The vulnerability of the HECI subsystem of the microprogramming software for Intel Server Platform Services allows a perpetrator to cause a service failure.

The vulnerability of the HECI subsystem of the microprogramming software for Intel Server Platform Services SPS is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Local Packet Transport Service (LPTS) component in Cisco ASR 9000 routers allows a hacker to trigger a service failure.

The vulnerability of the Local Packet Transport Service LPTS component of Cisco ASR 9000 routers is related to the lack of input verification using the Precision Time Protocol PTP. Exploiting this vulnerability allows a malicious actor to remotely trigger a service failure...

CVE-2018-7907

Some Huawei products Agassi-L09 AGS-L09C100B257CUSTC100D001, AGS-L09C170B253CUSTC170D001, AGS-L09C199B251CUSTC199D001, AGS-L09C229B003CUSTC229D001, Agassi-W09 AGS-W09C100B257CUSTC100D001, AGS-W09C128B252CUSTC128D001, AGS-W09C170B252CUSTC170D001, AGS-W09C229B251CUSTC229D001,...

Information disclosure

Some Huawei products Agassi-L09 AGS-L09C100B257CUSTC100D001, AGS-L09C170B253CUSTC170D001, AGS-L09C199B251CUSTC199D001, AGS-L09C229B003CUSTC229D001, Agassi-W09 AGS-W09C100B257CUSTC100D001, AGS-W09C128B252CUSTC128D001, AGS-W09C170B252CUSTC170D001, AGS-W09C229B251CUSTC229D001,...

The vulnerability of the update mechanism for microprogramming software on Supermicro BMC controllers allows a hacker to execute arbitrary code.

The vulnerability of Supermicro microcontroller microprogramming software arises from insufficient verification of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by replacing the uploaded update...

The vulnerability of Microsoft Hyper-V hardware virtualization system for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Hyper-V hardware virtualization technology for Windows operating systems exists due to insufficient verification of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code using specially crafted packet data vSMB...

The vulnerability in the message processing function of the ContentStore/Base/CVDataPipe.dll library of the data backup and recovery system from CommVault allows a perpetrator to execute commands on the target operating system with SYSTEM privileges.

The vulnerability of the message processing function of the ContentStore/Base/CVDataPipe.dll library in the data backup and recovery system from CommVault is related to insufficient measures for verifying input data. Exploiting this vulnerability allows a malicious actor to execute commands on th...

CVE-2017-12718

A Classic Buffer Overflow issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump does not verify input buffer size prior to copying, leading to a buffer overflow, allowing remote code execution on t...

The vulnerability of the datamover module of the Linux operating system-based backup software NovaBACKUP allows a perpetrator to execute arbitrary commands.

The vulnerability of the datamover module of the Linux operating system-based NovaBACKUP data center backup software exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

CVE-2017-8181

The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a arbitrary memory write vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and...

Buffer overflow

The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and sends ...

Buffer overflow

The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and sends ...

CVE-2017-8181

The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a arbitrary memory write vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and...

CVE-2017-8179

The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and sends ...

Multiple Huawei products cross-border read vulnerability (CNVD-2017-34418)

Huawei RP200 and TE series are Huawei's all-in-one desktop and high-definition videoconferencing products for high-end customers. The out-of-bounds read vulnerability exists in several Huawei products, as the devices fail to adequately verify user input. A remote attacker could exploit this...

The vulnerability of the PROFINET Discovery and Configuration Protocol (PN-DCP) implementation in the Cisco IOS operating system allows a hacker to trigger a service failure.

The vulnerability of the PROFINET Discovery and Configuration Protocol PN-DCP implementation in the Cisco IOS operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to trigger a device restart and a Denial-of-Service attac...

The vulnerability of the embedded microprogramming software of the D-Link DIR-615L router allows a hacker to cause a service failure and reboot the device.

The vulnerability of the embedded microprogramming software of the D-Link DIR-615L router exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to trigger service failure and reboot the device by using an unauthorized GET request...

Security Advisory - Multiple Vulnerabilities in MTK Platform

There are two buffer overflow vulnerabilities and one arbitrary memory write vulnerability in the camera driver of MTK platform in some Huawei smart phones. Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege an...

Some Huawei apps suffer from denial of service vulnerability

Huawei Game Center is the official Android game download platform for Huawei terminal users. Skytone Skytone in English is an APP that provides Huawei flagship users with exclusive overseas Internet access services. A denial of service vulnerability exists in some of Huawei's APPs. The attacker...

The vulnerability of the NTP network time protocol’s speed-limiting service allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Network Time Protocol’s rate-limiting service exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause partial breaches of the confidentiality, integrity, and accessibility of the...