PT-2021-15033

Name of the Vulnerable Software and Affected Versions: iMaster NCE-Fabric version V100R019C10 Description: The issue is related to a XSS injection vulnerability. A module of the client does not verify the input sufficiently, allowing attackers to exploit this by modifying input after logging onto...

CVE-2021-22331

There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers can exploit this vulnerability by sending a malicious application request to launch JavaScript injection. This may compromise normal service. Affected product...

CVE-2021-22331: Improper Neutralization of Special Elements in Output Used by a Downstream Component

There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers can exploit this vulnerability by sending a malicious application request to launch JavaScript injection. This may compromise normal service. Affected product...

PT-2021-14956

Name of the Vulnerable Software and Affected Versions: Huawei NIP6300 affected versions not specified Huawei NIP6600 affected versions not specified Huawei NIP6800 affected versions not specified Huawei S1700 affected versions not specified Huawei S2700 affected versions not specified Huawei S570...

PT-2021-14940

Name of the Vulnerable Software and Affected Versions: Taurus-AL00A version 10.0.0.1C00E1R1P1 Description: The issue is related to an out-of-bound read. A module does not properly verify some input, allowing attackers to exploit this by sending malicious input through a specific app, which could...

PT-2020-20490

Name of the Vulnerable Software and Affected Versions HUAWEI P30 Pro versions prior to 10.1.0.160C00E160R2P8 Description The issue is related to an out-of-bound read vulnerability. It occurs due to a lack of verification when processing certain messages from other modules. Attackers can exploit...