341 matches found
CVE-2021-40022
The weaver module has a vulnerability in parameter type verification,Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2021-40022
The weaver module has a vulnerability in parameter type verification,Successful exploitation of this vulnerability may affect data confidentiality...
Code injection
The weaver module has a vulnerability in parameter type verification,Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2021-40022
The weaver module has a vulnerability in parameter type verification,Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2021-40022
CVE-2021-40022 concerns the Huawei HarmonyOS weaver module. Connected sources describe a vulnerability in the weaver’s parameter handling that results from a missing parameter type checksum/verification, leading to possible data confidentiality impact. Documented impact: confidentiality exposure;...
Unspecified vulnerability in Huawei HarmonyOS (CNVD-2022-08459)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in the Huawei HarmonyOS weaver module, which stems from A vulnerability in the Huawei HarmonyOS weaver module in which the...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in the Huawei HarmonyOS weaver module, which stems from A vulnerability in the Huawei HarmonyOS weaver module in which the...
Command Execution Vulnerability in weaver e-cology 8, a Panavision Collaborative Business Software System
Panavision OA Office System is a coordination office software. A command execution vulnerability exists in weaver e-cology 8, a Panmicro collaborative business software system, which can be exploited by an attacker to gain server privileges...
CVE-2019-10272
An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring...
CVE-2019-10272
An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring...
Crlf injection
An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring...
CVE-2019-10272
CVE-2019-10272 affects Weaver e-cology 9.0. A CRLF injection vulnerability exists in the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, demonstrated by the %0aSet-cookie: substring. CVSS data indicate base scores of 4.3 (CVSS2) and 6.1 (CVSS3) with network access, no authenti...
CVE-2019-10272
An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring...
Weaver e-cology injection vulnerability
Weaver e-cology is a set of collaborative management application platform of China Panmicro Weaver Company. An injection vulnerability exists in Weaver e-cology version 9.0. The vulnerability is caused due to the lack of proper validation of user input during the process of constructing commands,...
CVE-2018-11385: Session Fixation Issue for Guard Authentication
Affected versions Symfony 2.7.0 to 2.7.47, 2.8.0 to 2.8.40, 3.3.0 to 3.3.16, 3.4.0 to 3.4.10 and 4.0.0 to 4.0.10 versions of the Symfony Security component are affected by this security issue. The issue has been fixed in Symfony 2.7.48, 2.8.41, 3.3.17, 3.4.11, and 4.0.11. Note that no fixes are...
Weaver E-cology /js/jquery/plugins/jqueryFileTree/connectors/jqueryFileTree. jsp parameters dir directory traversal vulnerability
No description provided by source...
Weaver E-cology /messager/users. data unauthorized access vulnerability
No description provided by source...
Weaver E-cology weaver. file. SignatureDownLoad injection vulnerability
No description provided by source...