2445 matches found
H3C Magic R200 缓冲区错误漏洞
H3C Magic R200 is a wireless router device. H3C Magic R200 AJAX/ajaxget processing ajaxmsg parameter has a buffer overflow vulnerability, which can be exploited by remote attackers to submit special requests that can crash the service or execute arbitrary code in application context...
PT-2022-22232
Name of the Vulnerable Software and Affected Versions H3C Magic R200 version R200V200R004L02 Description A stack overflow issue was discovered via the Delstlist interface at the "/goform/aspForm" API endpoint. This issue affects the H3C Magic R200 device. Recommendations For H3C Magic R200 versio...
PT-2022-22235
Name of the Vulnerable Software and Affected Versions H3C Magic R200 version R200V200R004L02 Description A stack overflow issue was discovered via the INTF parameter at the "/dotrace.asp" API endpoint. Recommendations For H3C Magic R200 version R200V200R004L02, consider restricting access to the...
H3C Magic R200 缓冲区错误漏洞
The H3C Magic R200 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R200 R200V200R004L02 version, which originated when the ipqoslanipeditlist interface of goform/aspForm was found to contain a stack overflow...
CVE-2022-34601: Out-of-bounds Write
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm...
CVE-2022-34605: Out-of-bounds Write
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter at /dotrace.asp...
CVE-2022-34610: Out-of-bounds Write
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the URL /ihomers/app...
CVE-2022-34604: Out-of-bounds Write
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /dotrace.asp...
H3C Magic R200 缓冲区错误漏洞
The H3C Magic R200 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R200 R200V200R004L02 version, which originated when the Delstlist interface of goform/aspForm was found to contain a stack overflow...
H3C Magic R200 缓冲区错误漏洞
H3C Magic R200 is a router from China New Huasan H3C.A security vulnerability exists in the H3C Magic R200 R200V200R004L02 version, which stems from the HOST parameter of doping.asp that was found to contain a stack overflow. No details of the vulnerability are currently available...
H3C Magic R200 缓冲区错误漏洞
The H3C Magic R200 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R200 R200V200R004L02 version, which originated when the EdittriggerList interface of goform/aspForm was found to contain a stack overflow...
H3C SSL VPN Cross-Site Scripting Vulnerability
H3C SSL VPN is a secure session layer VPN from China's Xinhua San H3C. A cross-site scripting vulnerability exists in H3C SSL VPN 2022-07-10 and prior versions, which can be exploited by remote attackers to allow wnm/login/login.json svpnlang cross-site scripting attacks...
CVE-2022-35416
H3C SSL VPN through 2022-07-10 allows wnm/login/login.json svpnlang cookie XSS...
CVE-2022-35416
H3C SSL VPN through 2022-07-10 allows wnm/login/login.json svpnlang cookie XSS...
CVE-2022-35416
H3C SSL VPN through 2022-07-10 allows wnm/login/login.json svpnlang cookie XSS...
Cross site scripting
H3C SSL VPN through 2022-07-10 allows wnm/login/login.json svpnlang cookie XSS...
CVE-2022-35416
H3C SSL VPN through 2022-07-10 allows wnm/login/login.json svpnlang cookie XSS...
CVE-2022-35416
The CVE-2022-35416 entry concerns H3C SSL VPN prior to or through 2022-07-10. The connected nuclei template confirms a cookie-based cross-site scripting vulnerability in the wnm/login/login.json svpnlang parameter, exploitable via the svpnlang cookie to inject scripts in the victim’s browser. Aff...
PT-2022-22816 · H3C · H3C Ssl Vpn
Name of the Vulnerable Software and Affected Versions: H3C SSL VPN versions through 2022-07-10 Description: The issue allows for XSS through the svpnlang cookie in the wnm/login/login.json API endpoint. Recommendations: For versions through 2022-07-10, as a temporary workaround, consider...