Cross site scripting

There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can exploit this vulnerability by performing multiple abnormal activities to trigger the bad logic and cause out-of-bounds write. This may compromise the normal service...

Design/Logic Flaw

There is a resource management error vulnerability in the verisions V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 of USG9500. An authentication attacker needs to perform specific operations to exploit the vulnerability on the affected device. Due to improper resource management of the...

CVE-2021-22360

The CVE-2021-22360 entry concerns Huawei USG9500 devices (firmware versions V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200) where a resource management error can be exploited by an authentication attacker performing specific operations to cause service abnormality. The issue is caused by...

CVE-2021-22360

There is a resource management error vulnerability in the verisions V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 of USG9500. An authentication attacker needs to perform specific operations to exploit the vulnerability on the affected device. Due to improper resource management of the...

CVE-2021-22358

There is an insufficient input validation vulnerability in FusionCompute 8.0.0. Due to the input validation is insufficient, an attacker can exploit this vulnerability to upload any files to the device. Successful exploit may cause the service abnormal...

CVE-2021-22362

CVE-2021-22362: An out-of-bounds write vulnerability in Huawei CloudEngine products (12800, 5800, 6800, 7800 lines) via crafted packet data due to insufficient message validation, leading to service abnormality. Affected versions include CloudEngine 12800: V200R002C50SPC800, V200R003C00SPC810, V2...

CVE-2021-22362

There is an out of bounds write vulnerability in some Huawei products. An attacker can exploit this vulnerability by sending crafted data in the packet to the target device. Due to insufficient validation of message, successful exploit can cause certain service abnormal.Affected product versions...

CVE-2021-22411

There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can exploit this vulnerability by performing multiple abnormal activities to trigger the bad logic and cause out-of-bounds write. This may compromise the normal service...

Triconex Model 3009 MP 代码问题漏洞

Schneider Electric Triconex TriStation is a process safety management software from Schneider Electric, France. A security vulnerability exists in Triconex Model 3009 MP, which arises from improperly checking for anomalies or abnormal conditions...

Triconex Model 3009 MP 代码问题漏洞

The Swan Electric Triconex Model 3009 MP is a system controller from Swan Electric. A security vulnerability exists in the Triconex Model 3009 MP that arises from improper checking of abnormal or unusual conditions...

Triconex Model 3009 MP 代码问题漏洞

The Swan Electric Triconex Model 3009 MP is a system controller from Swan Electric. A security vulnerability exists in the Triconex Model 3009 MP that arises from improper checking of abnormal or unusual conditions...

Triconex Model 3009 MP 代码问题漏洞

The Swan Electric Triconex Model 3009 MP is a system controller from Swan Electric. A security vulnerability exists in the Triconex Model 3009 MP that arises from improper checking of abnormal or unusual conditions...

Triconex Model 3009 MP 代码问题漏洞

The Swan Electric Triconex Model 3009 MP is a system controller from Swan Electric. A security vulnerability exists in the Triconex Model 3009 MP that arises from improper checking of abnormal or unusual conditions...

CHECK-fail in `CTCGreedyDecoder`

Impact An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.CTCGreedyDecoder: python import tensorflow as tf inputs = tf.constant, shape=18, 2, 0, dtype=tf.float32 sequencelength = tf.constant-100, 17, shape=2, dtype=tf.int32 mergerepeated = False...

CVE-2021-22409

There is a denial of service vulnerability in some versions of ManageOne. There is a logic error in the implementation of a function of a module. When the service pressure is heavy, there is a low probability that an exception may occur. Successful exploit may cause some services abnormal...

CVE-2021-22339

There is a denial of service vulnerability in some versions of ManageOne. In specific scenarios, due to the insufficient verification of the parameter, an attacker may craft some specific parameter. Successful exploit may cause some services abnormal...

Denial of service

There is a denial of service vulnerability in some versions of ManageOne. In specific scenarios, due to the insufficient verification of the parameter, an attacker may craft some specific parameter. Successful exploit may cause some services abnormal...

CVE-2021-22339

There is a denial of service vulnerability in some versions of ManageOne. In specific scenarios, due to the insufficient verification of the parameter, an attacker may craft some specific parameter. Successful exploit may cause some services abnormal...

Security Advisory - Insufficient Input Validation Vulnerability in FusionCompute Product

There is an insufficient input validation vulnerability in FusionCompute product. Due to the input validation is insufficient, an attacker can exploit this vulnerability to upload any files to the device. Successful exploit may cause the service abnormal. Vulnerability ID: HWPSIRT-2020-05085 This...

CVE-2021-22330

There is an out of bounds write vulnerability in Huawei Smartphone HUAWEI P30 versions 9.1.0.131C00E130R1P21 when processing a message. An unauthenticated attacker can exploit this vulnerability by sending specific message to the target device. Due to insufficient validation of the input paramete...