CVE-2020-7119

A vulnerability exists in the Aruba Analytics and Location Engine ALE web management interface 2.1.0.2 and earlier firmware that allows an already authenticated administrative user to arbitrarily modify files as an underlying privileged operating system user...

ale-heavylift.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1126516 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

CVE-2019-14260

On the Alcatel-Lucent Enterprise ALE 8008 Cloud Edition Deskphone VoIP phone with firmware 1.50.13, a command injection missing input validation issue in the password change field for the Change Password interface allows an authenticated remote attacker in the same network to trigger OS commands...

CVE-2019-14260

CVE-2019-14260 affects the Alcatel-Lucent Enterprise (ALE) 8008 Cloud Edition Deskphone VoIP, firmware 1.50.13. The vulnerability is a command injection in the Change Password interface’s password-change field, allowing an authenticated remote attacker on the same network to trigger OS commands v...

ALE Alcatel OmniAccess Wireless Access Point Information Disclosure Vulnerability

The ALE Alcatel OmniAccess Wireless Access Point is a wireless access point device from ALE France. A security vulnerability exists in the ALE Alcatel OmniAccess Wireless Access Point. An attacker can exploit the vulnerability by sending a specially crafted URL to view configuration commands...

CVE-2017-2692

The Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and earlier versions,ALE-L21C464B150 and earlier versions,ALE-L21C636B200 and earlier...

Path traversal

ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and earlier versions,ALE-L21C464B150 and earlier versions,ALE-L21C636B200 and earlier versions,ALE-L23C605B190 and earlier...

ale-hop.org XSS vulnerability

Vulnerable URL:...

ale-hop.pt XSS vulnerability

Vulnerable URL:...

Code injection

Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B85, and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service OS crash by leveraging camera permissions and via crafted input to the camera driver...

Design/Logic Flaw

Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service OS crash via vectors involving an application that passes crafted input to the GPU driver...

CVE-2015-7740

CVE-2015-7740 affects Huawei P7 (variants P7-L00C17B851, P7-L05C00B851, P7-L09C92B851) and P8 ALE-UL00 devices. The vulnerability is a local denial of service caused by an application passing crafted input to the GPU driver, leading to an OS crash. Connected sources corroborate a GPU driver DoS i...

CVE-2015-8223

Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B85, and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service OS crash by leveraging camera permissions and via crafted input to the camera driver...

Huawei ALE and GEM-703L Joint Photographic Experts Group Processing Unit Denial of Service Vulnerability

The Huawei ALE smartphone and GEM-703L smartphone are smartphones from Huawei, China.Joint Photographic Experts Group Processing Unit JPU is one of the drivers.... A security vulnerability in the JPU driver for the Huawei ALE smartphone and GEM-703L smartphone allows remote attackers to gain syst...

CVE-2015-8226

The Joint Photographic Experts Group Processing Unit JPU driver in Huawei ALE smartphones with software before ALE-UL00C00B220 and ALE-TL00C01B220 and GEM-703L smartphones with software before V100R001C233B111 allows remote attackers to cause a denial of service crash via a crafted application wi...

CVE-2015-8225

The Joint Photographic Experts Group Processing Unit JPU driver in Huawei ALE smartphones with software before ALE-UL00C00B220 and ALE-TL00C01B220 and GEM-703L smartphones with software before V100R001C233B111 allows remote attackers to cause a denial of service crash via a crafted application wi...

Design/Logic Flaw

The Joint Photographic Experts Group Processing Unit JPU driver in Huawei ALE smartphones with software before ALE-UL00C00B220 and ALE-TL00C01B220 and GEM-703L smartphones with software before V100R001C233B111 allows remote attackers to cause a denial of service crash via a crafted application wi...

CVE-2015-8225

The Joint Photographic Experts Group Processing Unit JPU driver in Huawei ALE smartphones with software before ALE-UL00C00B220 and ALE-TL00C01B220 and GEM-703L smartphones with software before V100R001C233B111 allows remote attackers to cause a denial of service crash via a crafted application wi...

CVE-2015-8225

Huawei ALE smartphones (before ALE-UL00C00B220/ALE-TL00C01B220) and GEM-703L smartphones (before V100R001C233B111) are affected by CVE-2015-8225 due to a flaw in the Joint Photographic Experts Group Processing Unit (JPU) driver. A remote attacker can cause a denial of service (crash) by submittin...

CVE-2015-8226

The Huawei JPU (Joint Photographic Experts Group Processing Unit) driver in ALE smartphones (before ALE-UL00C00B220 for ALE and before V100R001C233B111 for GEM-703L) is vulnerable to a remote DoS that crashes the device when a crafted application with system or camera permission is run. This vuln...