devices are connected via an added unsecured terminal server to a TCP/IP network configuration, which could allow an attacker to remotely modify device configuration and silence alarms...
CVE-2019-10966
CVE-2019-10966 affects GE Aestiva and Aespire anesthesia devices (7100/7900) where serial ports extended to TCP/IP via an unsecured terminal server. Root cause is improper authentication, enabling remote modification of device configuration and silencing of alarms without user interaction. The IC...
The vulnerability of the web interface of Cisco Unified IP Phone 7900 Series software lies in the lack of measures taken to protect the website structure. This allows attackers to inject arbitrary code into the uploaded web pages or disclose protected information.
The vulnerability of the web interface of Cisco Unified IP Phone 7900 Series software lies in the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the loaded web page or disclose protected...
CVE-2018-7900
There is an information leak vulnerability in some Huawei HG products. An attacker may obtain information about the HG device by exploiting this vulnerability...
CVE-2018-7900
CVE-2018-7900 concerns information disclosure in Huawei HG family gateway/router devices. The vulnerability is described as an information leak in the device’s web interface, enabling attackers to glean device information and potentially identify default credentials by inspecting HTML/source vari...
Huawei Router Flaw Leaks Default Credential Status
A vulnerability in some Huawei routers used for carrier ISP services allows cybercriminals to identify whether the devices have default credentials or not – without ever connecting to them. CVE-2018-7900 exists in the router panel and allows credentials information to leak – so attackers can simp...
Cisco Unified IP Phone 7900 Series WEB Interface Cross-Site Scripting Vulnerability
Cisco Unified IP Phone 7900 Series is a 7900 series IP phone product from Cisco USA. A cross-site scripting vulnerability exists in the web-based administration interface of the Cisco Unified IP Phone 7900 Series, which arises from the program's failure to adequately validate user-submitted input...
CVE-2018-15434
A vulnerability in the web-based management interface of Cisco Unified IP Phone 7900 Series could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...
CVE-2018-15434
The CVE-2018-15434 entry refers to Cisco Unified IP Phone 7900 Series with a vulnerability in the web-based management interface. Affected component: the web-based management interface; root cause: insufficient validation of user-supplied input leading to cross-site scripting (XSS). Impact stated...
CVE-2016-7900
CVE-2016-7900 entry is rejected/not used and does not represent an active vulnerability.
openSUSE: Security Advisory for chromium (openSUSE-SU-2014:1626-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Google Chrome Multiple Vulnerabilities - 01 (Nov 2014) - Windows
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
CVE-2014-7900
Use-after-free vulnerability in the CPDFParser::IsLinearizedFile function in fpdfapi/fpdfparser/fpdfparserparser.cpp in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...
CVE-2014-7900
CVE-2014-7900 affects PDFium’s CPDF_Parser::IsLinearizedFile used by Google Chrome before 39.0.2171.65. Root cause is a use-after-free in PDF parsing of linearized PDFs, enabling remote DoS or possible unspecified impact via a crafted document. Connected documents confirm Chrome/OpenChromium CVE-...
Cisco Unified IP Phones Multiple Vulnerabilities (cisco-sa-20110601-phone)
According to its self-reported version, the version of the Cisco Unified IP Phone software running on the remote device has the following vulnerabilities : - Cisco Unified IP Phones 7900 series are prone to privilege escalation vulnerabilities. An authenticated attacker could exploit this issue t...
