CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

70 matches found

CVE•added 2018/03/05 7:00 p.m.•79 views

CVE-2017-17136

The CVE-2017-17136 issue is a heap overflow in Huawei’s PEM module across multiple products (e.g., DP300, IPS, NGFW, S series, USG, ViewPoint, etc.). Root cause: insufficient verification in the PEM processing flow, allowing an authenticated local attacker to crash the process by presenting a cra...

5.5CVSS5.4AI score0.00135EPSS

SaveExploits0References1Affected Software1

Positive Technologies•added 2018/03/05 12:00 a.m.•2 views

PT-2018-6411

Name of the Vulnerable Software and Affected Versions: Huawei DP300 versions V500R002C00 through V500R002C00SPCa00 Huawei RP200 version V500R002C00SPC200 Huawei RSE6500 versions V500R002C00SPC100 through V500R002C00SPC700 Huawei TE30 versions V100R001C10 through V100R001C10SPC800 Huawei TE30...

5.3CVSS0.00893EPSS

SaveExploits0References3

Positive Technologies•added 2018/03/05 12:00 a.m.•3 views

PT-2018-6410

5.3CVSS0.00893EPSS

SaveExploits0References3

Positive Technologies•added 2018/03/05 12:00 a.m.•3 views

PT-2018-6412

5.3CVSS0.00893EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2018/03/05 12:00 a.m.•11 views

CVE-2017-17136: Improper Restriction of Operations within the Bounds of a Memory Buffer

PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700...

5.5CVSS6AI score0.00135EPSS

SaveExploits0References2

NVD•added 2018/02/15 4:29 p.m.•36 views

CVE-2017-17291

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

5.5CVSS5.3AI score0.00207EPSS

SaveExploits0References1

NVD•added 2018/02/15 4:29 p.m.•40 views

CVE-2017-17298

5.3CVSS5.6AI score0.00765EPSS

SaveExploits0References1

Prion•added 2018/02/15 4:29 p.m.•38 views

Input validation

2.1CVSS4.4AI score0.00207EPSS

SaveExploits0References1Affected Software26

Prion•added 2018/02/15 4:29 p.m.•47 views

Memory corruption

5CVSS5.3AI score0.01261EPSS

SaveExploits0References1Affected Software43

Cvelist•added 2018/02/15 4:00 p.m.•36 views

CVE-2017-17291

5.3AI score0.00207EPSS

SaveExploits0References1

CVE•added 2018/02/15 4:00 p.m.•83 views

CVE-2017-15332

CVE-2017-15332 corresponds to a memory-leak vulnerability in the H323 protocol across multiple Huawei products (e.g., AR, ARS, SRG, NetEngine, Secospace USG, etc.). The issue arises from insufficient verification/checks of H323 packets, allowing an unauthenticated, remote attacker to send crafted...

5.3CVSS5.3AI score0.01532EPSS

SaveExploits0References1Affected Software1

CVE•added 2018/02/15 4:00 p.m.•74 views

CVE-2017-17291

CVE-2017-17291 is a memory-leak vulnerability in a wide range of Huawei enterprise devices (e.g., AR/AR1200/AR3200/SRG/NetEngine lines, TE/DP300/MAX PRESENCE, etc.). The issue arises when parsing crafted XML files: the software fails to free allocated memory, leading to a memory leak. An authenti...

5.5CVSS5.2AI score0.00207EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2018/02/15 4:00 p.m.•50 views

CVE-2017-17294

4.4AI score0.00207EPSS

SaveExploits0References1

CVE•added 2018/02/15 4:00 p.m.•80 views

CVE-2017-17298

CVE-2017-17298 is a buffer overflow vulnerability affecting a wide range of Huawei router and enterprise devices (e.g., AR120-S, AR1200, AR150/AR160/AR200/AR2200 families, ViewPoint, and others) caused by insufficient validation of certificates. An unauthenticated, remote attacker can send specia...

5.3CVSS5.6AI score0.00765EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2018/02/15 4:00 p.m.•50 views

CVE-2017-17292

4.5AI score0.00207EPSS

SaveExploits0References1

CVE•added 2018/02/15 4:00 p.m.•78 views

CVE-2017-17295

CVE-2017-17295 describes buffer overflow vulnerabilities in numerous Huawei products caused by insufficient validation of SIP package values. An unauthenticated, remote attacker may send crafted SIP packages to affected devices (e.g., AR120-S, AR1200, AR150/AR200 families and others listed) to tr...

5.3CVSS5.6AI score0.01218EPSS

SaveExploits0References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2018/02/15 12:00 a.m.•4 views

CVE-2017-15342: Improper Restriction of Operations within the Bounds of a Memory Buffer

Huawei DP300 V500R002C00, TE60 V600R006C00, TP3106 V100R002C00, eSpace U1981 V200R003C30SPC100 have a denial of service vulnerability. The software does not correctly calculate the rest size in a buffer when handling SSL connections. A remote unauthenticated attacker could send a lot of crafted S...

7.5CVSS7.4AI score0.01255EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2018/02/15 12:00 a.m.•8 views

CVE-2017-17292: Improper Input Validation

3.3CVSS5.6AI score0.00207EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2018/02/15 12:00 a.m.•5 views

CVE-2017-17291: Missing Release of Resource after Effective Lifetime

5.5CVSS5.8AI score0.00207EPSS

SaveExploits0References2

Positive Technologies•added 2018/02/15 12:00 a.m.•4 views

PT-2018-5796

Name of the Vulnerable Software and Affected Versions: Huawei DP300 version V500R002C00 Huawei TE60 version V600R006C00 Huawei TP3106 version V100R002C00 Huawei eSpace U1981 version V200R003C30SPC100 Description: The issue is related to a denial of service condition. It occurs because the softwar...

7.5CVSS0.01255EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by