CVE-2020-1825

FusionAccess with versions earlier than 6.5.1.SPC002 have a Denial of Service DoS vulnerability. Due to insufficient verification on specific input, attackers can exploit this vulnerability by sending constructed messages to the affected device through another device on the same network. Successf...

CVE-2020-9075

Huawei products Secospace USG6300;USG6300E with versions of V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10;V600R006C00 have a vulnerability of insufficient input verification. An attacker with limited privilege can exploit this vulnerability to access a specific directory...

CVE-2020-9075

Huawei products Secospace USG6300;USG6300E with versions of V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10;V600R006C00 have a vulnerability of insufficient input verification. An attacker with limited privilege can exploit this vulnerability to access a specific directory...

CVE-2020-9075

CVE-2020-9075 affects Huawei Secospace USG6300/USG6300E (V500R001C30/V500R001C50/V500R001C60/V500R001C80/V500R005C00/V500R005C10/V600R006C00). The root cause is insufficient input verification in these devices, enabling an attacker with limited privileges to access a specific directory and potent...

CVE-2020-9075: Improper Input Validation

Huawei products Secospace USG6300;USG6300E with versions of V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10;V600R006C00 have a vulnerability of insufficient input verification. An attacker with limited privilege can exploit this vulnerability to access a specific directory...

Security Advisory - Insufficient Input Verification of Some Huawei products

Some Huawei products have a vulnerability of insufficient input verification. An attacker with limited privilege can exploit this vulnerability to access a specific directory. Successful exploitation of this vulnerability may lead to information leakage. Vulnerability ID: HWPSIRT-2020-05141 This...

PT-2020-20476

Name of the Vulnerable Software and Affected Versions Huawei Secospace USG6300;USG6300E versions V500R001C30 through V500R001C80 Huawei Secospace USG6300;USG6300E versions V500R005C00 through V500R005C10 Huawei Secospace USG6300;USG6300E version V600R006C00 Description The issue is related to...

Schneider Electric Easergy T300 Web Server Service Shutdown

The vulnerability of the software for the web server of the micro-programming controller for transformer automation of Schneider Electric Easergy T300 HU250 exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to remotely shut down the...

Cisco Firepower Management Center Data Compromise

The vulnerability of the Cisco Firepower Management Center software’s web interface exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information by sending a specially crafted HTTP request to the...

Cisco Firepower Management Center XSS

The vulnerability of the Cisco Firepower Management Center software’s web interface is related to insufficient verification of the data entered by users. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack using a specially created link...

IoT Field Network Director CoAP DoS

The vulnerability of the Constrained Application Protocol CoAP implementation in the IoT Field Network Director network management software is related to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures using a speciall...

Oracle One-to-One Fulfillment Print Server Data Access Modification

The vulnerability of the Print Server sub-component of the Oracle One-to-One Fulfillment component in the Oracle E-Business Suite exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to read, modify, add,...

CVE-2020-12832

WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input...

CVE-2020-12832

WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input...

CVE-2020-12832

WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input...

Google Chrome Omnibox Data Compromise

The vulnerability of the user interface in Google Chrome’s Omnibox is related to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability allows an attacker to manipulate the integrity of data by creating a malicious HTML page...

Google Chrome Extension Data Compromise

The vulnerability of Google Chrome’s browser extension security policies is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability allows an attacker to manipulate data integrity through the created HTML page...

Omnibox Data Compromise

The vulnerability of the Omnibox mechanism in the Google Chrome browser is related to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability allows an attacker to manipulate the integrity of data by creating a malicious HTML page...

Google Chrome Omnibox Data Compromise

The vulnerability of the user interface in Google Chrome’s Omnibox is related to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability allows an attacker to affect the integrity of data by using a created domain name...

SINAMICS PERFECT HARMONY GH180 Driver Data Compromise

The vulnerability of SINAMICS PERFECT HARMONY GH180 driver software is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the device...