CVE-2021-22396

There is a privilege escalation vulnerability in some Huawei products. Due to improper privilege management, a local attacker with common privilege may access some specific files in the affected products. Successful exploit will cause privilege escalation.Affected product versions include:eCNS280...

PT-2021-19252

Name of the Vulnerable Software and Affected Versions tagDiv Newspaper theme version 10.3.9.1 Description The issue allows for XSS via the td block id parameter in a td ajax block API call to the "wp-admin/admin-ajax.php" endpoint. This enables potential attackers to inject malicious scripts into...

Huawei eCNS280_TD 权限许可和访问控制问题漏洞

Huawei eCNS280TD is a core network device for the wireless broadband trunking system from Huawei China. Huawei ESE620X vESS is a virtual enterprise service controller from Huawei China. An elevation of privilege vulnerability exists in several Huawei products. The vulnerability stems from the fac...

PT-2021-15023

Name of the Vulnerable Software and Affected Versions: Huawei eCNS280 TD versions V100R005C00 through V100R005C10 Huawei eSE620X vESS versions V100R001C10SPC200 through V100R001C20SPC200 Description: The issue is related to improper privilege management in some Huawei products, allowing a local...

CVE-2021-22383

There is an out-of-bounds read vulnerability in eCNS280TD V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. The vulnerability is due to a message-handling function that contains an out-of-bounds read vulnerability. An attacker can exploit this vulnerability by...

CVE-2021-22378

There is a race condition vulnerability in eCNS280TD V100R005C00 and V100R005C10. There is a timing window exists in which the database can be operated by another thread that is operating concurrently. Successful exploit may cause the affected device abnormal...

CVE-2021-22363

There is a resource management error vulnerability in eCNS280TD V100R005C10SPC650. An attacker needs to perform specific operations to exploit the vulnerability on the affected device. Due to improper resource management of the function, the vulnerability can be exploited to cause service abnorma...

CVE-2021-22383

There is an out-of-bounds read vulnerability in eCNS280TD V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. The vulnerability is due to a message-handling function that contains an out-of-bounds read vulnerability. An attacker can exploit this vulnerability by...

CVE-2021-22363

There is a resource management error vulnerability in eCNS280TD V100R005C10SPC650. An attacker needs to perform specific operations to exploit the vulnerability on the affected device. Due to improper resource management of the function, the vulnerability can be exploited to cause service abnorma...

CVE-2021-22378

There is a race condition vulnerability in eCNS280TD V100R005C00 and V100R005C10. There is a timing window exists in which the database can be operated by another thread that is operating concurrently. Successful exploit may cause the affected device abnormal...

PT-2021-15012

Name of the Vulnerable Software and Affected Versions: eCNS280 TD version V100R005C10 eSE620X vESS versions V100R001C10SPC200 through V100R001C20SPC200, V200R001C00SPC300 Description: The issue is caused by a message-handling function that contains an out-of-bounds read. An attacker can exploit...

PT-2021-14992

Name of the Vulnerable Software and Affected Versions: eCNS280 TD version V100R005C10SPC650 Huawei Products affected versions not specified Description: The issue is related to a resource management error, which can be exploited by an attacker performing specific operations on the affected device...

PT-2021-15007

Name of the Vulnerable Software and Affected Versions: eCNS280 TD versions V100R005C00 through V100R005C10 Description: A race condition issue exists due to a timing window that allows the database to be operated by another thread concurrently. This can cause the affected device to become abnorma...

UVI-2021-1000339 KEYS: trusted: Fix memory leak on object td

KEYS: trusted: Fix memory leak on object td This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...

WS-2021-0209

Linux/kernel in versions v5.12-rc1-dontuse--v5.13-rc1 is vulnerable to memory leak on object td...

Weak Password Vulnerability in TP-LINK TD-8816

hereinafter referred to as "TP-LINK" is a leading global supplier of network communication equipment. A weak password vulnerability exists in the TP-LINK TD-8816. An attacker could exploit this vulnerability to obtain sensitive information...

TP-LINK TD-W8101G suffers from weak password vulnerability

hereinafter referred to as "TP-LINK" is a leading global supplier of network communication equipment. A weak password vulnerability exists in the TP-LINK TD-W8101G. An attacker could exploit this vulnerability to obtain sensitive information...

TP-LINK TD-W8968 has a weak password vulnerability

hereinafter referred to as "TP-LINK" is a leading global supplier of network communication equipment. A weak password vulnerability exists in the TP-LINK TD-W8968. An attacker could exploit this vulnerability to obtain sensitive information...

Weak password vulnerability in TP-LINK TD-W8960N

hereinafter referred to as "TP-LINK" is a leading global supplier of network communication equipment. A weak password vulnerability exists in the TP-LINK TD-W8960N. An attacker could exploit this vulnerability to obtain sensitive information...

TP-LINK TD-W8951ND suffers from weak password vulnerability

TP-Link TD-W8951ND is a wireless router product. TP-LINK TD-W8951ND has a weak password leak. , which is exploited by attackers to obtain sensitive information...