3174 matches found
CVE-2021-22398
There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations. Affected product versions...
CVE-2021-22398
There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations. Affected product versions...
CVE-2021-22398
There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations. Affected product versions...
CVE-2021-22398
The CVE-2021-22398 entry corresponds to a Huawei logic‑error vulnerability in several smartphones. Affected devices and software include Hulk-AL00C (9.1.1.201), Jennifer-AN00C (10.1.1.171), Jenny-AL10B (10.1.0.228), and OxfordPL-AN10B (10.1.0.116). The root cause is a logic error that does not pr...
Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway DoS (cisco-sa-alg-dos-hbBS7SZE)
According to its self-reported version, Cisco IOS-XE Software is affected by a denial of service vulnerability in the DNS Application Layer Gateway ALG functionality used by Network Address Translation NAT. The vulnerability is due to a logic error that occurs when an affected device inspects...
Cisco Adaptive Security Appliance Software Release 7.0.0 IPsec DoS (cisco-sa-asa-ftd-ipsec-dos-TFKQbgWC)
A vulnerability in the software cryptography module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker or an unauthenticated attacker in a man-in-the-middle position to cause an unexpected reload of the...
CVE-2021-22924
libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths case insensitively,which could lead ...
Apple iOS和Apple iPadOS 授权问题漏洞
Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple iOS 14.7 and iPadOS 14.7 have an authorization issue vulnerability that originates from a logic error in the Kernel...
go-proxyproto 处理逻辑错误漏洞
Pires go-proxyproto is Pires an open source application . It provides a secure way to securely transfer connection information functions across multiple layers of NAT or TCP proxies. A processing logic error vulnerability exists in go-proxyproto, which can be exploited to cause a denial of servic...
Business Logic Errors in seriawei/zkeacms
✍️ Description ZKEACMS is vulnerable to Business Logic error through negative product amount. 🕵️♂️ Proof of Concept PoC file content: HTML setTimeout = form.submit , 2000; 1. Save the above content into an HTML file. 2. Open it on the browser. Check the shopping cart negative value. PoC video. 💥...
CVE-2021-1422 Cisco Adaptive Security Appliance Software Release 9.16.1 and Cisco Firepower Threat Defense Software Release 7.0.0 IPsec Denial of Service Vulnerability
A vulnerability in the software cryptography module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker or an unauthenticated attacker in a man-in-the-middle position to cause an unexpected reload of the...
Multiple Huawei smartphone logic error vulnerabilities
Huawei cell phones are smartphones from Huawei Huawei of China. Multiple Huawei smartphones are vulnerable to a logic error vulnerability that stems from the fact that the system does not reasonably restrict certain actions when the healthy use of the phone feature is turned on. An attacker could...
Security Advisory - Logic Error Vulnerability in Several Smartphones
There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations. Vulnerability ID:...
华为手机 安全漏洞
Huawei cell phones are smartphones from Huawei Huawei of China. Multiple Huawei smartphones are vulnerable to a logic error vulnerability that stems from the fact that the system does not reasonably restrict certain actions when the healthy use of the phone feature is turned on. An attacker could...
Stormshield SES Evolution 处理逻辑错误漏洞
Stormshield SES Evolution is a security solution from the French company Stormshield. A Processing Logic Error vulnerability exists in SES Evolution due to the product's failure to properly handle a user's read-only privileges, which can be exploited by an attacker to modify a security policy wit...
Qualcomm 芯片处理逻辑错误漏洞
Qualcomm QCA6574AU and others are products of Qualcomm Incorporated Qualcomm.The QCA6574AU is a central processing unit CPU product.The SD 636 is a central processing unit CPU product.The SDM630 is a central processing unit CPU product.The SDM630 is a central processing unit CPU product.The SDM63...
Huawei Emui and Magic UI processing logic error vulnerability
Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to a processing logic error, which stems from a configuration flaw in the device. An attacker could exploit the vulnerability to hijac...
华为智能手机处理逻辑错误漏洞
Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to a processing logic error, which stems from a configuration flaw in the device. An attacker could exploit the vulnerability to hijac...
Logic error in fee subtraction
Handle 0xsanson Vulnerability details Impact In LibBalances.applyTrade we need to collect a fee from the trade. The current code however subtracts a fee from the short position and adds it to the long. The correct implementation is to subtract a fee to both see TracerPerpetualSwaps.solL272. This...
Remote Mouse 处理逻辑错误漏洞
Remote Mouse is an application. A Remote Mouse. A Processing Logic Error vulnerability exists in Emote Interactive Remote Mouse, which originates when the application does not validate certain security operations when a user navigates to the cmd.exe file while using the Image Transfer Folder...