Buffer overflow

Huawei S12700 V200R005C00, V200R006C00, V200R007C00, V200R008C00, S5700 V200R006C00, V200R007C00, V200R008C00, S6700 V200R008C00, S7700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, S9700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00,...

CVE-2016-8786

Huawei S12700 V200R005C00, V200R006C00, V200R007C00, V200R008C00, S5700 V200R006C00, V200R007C00, V200R008C00, S6700 V200R008C00, S7700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, S9700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00,...

CVE-2016-8786

CVE-2016-8786 affects multiple Huawei routing switches (e.g., S12700, S5700, S6700, S7700, S9700) across V200R005C00 to V200R008C00 revisions. The flaw is in RSVP packet handling due to insufficient input validation, enabling a remote attacker to trigger buffer overflows and cause occasional rebo...

CVE-2016-8786

Huawei S12700 V200R005C00, V200R006C00, V200R007C00, V200R008C00, S5700 V200R006C00, V200R007C00, V200R008C00, S6700 V200R008C00, S7700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, S9700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00,...

CVE-2016-8786: Improper Input Validation

Huawei S12700 V200R005C00, V200R006C00, V200R007C00, V200R008C00, S5700 V200R006C00, V200R007C00, V200R008C00, S6700 V200R008C00, S7700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, S9700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00,...

Memory corruption

Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 5800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 6800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 7800 V100R003C00, V100R005C00, V100R005C10, V100R006C00 have a memory lea...

CVE-2017-15349

Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 5800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 6800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 7800 V100R003C00, V100R005C00, V100R005C10, V100R006C00 have a memory lea...

CVE-2017-15349

CVE-2017-15349 affects Huawei CloudEngine switches (12800, 5800, 6800, 7800 series across multiple V100R0xxC0x releases). The issue is a memory leak caused by failure to release memory when handling RSVP packets, exploitable by unauthenticated remote senders over the network, leading to DoS via r...

CVE-2017-15349: Missing Release of Resource after Effective Lifetime

Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 5800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 6800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 7800 V100R003C00, V100R005C00, V100R005C10, V100R006C00 have a memory lea...

RSVP Invitation Online Cross-Site Request Forgery Vulnerability

RSVP Invitation Online is a set of scripts for sending out invitations or invitations to join an event online. A cross-site request forgery vulnerability exists in RSVP Invitation Online version 1.0. A remote attacker could exploit this vulnerability to perform unauthorized actions...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF exists in RSVP Invitation Online 1.0 via function/account.php, as demonstrated by modifying the admin password...

CVE-2018-5976

Cross Site Request Forgery CSRF exists in RSVP Invitation Online 1.0 via function/account.php, as demonstrated by modifying the admin password...

CVE-2018-5976

Cross Site Request Forgery CSRF exists in RSVP Invitation Online 1.0 via function/account.php, as demonstrated by modifying the admin password...

CVE-2018-5976

CVE-2018-5976 affects RSVP Invitation Online 1.0. The vulnerability is a Cross-Site Request Forgery (CSRF) in the application’s admin action path (function/account.php) that enables an attacker to modify the administrator password. A proof-of-concept demonstrates submitting a request to update th...

RSVP Invitation Online 1.0 Cross Site Request Forgery

...

PT-2018-17262

Name of the Vulnerable Software and Affected Versions: RSVP Invitation Online version 1.0 Description: A Cross Site Request Forgery CSRF issue exists, allowing modification of the admin password via the function/account.php endpoint. Recommendations: For RSVP Invitation Online version 1.0, consid...

CVE-2018-5976: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF exists in RSVP Invitation Online 1.0 via function/account.php, as demonstrated by modifying the admin password...

RSVP Invitation Online 1.0 - Cross-Site Request Forgery (Update Admin)

RSVP Invitation Online 1.0 - Cross-Site Request Forgery Update Admin...

RSVP Invitation Online 1.0 - Cross-Site Request Forgery (Update Admin)

...

PT-2017-14015

Name of the Vulnerable Software and Affected Versions Huawei CloudEngine 12800 versions V100R003C00 through V100R006C00 Huawei CloudEngine 5800 versions V100R003C00 through V100R006C00 Huawei CloudEngine 6800 versions V100R003C00 through V100R006C00 Huawei CloudEngine 7800 versions V100R003C00...