24 matches found
CVE-2021-22410
There is a XSS injection vulnerability in iMaster NCE-Fabric V100R019C10. A module of the client does not verify the input sufficiently. Attackers can exploit this vulnerability by modifying input after logging onto the client. This may compromise the normal service of the client...
EUVD-2021-9556
Malicious code in bioql PyPI...
Huawei iMaster NCE-Fabric Cross-Site Scripting Vulnerability
Huawei IMaster Nce-Fabric is a network automation and intelligence platform that integrates management, control, analysis, and artificial intelligence Ai functions from Huawei China.A security vulnerability exists in Huawei iMaster NCE-Fabric, which stems from a client-side module that fails to...
CVE-2021-22410
There is a XSS injection vulnerability in iMaster NCE-Fabric V100R019C10. A module of the client does not verify the input sufficiently. Attackers can exploit this vulnerability by modifying input after logging onto the client. This may compromise the normal service of the client...
CVE-2021-22410
There is a XSS injection vulnerability in iMaster NCE-Fabric V100R019C10. A module of the client does not verify the input sufficiently. Attackers can exploit this vulnerability by modifying input after logging onto the client. This may compromise the normal service of the client...
CVE-2021-22410
There is a XSS injection vulnerability in iMaster NCE-Fabric V100R019C10. A module of the client does not verify the input sufficiently. Attackers can exploit this vulnerability by modifying input after logging onto the client. This may compromise the normal service of the client...
Cross site scripting
There is a XSS injection vulnerability in iMaster NCE-Fabric V100R019C10. A module of the client does not verify the input sufficiently. Attackers can exploit this vulnerability by modifying input after logging onto the client. This may compromise the normal service of the client...
CVE-2021-22410
There is a XSS injection vulnerability in iMaster NCE-Fabric V100R019C10. A module of the client does not verify the input sufficiently. Attackers can exploit this vulnerability by modifying input after logging onto the client. This may compromise the normal service of the client...
CVE-2021-22410
CVE-2021-22410 affects Huawei iMaster NCE-Fabric V100R019C10. A client-side module fails to adequately validate input, enabling XSS when an attacker modifies input after logging in. Impact: potential disruption of normal client service. Connected sources (Huawei PSIRT advisory and multiple CVE re...
CVE-2021-22410: Improper Neutralization of Input During Web Page Generation
There is a XSS injection vulnerability in iMaster NCE-Fabric V100R019C10. A module of the client does not verify the input sufficiently. Attackers can exploit this vulnerability by modifying input after logging onto the client. This may compromise the normal service of the client...
Huawei IMaster Nce-Fabric Cross-site Scripting Vulnerability
Huawei IMaster Nce-Fabric is a network automation and intelligence platform that integrates management, control, analysis, and artificial intelligence Ai functions from Huawei China.A security vulnerability exists in Huawei iMaster NCE-Fabric, which stems from a client-side module that fails to...
PT-2021-15033
Name of the Vulnerable Software and Affected Versions: iMaster NCE-Fabric version V100R019C10 Description: The issue is related to a XSS injection vulnerability. A module of the client does not verify the input sufficiently, allowing attackers to exploit this by modifying input after logging onto...
PT-2021-17445
Name of the Vulnerable Software and Affected Versions Welch Allyn Service Tool versions prior to v1.10 Welch Allyn Connex Device Integration Suite – Network Connectivity Engine NCE versions prior to v5.3 Welch Allyn Software Development Kit SDK versions prior to v3.2 Welch Allyn Connex Central...
CVE-2019-7594
Metasys ADS/ADX servers and NAE/NIE/NCE engines before version 9.0 use a hardcoded RC2 key for Site Management Portal (SMP) encryption. This flaw can allow an attacker with access to the key to decrypt captured network traffic between the Metasys components and the SMP client. Affected products a...
CVE-2019-7593
Metasys ADS/ADX servers and NAE/NIE/NCE engines prior to version 9.0 use a shared RSA key pair for certain Site Management Portal (SMP) encryption, allowing an attacker with access to the key to decrypt captured traffic between the Metasys components and the SMP client. CVE-2019-7593 is authentic...
CVE-2019-7594: Use of Hard-coded Cryptographic Key
Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a hardcoded RC2 key for certain encryption operations involving the Site Management Portal SMP...
CVE-2019-7593: Reusing a Nonce, Key Pair in Encryption
Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a shared RSA key pair for certain encryption operations involving the Site Management Portal SMP...
Johnson Controls MS-NCE2516-0 Metasys NCE Controller
Binary data 764893.prm...