CVE-2021-21726

Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects:...

CVE-2021-21726

CVE-2021-21726 affects ZTE ZXONE series (ZXONE 9700, ZXONE 8700, ZXONE 19700) with specific firmware/version identifiers (e.g., V1.40.021.021CP049, V1.0P02B219_@NCPM-RELEASE_2.40R1-20200914.set). The vulnerability is an input verification flaw in the diagnostic function interface caused by insuff...

Design/Logic Flaw

There is an out-of-bound read vulnerability in Taurus-AL00A 10.0.0.1C00E1R1P1. A module does not verify the some input. Attackers can exploit this vulnerability by sending malicious input through specific app. This could cause out-of-bound, compromising normal service...

Buffer overflow

There is a buffer overflow vulnerability in Mate 30 10.1.0.126C00E125R5P3. A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause buffer overflow, compromising normal service...

The vulnerability of the Push API interface on Mozilla Firefox’s browser allows a perpetrator to gain unauthorized access to protected information or cause a service failure.

The vulnerability of the Push API interface of Mozilla Firefox’s browser is related to a lack of mechanisms for verifying input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures...

The vulnerability of the Fanuc 32i numerical program-controlled controller lies in the insufficient verification of input data, allowing a intruder to trigger a service failure.

The vulnerability of the Fanuc 32i numerical program-controlled controller is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure using specially crafted network packets...

The vulnerability of the Cisco Discovery Protocol implementation in the microsoftware-based IP camera of the Cisco Video Surveillance 8000 Series allows a intruder to execute arbitrary code.

The vulnerability of the Cisco Discovery Protocol implementation in Cisco Video Surveillance 8000 Series software-based IP cameras exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the command-line interface of the StarOS operating system, which allows a hacker to gain increased privileges

The vulnerability of the StarOS command-line interface is related to errors during command input verification. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the command-line interface of the StarOS operating system, which allows a hacker to gain increased privileges

The vulnerability of the StarOS command-line interface is related to errors during command input verification. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Intel Data Center Manager Console, a software tool for collecting and analyzing data on the performance, power consumption, and temperature of various devices, stems from insufficient verification of input data. This vulnerability allows attackers to disclose sensitive information that should be protected.

The vulnerability of the Intel Data Center Manager Console, a software tool for collecting and analyzing data on the performance, power consumption, and temperature of various devices, exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor...

The vulnerability of the ldb microprogramming software services for Qualcomm’s IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA4531, QCA9531, and QCA9980 products exists due to insufficient verification of input data. This allows attackers to execute arbitrary codes.

The vulnerability of the ldb microprogramming software for Qualcomm’s IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA4531, QCA9531, and QCA9980 products exists due to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

CVE-2020-6879

Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the web management page. The restriction of the front-end code can be bypassed by constructing a POST request message and sending the request to the creation of a static routing rule...

CVE-2020-6879

Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the web management page. The restriction of the front-end code can be bypassed by constructing a POST request message and sending the request to the creation of a static routing rule...

Design/Logic Flaw

Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the web management page. The restriction of the front-end code can be bypassed by constructing a POST request message and sending the request to the creation of a static routing rule...

CVE-2020-6879

Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the web management page. The restriction of the front-end code can be bypassed by constructing a POST request message and sending the request to the creation of a static routing rule...

CVE-2020-6879

Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the web management page. The restriction of the front-end code can be bypassed by constructing a POST request message and sending the request to the creation of a static routing rule...

CVE-2020-6879

CVE-2020-6879 affects ZXHN Z500 V1.0.0.2B1.1000 and ZXHN F670L V1.1.10P1N2E. The web management UI allows configuring a static prefix, but the front-end restriction can be bypassed by crafting a POST request to the static routing rule creation interface. The backend does not adequately validate a...

The vulnerability of the Parus-Budget unified information system for government management, related to insufficient verification of input data, allows a perpetrator to execute arbitrary codes.

The vulnerability of the unified information system for government management, Parus-Budget, is related to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by filling the buffer with incorrect port names from the printe...

CVE-2020-9240

Taurus-AN00B versions earlier than 10.1.0.156C00E155R7P2 have a buffer overflow vulnerability. A function in a module does not verify inputs sufficiently. Attackers can exploit this vulnerability by sending specific request. This could compromise normal service of the affected device...

CVE-2020-9122

Some Huawei products have an insufficient input verification vulnerability. Attackers can exploit this vulnerability in the LAN to cause service abnormal on affected devices.Affected product versions include:HiRouter-CD30-10 version 10.0.2.5;HiRouter-CT31-10 version 10.0.2.20;WS5200-12 version...