Huawei Data Communication: Input Validation Vulnerability in H323 Protocol of Huawei products (huawei-sa-20171206-01-h323)

There is an insufficient validation vulnerability in some Huawei products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

Huawei Data Communication: Out-of-Bounds Memory Access Vulnerability on Some Huawei FireWall Products (huawei-sa-20171213-01-firewall)

There is an Out-of-Bounds memory access vulnerability in Huawei FireWall products due to insufficient verification. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

The vulnerability of the communication module processors in the SIMATIC S7-300 CPU family and the SINUMERIK 840D controller allows a intruder to trigger a service failure.

The vulnerability of the communication module processors in the SIMATIC S7-300 CPU family and the SINUMERIK 840D controller is related to uncontrolled resource consumption exhaustion. Exploiting this vulnerability can allow an attacker to trigger a service failure through specially created packet...

OpenEMR 5.0.1 - Remote Code Execution (1)

Title: OpenEMR 5.0.1 - Remote Code Execution 1 Exploit Author: Musyoka Ian Date: 2020-05-25 Title: OpenEMR 5.0.1 - Remote Code Execution Vendor Homepage: https://www.open-emr.org/ Software Link: https://github.com/openemr/openemr/archive/v5013.tar.gz Dockerfile:...

Cisco Firepower 1000 Series SSL/TLS Denial of Service Vulnerability (cisco-sa-ftd-tls-dos-4v5nmWtZ)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a denial of service DoS vulnerability in its SSL/TLS handler component due to a communication error between internal functions. An unauthenticated, remote attacker can exploit this issue, by sending a...

SQL Injection Vulnerability in the Website Building System of Tianze Culture Communication (Henan) Co.

Ltd. is a network service company that provides Internet network information services, engages in Internet value-added services, and provides enterprises with customized network solutions, website construction, network promotion and other services. There is a SQL injection vulnerability in the...

SQL Injection Vulnerability in the Website Building System of Tianze Culture Communication (Henan) Co.

Ltd. is a network service company that provides Internet network information services, engages in Internet value-added services, and provides enterprises with customized network solutions, website construction, network promotion and other services. There is a SQL injection vulnerability in the...

SQL Injection Vulnerability in the Website Building System of Tianze Cultural Communication (Henan) Co.

Ltd. is a network service company that provides Internet network information services, engages in Internet value-added services, and provides enterprises with customized network solutions, website construction, network promotion and other services. There is a SQL injection vulnerability in the...

Server VDA with vGPU hangs when the default hybrid mode graphics (GDI + Direct3D)

On a VDA running on Windows Server 2016, the OS could get into a hung statein a scenario when itis used asa double-hop to other resources and a vGPU is available. This will be observed when wfica32.exe attempts to useGDI +Direct3Drendering called Hybrid mode. The issue was identified as part of O...

Gym Management System 1.0 - Unauthenticated Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: Gym Management System 1.0 - Unauthenticated Remote Code Execution Exploit Author: Bobby Cooke Vendor Homepage: https://projectworlds.in/ Software Link:...

UBUNTU-CVE-2020-6467

Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

SANE Backends Code Issue Vulnerability

SANE Backends is an application programming interface API and communication protocol for regulating communication between software and digital imaging devices. A code issue vulnerability exists in the 'epsondsnetread' function in SANE Backends versions prior to 1.0.30. The vulnerability stems fro...

Google Chrome WebRTC Resource Management Error Vulnerability (CNVD-2020-29311)

Google Chrome is a web browser from Google, an American company. A resource management error vulnerability exists in WebRTC in versions of Google Chrome prior to 83.0.4103.61. An attacker can exploit the vulnerability to execute arbitrary code with the help of a specially crafted website...

Huawei Data Communication: Memory Leak Vulnerability (huawei-sa-20161221-01-ldp)

Some Huawei products are prone to a memory leak vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

Huawei Data Communication: Configuring ARP Packet Rate Limiting

After the rate limit for ARP packets is configured, the device counts the number of ARP packets. If the number of ARP packets exceeds the configured threshold within a certain period, the device does not process the excess ARP packets. Copyright C 2020 Greenbone Networks GmbH Some text descriptio...

Huawei Data Communication: Configuring Strict ARP Learning

Strict ARP learning is configured so that the device learns only the ARP reply packets in response to the ARP request packets sent by itself, and does not learn the ARP request packets sent by other devices to the router. In this manner, the device can defend against most ARP request packet...

Huawei Data Communication: Read current-configuration pim

Get the current PIM configuration of the VRP device. Note: This script only stores information for other Policy Controls. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Huawei Data Communication: Deploying IS-IS Authentication

IS-IS authentication is deployed to prevent attackers from attempting to use the control plane protocol to destroy entries on which forwarding depends, such as routes. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

CVE-2020-10620

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC communication does not include any credentials. This allows an attacker with network access to directly communicate with SoftPAC, including, for example, stopping the service remotely...

Design/Logic Flaw

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC communication does not include any credentials. This allows an attacker with network access to directly communicate with SoftPAC, including, for example, stopping the service remotely...