6121 matches found
CVE-2017-15335
The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20,...
CVE-2017-15336
The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20,...
Buffer overflow
Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...
CVE-2017-15336
CVE-2017-15336 corresponds to buffer overflow vulnerabilities in the SIP backup feature across Huawei devices (DP300 and a broad range of modules and platforms including IPS, NGFW, NIP6300/6600/6800, RP200, ViewPoint, eSpace U1981, and Secospace USG/TE series). Root cause: insufficient validation...
CVE-2017-15337
CVE-2017-15337 affects the SIP module across multiple Huawei products (DP300, IPS, NGFW, NIP, NIP6600/6800, RP200, SVN series, Secospace USG, TE/Views, eSpace U1981, ViewPoint, etc.). The root cause is insufficient validation of SIP messages, leading to a buffer overflow if an attacker crafts spe...
CVE-2018-2394
Under certain conditions an unauthenticated malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, services and/or system files...
Invalid Memory Access Vulnerability in SCCPX Module for Multiple Huawei Products
Huawei DP300, RP200, TE series, etc. are all-in-one desktop SmartZen and all-in-one video conferencing terminal products of Huawei China Company. An invalid memory access vulnerability exists in the SCCPX module of multiple Huawei products, which is due to the device failing to adequately detect...
The vulnerability of the experimental implementation of the HTTP/2 protocol in the Apache Traffic Server allows a attacker to execute arbitrary code or cause a service failure.
The vulnerability of the experimental implementation of the HTTP/2 protocol in the Apache Traffic Server web server arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failur...
The vulnerability of the Xerces2 Java XML parser, related to resource management errors, allows attackers to cause service failures.
The vulnerability of the Xerces2 Java XML parser is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause a service failure increased computational resources usage by using a specially crafted XML message...
Memory leak vulnerability in multiple Huawei products (CNVD-2018-02542)
Huawei DP300, RP200, TE series, etc. are all-in-one desktop SmartZen and all-in-one video conferencing terminal products of Huawei China Company. A memory leak vulnerability exists in several Huawei products due to a failure of the device to properly free allocated memory. A local attacker with...
MGCP protocol out-of-bounds writing vulnerability in multiple Huawei products
Huawei DP300, RP200, TE series, etc. are all-in-one desktop SmartZen and all-in-one video conferencing terminal products of Huawei China Company. An out-of-bounds write vulnerability exists in the MGCP protocol of several Huawei products, which is due to the program's failure to adequately verify...
The vulnerability of the mod_auth_digest module in the Apache HTTP Server’s httpd daemon allows a hacker to gain access to confidential information or cause service interruptions.
The vulnerability of the modauthdigest module in the Apache HTTP Server’s httpd daemon arises from incorrect initialization of a variable. Exploiting this vulnerability can allow an attacker to gain access to confidential information or cause service failures...
The vulnerability of the configuration file editing software Augeas arises from an operation that goes beyond the buffer in memory, allowing a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the configuration file editing software Augeas arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by sending specially crafted strings...
The vulnerability of the sendto function in the software tool for interacting with servers via curl allows a hacker to trigger a service failure or redirect traffic.
The vulnerability of the sendto function in the curl programming interface relates to reading beyond the buffer limit when using the TFTP protocol. Exploiting this vulnerability allows a malicious actor to cause service failures or redirect traffic through a specially crafted URL address...
OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142)
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JNDI. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker wit...
CVE-2018-2599
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JNDI. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker...
The vulnerability of the ims_pcu_get_cdc_union_desc function (drivers/input/misc/ims-pcu.c) in the Linux kernel allows a attacker to cause a service failure or exert other effects.
The vulnerability of the imspcugetcdcuniondesc function drivers/input/misc/ims-pcu.c in the Linux kernel arises from a read operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker acting locally to cause service failures or other effects...
The vulnerability of the TIFFWriteDirectoryTagCheckedLong8Array function in the tiff library allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the TIFFWriteDirectoryTagCheckedLong8Array function in the tiff library exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...
The vulnerability of the xmlDictAddString function in the dict.c library of the libxml2 library, which allows a hacker to cause a service failure.
The vulnerability of the xmlDictAddString function in the dict.c library of the libxml2 library arises from a read operation that occurs outside the buffer’s boundaries in dynamic memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of the xmlDictComputeFastKey function (dict.c) in the libxml2 library allows a attacker to cause a service failure.
The vulnerability of the xmlDictComputeFastKey function in the dict.c file of the libxml2 library arises from a read operation that occurs outside the buffer, within dynamic memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...