Baidu UEditor suffers from unauthorized access vulnerability

UEditor is a web editor developed by Baidu web front-end research and development department. An unauthorized access vulnerability exists in Baidu UEditor. An attacker can exploit the vulnerability to log in to the system without an account password and perform unauthorized operations...

CVE-2018-7366

ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV versions up to V1.2.2, the WASU versions up to V1.1.7 and the MGTV versions up to V1.4.6 have an authentication bypass vulnerability, which may allows an unauthorized user to perform unauthorized...

Authentication flaw

ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV versions up to V1.2.2, the WASU versions up to V1.1.7 and the MGTV versions up to V1.4.6 have an authentication bypass vulnerability, which may allows an unauthorized user to perform unauthorized...

CVE-2018-7366

The CVE-2018-7366 entry applies to ZTE ZXV10 B860AV2.1 product family in ChinaMobile branches, affecting ICNT up to V1.3.3, BESTV up to V1.2.2, WASU up to V1.1.7, and MGTV up to V1.4.6. The vulnerability is an authentication bypass that could allow an unauthorized user to perform unauthorized ope...

CVE-2018-7366

ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV versions up to V1.2.2, the WASU versions up to V1.1.7 and the MGTV versions up to V1.4.6 have an authentication bypass vulnerability, which may allows an unauthorized user to perform unauthorized...

CVE-2018-7365

All versions up to ZXCLOUD iRAI V5.01.05 of the ZTE uSmartView product are impacted by untrusted search path vulnerability, which may allow an unauthorized user to perform unauthorized operations...

CVE-2018-7365

All versions up to ZXCLOUD iRAI V5.01.05 of the ZTE uSmartView product are impacted by untrusted search path vulnerability, which may allow an unauthorized user to perform unauthorized operations...

CVE-2018-7365

CVE-2018-7365 affects ZTE uSmartView prior to and including v5.01.05. The root cause is an untrusted search path, which may allow an unauthorized user to perform unauthorized operations. Public documents provided do not specify exploit details or confirmed in-the-wild use. Depending on the source...

CVE-2018-7365

All versions up to ZXCLOUD iRAI V5.01.05 of the ZTE uSmartView product are impacted by untrusted search path vulnerability, which may allow an unauthorized user to perform unauthorized operations...

Google Android Qualcomm Automotive Multimedia Component Override Access Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm Automotive multimedia is a Qualcomm automotive multimedia component used in it. A security vulnerability exists in the Qualcomm Automotive Multimedia component of Android. A...

Weak Password Vulnerability in Chengdu Zhihui Campus Security Payment Platform

Campus Secure Payment Platform is an internet and mobile internet financial application platform for domestic universities. A weak password vulnerability exists in the Campus Pay platform. An attacker can exploit the vulnerability to obtain sensitive information and also perform unauthorized...

Sales & Company Management System Cross-Site Request Forgery Vulnerability

Sales & Company Management System SCMS is a sales and company management system. The system includes features such as customer management, product management and tax management. A cross-site request forgery vulnerability exists in the member/memberemail.php?action=edit URI in SCMS 2018-06-06 and...

Buffer Overflow Vulnerability in Multiple Qualcomm Snapdragon Products (CNVD-2018-25410)

The Qualcomm MSM8996AU and others are products of Qualcomm Incorporated, U.S.A. The Qualcomm MSM8996AU is a central processing unit CPU.The SDX24 is a modem. A buffer overflow vulnerability exists in the 'OEM crypto' function in multiple Qualcomm Snapdragon products, which stems from a failure to...

Buffer Overflow Vulnerability in Multiple Qualcomm Snapdragon Products (CNVD-2018-25412)

Qualcomm MSM8996AU and others are central processing unit CPU products for various platforms from Qualcomm Incorporated. A buffer overflow vulnerability exists in Video in multiple Qualcomm Snapdragon products, which can be exploited by attackers to perform unauthorized operations...

Qualcomm SD 600 Buffer Overflow Vulnerability

The Qualcomm SD 600 is a central processing unit CPU product for mobile devices from Qualcomm Incorporated. A buffer overflow vulnerability exists in Core Services in the Qualcomm SD 600 for mobile devices. An attacker could exploit the vulnerability to perform unauthorized operations...

Input validation vulnerability in multiple Qualcomm Snapdragon products (CNVD-2018-24641)

Qualcomm MSM8996AU and others are central processing unit CPU products for various platforms from Qualcomm Incorporated. An input validation vulnerability exists in Broadcast Services in multiple Qualcomm Snapdragon products, which could be exploited by an attacker to perform unauthorized...

Buffer Overflow Vulnerability in Multiple Qualcomm Snapdragon Products (CNVD-2018-24839)

Qualcomm MDM9206 and others are central processing unit CPU products of Qualcomm Incorporated for different platforms. A buffer overflow vulnerability exists in the Ontario fingerprinting code in various Qualcomm Snapdragon products, which can be exploited by an attacker to perform unauthorized...

ZTE ZXHN F670 Improper Access Control Vulnerability

The ZTE ZXHN F670 is an ITU-T G.984 and ITU-T g.988 compliant Optical Network Terminal ONT designed for high-end home users. An improper access control vulnerability exists in 1.1.10P3T18 and earlier versions of the ZTE ZXHN F670, which can be exploited by unauthorized users to perform unauthoriz...

CVE-2018-7362

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which may allows an unauthorized user to perform unauthorized operations on the router...

CVE-2018-7362

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which may allows an unauthorized user to perform unauthorized operations on the router...