CVE-2023-39397

Input parameter verification vulnerability in the communication system. Successful exploitation of this vulnerability may affect availability...

CVE-2023-39397

CVE-2023-39397 describes an input parameter verification vulnerability in the Huawei HarmonyOS communication system that can lead to a denial of service, potentially impacting availability. The NVD entry lists a CVSS v3.1 base score of 7.5 (HIGH) with network attack vector, low attack complexity,...

CVE-2023-39395

Mismatch vulnerability in the serialization process in the communication system. Successful exploitation of this vulnerability may affect availability...

CVE-2023-39395

Mismatch vulnerability in the serialization process in the communication system. Successful exploitation of this vulnerability may affect availability...

PT-2023-26923 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a mismatch vulnerability in the serialization process within the communication system. Successful exploitation of this...

PT-2023-26925 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Communication system affected versions not specified Description: The issue is related to an input parameter verification vulnerability in the communication system. Successful exploitation of this vulnerability may affect availability...

Huawei HarmonyOS Wearables code-related vulnerabilities

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A denial of service vulnerability exists in Huawei HarmonyOS, which stems from insufficient validation of input parameters by the communication system. An...

CVE-2021-30173

CVE-2021-30173 involves a Local File Inclusion vulnerability in the omni-directional communication system (Jun-He/Junghee/Junghee-type Total Communication System). The issue arises when an authenticated attacker injects an absolute path into the Url parameter, enabling access to arbitrary files o...

CVE-2021-30173: Absolute Path Traversal

Local File Inclusion vulnerability of the omni-directional communication system allows remote authenticated attacker inject absolute path into Url parameter and access arbitrary file...

Junhe Technology’s comprehensive communication system has security vulnerabilities

Junghee Technology Omni-Communication System is an application software of China Junghee Technology Co. The system is used for communication gateway. A security vulnerability exists in Junghua Technology Total Communication System, which can be exploited by attackers to inject absolute paths into...

Junhe Technology’s comprehensive communication system cross-site scripting vulnerability

Junghee Technology Omni-Communication System is an application software of China Junghee Technology Co. It is used for communication gateway system. A cross-site scripting vulnerability exists in the Junghua Technology Omni-Communication System, which originates from the special characters on the...

PT-2021-18648

Name of the Vulnerable Software and Affected Versions omni-directional communication system affected versions not specified Description The issue allows a remote authenticated attacker to inject an absolute path into the Url parameter, enabling access to arbitrary files. This is related to a Loca...

Cybersecurity Risk: What It Is and How Can It Be Reduced?

By Waqas By definition, cybersecurity risk is your potential exposure to harm when your online information or communication system is left vulnerable. This is a post from HackRead.com Read the original post: Cybersecurity Risk: What It Is and How Can It Be Reduced?...

RainbowFish PacsOne Server Cross-Site Scripting Vulnerability

RainbowFish PacsOne Server is an image archiving and communication system server from RainbowFish Rainbowfish, which is used to save incoming images. A cross-site scripting vulnerability exists in versions of RainbowFish PacsOne Server prior to 7.1.1, which stems from the lack of proper validatio...

RainbowFish PacsOne Server Access Control Error Vulnerability

RainbowFish PacsOne Server is an image archiving and communication system server from RainbowFish Rainbowfish, which is used to save incoming images. The system is used to save incoming images, and an access control error vulnerability exists in RainbowFish PacsOne Server, which could be exploite...

RainbowFish PacsOne Server SQL Injection Vulnerability

RainbowFish PacsOne Server is an image archiving and communication system server from RainbowFish. The system is used to save incoming images, and a SQL injection vulnerability exists in RainbowFish PacsOne Server that could be exploited by attackers to execute illegal SQL commands...

File Upload Vulnerability in Microconsultation Communication System of Beijing Zhongwang Network Technology Co.

Founded in 2010 and headquartered in Beijing Zhongguancun Science and Technology Park, Beijing Zhongwang Network Technology Co., Ltd. is a high-tech enterprise dedicated to the research, development and innovation of multimedia communication technology. A file upload vulnerability exists in Beiji...

Insecure SCADA Systems Blamed in Rash of Pipeline Data Network Attacks

After a cyberattack shut down numerous pipeline communication networks this week, experts are stressing the importance of securing third-party systems in supervisory control and data acquisition SCADA environments. Over the past two days, various major U.S. pipelines across the country reported...

CVE-2018-5071

Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaScript code using the device's TELNET shell built-in commands, as demonstrated by the "set ship name" command. This is similar to a Cross...

Debian Security Advisory DSA 3741-1 (tor - security update)

It was discovered that Tor, a connection-based low-latency anonymous communication system, may read one byte past a buffer when parsing hidden service descriptors. This issue may enable a hostile hidden service to crash Tor clients depending on hardening options and malloc implementation. OpenVAS...