31 matches found
CVE-2016-8789
Huawei eSpace IAD (hardware/firmware: V300R001C03, V300R001C04, V300R001C06, V300R001C20, V300R001C07) contains a reflected cross-site scripting (XSS) vulnerability that can be triggered when a user clicks a URL containing malicious scripts. The issue allows an attacker to obtain user information...
CVE-2016-8271
Huawei eSpace IAD information disclosure vulnerability (CVE-2016-8271) affects V300R002C01SPC100 and earlier. The root cause is lack of proper access restrictions on web pages, allowing an attacker to view/download fault information via a special URL. Multiple sources (NVD entry, CNVD, PRION, CVE...
CVE-2016-8271
Huawei eSpace IAD V300R002C01SPC100 and earlier versions have an information leak vulnerability; an attacker can check and download the fault information by accessing a special URL...
Reflective Cross-Site Scripting Vulnerability in Huawei eSpace IAD Products
Huawei eSpace IAD is an integrated access device for Voice over IP and Unified Communications solutions from Huawei, China. A reflective cross-site scripting vulnerability exists in the Huawei eSpace IAD product. An attacker can exploit the vulnerability to run a malicious script in a user's...
Security Advisory - XSS Vulnerability in Huawei eSpace IAD
Huawei eSpace Integrated Access Device IAD has a reflected cross-site scripting XSS vulnerability. An attacker could trick a user into clicking a URL containing malicious scripts. Then the user's browser may receive a response from the eSpace IAD and execute the malicious scripts. Successful...
Security Advisory - Information Leak Vulnerability in Huawei eSpace IAD
Huawei eSpace IAD products have an information leak vulnerability. Some Web pages do not verify the validity of the permission. An attacker can check and download the fault information by access special URL. Vulnerability ID: HWPSIRT-2016-08001 This vulnerability has been assigned a CVE ID:...
Huawei eSpace IAD Information Disclosure
Title: Huawei eSpace IAD Remote Information Disclosure Vulnerability Software : eSpace IAD Software Version : Equipment type : eSpace IAD208EM PCB version : AG21CSPG VER.A Product name : TS0801 and TS0802 Program version : V300R001C07SPC800 BIOS version : 1035 Slic version : 000 CPLD version :...
CVE-2010-3828
iAd Content Display in Apple iOS before 4.2 allows man-in-the-middle attackers to make calls via a crafted URL in an ad...
Code injection
iAd Content Display in Apple iOS before 4.2 allows man-in-the-middle attackers to make calls via a crafted URL in an ad...
CVE-2010-3828
The vulnerability CVE-2010-3828 affects Apple iOS before 4.2 in iAd Content Display. A crafted URL in an ad can enable man-in-the-middle attackers to make calls, indicating potential traffic manipulation via the ad. From the provided documents, there are no explicit exploitation details or confir...