4513 matches found
CVE-2022-34608: Out-of-bounds Write
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ajaxmsg parameter at /AJAX/ajaxget...
CVE-2022-34607: Out-of-bounds Write
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter at /doping.asp...
CVE-2022-34605: Out-of-bounds Write
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter at /dotrace.asp...
CVE-2022-34602: Out-of-bounds Write
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ipqoslanipeditlist interface at /goform/aspForm...
CVE-2022-34603: Out-of-bounds Write
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm...
CVE-2022-34600: Out-of-bounds Write
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm...
CVE-2022-34599: Out-of-bounds Write
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm...
PT-2022-22238
Name of the Vulnerable Software and Affected Versions H3C Magic R200 version R200V200R004L02 Description A stack overflow issue was discovered via the HOST parameter at the "/doping.asp" API endpoint. Recommendations For H3C Magic R200 version R200V200R004L02, as a temporary workaround, consider...
PT-2022-22240
Name of the Vulnerable Software and Affected Versions H3C Magic R200 version R200V200R004L02 Description A stack overflow issue was discovered via the INTF parameter at the "/doping.asp" API endpoint. Recommendations For version R200V200R004L02, avoid using the INTF parameter in the "/doping.asp"...
CVE-2022-34601: Out-of-bounds Write
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm...
H3C Magic R200 Buffer Error Vulnerability
The H3C Magic R200 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R200 R200V200R004L02 version, which originated when the DelDNSHnList interface of oform/aspForm was found to contain a stack overflow...
CVE-2022-2192
Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recovery token to elevate privileges via path tampering in the Magic Link page. This issue affects: HYPR Server versions later than 6.10; version 6.15.1 and prior versions...
CVE-2022-2192
CVE-2022-2192 describes a forced browsing vulnerability in HYPR Server spanning versions 6.10 to 6.15.1. An attacker with a valid one-time recovery token can perform path tampering on the Magic Link page to elevate privileges, yielding a remote, network-attack surface with high impact to confiden...
CVE-2022-2192: Direct Request
Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recovery token to elevate privileges via path tampering in the Magic Link page. This issue affects: HYPR Server versions later than 6.10; version 6.15.1 and prior versions...
HYPR Server security vulnerabilities
HYPR and HYPR Server are both products of HYPR, Inc.HYPR is a security application that implements password-less security.HYPR Server is a server. A security vulnerability exists in HYPR Server versions 6.10 through 6.15.1, which stems from a forced browsing vulnerability that allows a remote...
magic-bike-lapalma.com Cross Site Scripting vulnerability OBB-2793266
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
HUAWEI EMUI/Magic UI licensing issue vulnerability
HUAWEI EMUI / Magic UI are both an Android-based mobile operating system developed by China's Huawei HUAWEI. HUAWEI EMUI / Magic UI has an authorization issue vulnerability, which stems from improper control of the Bluetooth module permissions and is used by attackers to affect the integrity of t...
HUAWEI Magic UI security vulnerabilities
HUAWEI Magic UI is a smart device operating system from Chinese company Huawei HUAWEI. A security vulnerability exists in HUAWEI Magic UI version 4.0.0, which is exploited by attackers to compromise device confidentiality...
Huawei Emui and Magic UI Buffer Overflow Vulnerability (CNVD-2022-57612)
Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. buffer overflow vulnerability exists in Huawei Emui and Magic UI, which can be exploited by attackers to cause a buffer overflow and execute arbitrary code on the system, or...