115 matches found
CVE-2020-7119
A vulnerability exists in the Aruba Analytics and Location Engine ALE web management interface 2.1.0.2 and earlier firmware that allows an already authenticated administrative user to arbitrarily modify files as an underlying privileged operating system user...
CVE-2020-7119
The vulnerability CVE-2020-7119 affects Aruba Analytics and Location Engine (ALE) web management interface versions up to 2.1.0.2. An authenticated administrative user can arbitrarily modify files as the underlying privileged OS user, indicating an privilege-escalation within the web interface. A...
CVE-2020-7119: Undefined Security Weakness
A vulnerability exists in the Aruba Analytics and Location Engine ALE web management interface 2.1.0.2 and earlier firmware that allows an already authenticated administrative user to arbitrarily modify files as an underlying privileged operating system user...
ale-heavylift.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1126516 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2019-14260
On the Alcatel-Lucent Enterprise ALE 8008 Cloud Edition Deskphone VoIP phone with firmware 1.50.13, a command injection missing input validation issue in the password change field for the Change Password interface allows an authenticated remote attacker in the same network to trigger OS commands...
CVE-2019-14260
CVE-2019-14260 affects the Alcatel-Lucent Enterprise (ALE) 8008 Cloud Edition Deskphone VoIP, firmware 1.50.13. The vulnerability is a command injection in the Change Password interface’s password-change field, allowing an authenticated remote attacker on the same network to trigger OS commands v...
CVE-2019-14260: Improper Neutralization of Special Elements used in an OS Command
On the Alcatel-Lucent Enterprise ALE 8008 Cloud Edition Deskphone VoIP phone with firmware 1.50.13, a command injection missing input validation issue in the password change field for the Change Password interface allows an authenticated remote attacker in the same network to trigger OS commands...
PT-2019-13568
Name of the Vulnerable Software and Affected Versions Alcatel-Lucent Enterprise ALE 8008 Cloud Edition Deskphone VoIP phone version 1.50.13 Description A command injection issue due to missing input validation in the password change field of the Change Password interface allows an authenticated...
ALE Alcatel OmniAccess Wireless Access Point Information Disclosure Vulnerability
The ALE Alcatel OmniAccess Wireless Access Point is a wireless access point device from ALE France. A security vulnerability exists in the ALE Alcatel OmniAccess Wireless Access Point. An attacker can exploit the vulnerability by sending a specially crafted URL to view configuration commands...
Path traversal
ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and earlier versions,ALE-L21C464B150 and earlier versions,ALE-L21C636B200 and earlier versions,ALE-L23C605B190 and earlier...
CVE-2017-2692
The Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and earlier versions,ALE-L21C464B150 and earlier versions,ALE-L21C636B200 and earlier...
PT-2017-15479
Name of the Vulnerable Software and Affected Versions Keyguard application in ALE-L02C635B140 and earlier versions Keyguard application in ALE-L02C636B140 and earlier versions Keyguard application in ALE-L21C10B150 and earlier versions Keyguard application in ALE-L21C185B200 and earlier versions...
CVE-2017-2693: Improper Limitation of a Pathname to a Restricted Directory
ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and earlier versions,ALE-L21C464B150 and earlier versions,ALE-L21C636B200 and earlier versions,ALE-L23C605B190 and earlier...
ale-hop.org XSS vulnerability
Vulnerable URL:...
ale-hop.pt XSS vulnerability
Vulnerable URL:...
Code injection
Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B85, and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service OS crash by leveraging camera permissions and via crafted input to the camera driver...
Design/Logic Flaw
Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service OS crash via vectors involving an application that passes crafted input to the GPU driver...
CVE-2015-8223
Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B85, and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service OS crash by leveraging camera permissions and via crafted input to the camera driver...
CVE-2015-7740
CVE-2015-7740 affects Huawei P7 (variants P7-L00C17B851, P7-L05C00B851, P7-L09C92B851) and P8 ALE-UL00 devices. The vulnerability is a local denial of service caused by an application passing crafted input to the GPU driver, leading to an OS crash. Connected sources corroborate a GPU driver DoS i...
PT-2017-7359
Name of the Vulnerable Software and Affected Versions Huawei P7 versions before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B85 Huawei P8 ALE-UL00 versions before ALE-UL00B211 Description The issue allows local users to cause a denial of service, resulting in an OS crash, by leveraging camera...