Stack overflow

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /dotrace.asp...

Stack overflow

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /doping.asp...

CVE-2022-34609

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /doping.asp...

CVE-2022-34609

CVE-2022-34609 affects the H3C Magic R200 family (R200V200R004L02) and is a stack overflow in the INTF parameter handling of /doping.asp. The vulnerability allows remote attackers to potentially crash the service or execute arbitrary code in the application context (described as a high-severity, ...

CVE-2022-34604

CVE-2022-34604 affects H3C Magic R200 series (R200R004L02) and is caused by a stack overflow in the INTF parameter of dotrace.asp. The issue is documented with a CVSS v3.1 base score of 9.8 (CRITICAL) and a network attack vector with no user interaction required, leading to high impact on confide...

CVE-2022-34604

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /dotrace.asp...

CVE-2022-34609: Out-of-bounds Write

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /doping.asp...

PT-2022-22240

Name of the Vulnerable Software and Affected Versions H3C Magic R200 version R200V200R004L02 Description A stack overflow issue was discovered via the INTF parameter at the "/doping.asp" API endpoint. Recommendations For version R200V200R004L02, avoid using the INTF parameter in the "/doping.asp"...

PT-2022-22235

Name of the Vulnerable Software and Affected Versions H3C Magic R200 version R200V200R004L02 Description A stack overflow issue was discovered via the INTF parameter at the "/dotrace.asp" API endpoint. Recommendations For H3C Magic R200 version R200V200R004L02, consider restricting access to the...

CVE-2022-34604: Out-of-bounds Write

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /dotrace.asp...

CVE-2013-3565

Multiple cross-site scripting XSS vulnerabilities in the HTTP Interface in VideoLAN VLC Media Player before 2.0.7 allow remote attackers to inject arbitrary web script or HTML via the 1 command parameter to requests/vlmcmd.xml, 2 dir parameter to requests/browse.xml, or 3 URI in a request, which ...

CVE-2013-3565: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the HTTP Interface in VideoLAN VLC Media Player before 2.0.7 allow remote attackers to inject arbitrary web script or HTML via the 1 command parameter to requests/vlmcmd.xml, 2 dir parameter to requests/browse.xml, or 3 URI in a request, which ...

PT-2020-7447

Name of the Vulnerable Software and Affected Versions: VLC Media Player versions prior to 2.0.7 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities in the HTTP Interface of VLC Media Player. These vulnerabilities allow remote attackers to inject arbitrary web script ...