CVE-2016-6320

Cross-site scripting XSS vulnerability in app/assets/javascripts/hosteditinterfaces.js in Foreman before 1.12.2 allows remote authenticated users to inject arbitrary web script or HTML via the network interface device identifier in the host interface form...

PT-2016-6826 · Foreman · Foreman

Name of the Vulnerable Software and Affected Versions: Foreman versions prior to 1.12.2 Description: A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via the network interface device identifier in the host interface form. This is...

Design/Logic Flaw

The Windows-based Host Interface Program WHIP service on Huawei SmartAX MT882 devices V200R002B022 Arg relies on the client to send a length field that is consistent with a buffer size, which allows remote attackers to cause a denial of service device outage or possibly have unspecified other...

CVE-2016-2231

The CVE-2016-2231 issue affects Huawei SmartAX MT882 devices (V200R002B022 Arg) where the WHIP service relies on a client-supplied length field that must match the buffer size. A crafted TCP traffic sequence to port 8701 can exploit this mismatch to cause a denial of service (device outage) and p...