CVE-2020-6879

Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the web management page. The restriction of the front-end code can be bypassed by constructing a POST request message and sending the request to the creation of a static routing rule...

CVE-2020-6879

Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the web management page. The restriction of the front-end code can be bypassed by constructing a POST request message and sending the request to the creation of a static routing rule...

Design/Logic Flaw

Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the web management page. The restriction of the front-end code can be bypassed by constructing a POST request message and sending the request to the creation of a static routing rule...

CVE-2020-6879

Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the web management page. The restriction of the front-end code can be bypassed by constructing a POST request message and sending the request to the creation of a static routing rule...

CVE-2020-6879

CVE-2020-6879 affects ZXHN Z500 V1.0.0.2B1.1000 and ZXHN F670L V1.1.10P1N2E. The web management UI allows configuring a static prefix, but the front-end restriction can be bypassed by crafting a POST request to the static routing rule creation interface. The backend does not adequately validate a...

The vulnerability of the Parus-Budget unified information system for government management, related to insufficient verification of input data, allows a perpetrator to execute arbitrary codes.

The vulnerability of the unified information system for government management, Parus-Budget, is related to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by filling the buffer with incorrect port names from the printe...

CVE-2020-9240

Taurus-AN00B versions earlier than 10.1.0.156C00E155R7P2 have a buffer overflow vulnerability. A function in a module does not verify inputs sufficiently. Attackers can exploit this vulnerability by sending specific request. This could compromise normal service of the affected device...

CVE-2020-9122

Some Huawei products have an insufficient input verification vulnerability. Attackers can exploit this vulnerability in the LAN to cause service abnormal on affected devices.Affected product versions include:HiRouter-CD30-10 version 10.0.2.5;HiRouter-CT31-10 version 10.0.2.20;WS5200-12 version...

CVE-2020-9122

Some Huawei products have an insufficient input verification vulnerability. Attackers can exploit this vulnerability in the LAN to cause service abnormal on affected devices.Affected product versions include:HiRouter-CD30-10 version 10.0.2.5;HiRouter-CT31-10 version 10.0.2.20;WS5200-12 version...

CVE-2020-9238

Taurus-AN00B versions earlier than 10.1.0.156C00E155R7P2 have a buffer overflow vulnerability. A function in a module does not verify inputs sufficiently. Attackers can exploit this vulnerability by sending specific request. This could compromise normal service of the affected device...

CVE-2020-9122

Some Huawei products have an insufficient input verification vulnerability. Attackers can exploit this vulnerability in the LAN to cause service abnormal on affected devices.Affected product versions include:HiRouter-CD30-10 version 10.0.2.5;HiRouter-CT31-10 version 10.0.2.20;WS5200-12 version...

CVE-2020-9122

The CVE-2020-9122 issue is an insufficient input verification vulnerability impacting several Huawei devices (HiRouter-CD30-10 v10.0.2.5; HiRouter-CT31-10 v10.0.2.20; WS5200-12 v10.0.1.9; WS5281-10 v10.0.5.10; WS5800-10 v10.0.3.25; WS7100-10 v10.0.5.21; WS7200-10 v10.0.5.21). Root cause is improp...

CVE-2020-9238

Taurus-AN00B versions earlier than 10.1.0.156C00E155R7P2 have a buffer overflow vulnerability. A function in a module does not verify inputs sufficiently. Attackers can exploit this vulnerability by sending specific request. This could compromise normal service of the affected device...

Security Advisory - Buffer Read Overflow Vulnerability in Huawei Product

There is a buffer overflow vulnerability in Huawei Product. A function in a module does not verify inputs sufficiently. Attackers can exploit this vulnerability by sending specific request. This could compromise normal service of the affected device. Vulnerability ID: HWPSIRT-2020-02172 This...

The vulnerability of the Web Access component of the Primavera Portfolio Management software allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Web Access component of Primavera Portfolio Management software exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to modify, add, or delete data, or to gain unauthorized access to protected...

The vulnerability in the implementation of the Cisco Discovery protocol of the IP camera software from Cisco Video Surveillance series 8000 allows a intruder to execute arbitrary code or trigger a reboot of the vulnerable IP camera.

The vulnerability of the Cisco Discovery protocol implemented in Cisco Video Surveillance IP cameras of the 8000 series exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a restart of the vulnerable IP...

The vulnerability of the ar/tar component of the package installation, update, and removal process for software packages in the apt system lies in the lack of a mechanism to verify input data. This allows attackers to trigger service failures.

The vulnerability of the ar/tar component in the package installation, update, and removal process of the apt package manager is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker who operates remotely to cause service failures...

The vulnerability of the ClearFuncs component in the configuration management system and the remote execution of SaltStack operations allows a perpetrator to gain access to confidential data.

The vulnerability of the ClearFuncs component in the configuration management system and remote execution of SaltStack operations is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential...

The vulnerability of the Google Chrome browser’s media router component allows a hacker to compromise data integrity.

The vulnerability of the Google Chrome browser’s media router component is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially created HTML page...

CVE-2020-9248

Huawei FusionComput 8.0.0 have an improper authorization vulnerability. A module does not verify some input correctly and authorizes files with incorrect access. Attackers can exploit this vulnerability to launch privilege escalation attack. This can compromise normal service...