NewStart CGSL CORE 5.04 / MAIN 5.04 : freetype Vulnerability (NS-SA-2021-0013)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has freetype packages installed that are affected by a vulnerability: - Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM...

NewStart CGSL MAIN 6.02 : edk2 Vulnerability (NS-SA-2021-0058)

The remote NewStart CGSL host, running version MAIN 6.02, has edk2 packages installed that are affected by a vulnerability: - Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access. CVE-2019-14559 Note that Nessus h...

NewStart CGSL MAIN 6.02 : curl Vulnerability (NS-SA-2021-0067)

The remote NewStart CGSL host, running version MAIN 6.02, has curl packages installed that are affected by a vulnerability: - curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used...

NewStart CGSL CORE 5.04 / MAIN 5.04 : openldap Vulnerability (NS-SA-2021-0024)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has openldap packages installed that are affected by a vulnerability: - In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service daemon crash...

CVE-2021-21725

A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to access files in other directories by performing specific operations, resulting in information leak. This affects: ZXHN H196Q V9.1.0C2...

CVE-2021-21725

A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to access files in other directories by performing specific operations, resulting in information leak. This affects: ZXHN H196Q V9.1.0C2...

Design/Logic Flaw

A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to access files in other directories by performing specific operations, resulting in information leak. This affects: ZXHN H196Q V9.1.0C2...

CVE-2021-21725

CVE-2021-21725 affects ZTE ZXHN H196Q with V9.1.0C2. An attacker with elevated privileges can access files in other directories, resulting in information disclosure. CVSS details in the entry: CVSS2 base 2.7 (LOW) and CVSS3.1 base 5.7 (MEDIUM). Affected component/condition: information leakage vi...

CVE-2021-21725

A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to access files in other directories by performing specific operations, resulting in information leak. This affects: ZXHN H196Q V9.1.0C2...

CVE-2021-21724

A ZTE product has a memory leak vulnerability. Due to the product's improper handling of memory release in certain scenarios, a local attacker with device permissions repeatedly attenuated the optical signal to cause memory leak and abnormal service. This affects: ZXR10 8900E, all versions up to...

Memory corruption

A ZTE product has a memory leak vulnerability. Due to the product's improper handling of memory release in certain scenarios, a local attacker with device permissions repeatedly attenuated the optical signal to cause memory leak and abnormal service. This affects: ZXR10 8900E, all versions up to...

CVE-2021-21724

CVE-2021-21724 affects ZTE ZXR10 8900E (all versions up to V3.03.20R2B30P1). The issue is a memory leak caused by improper handling of memory release in certain scenarios. A local attacker with device permissions can repeatedly attenuate the optical signal to trigger the leak, leading to abnormal...

CVE-2021-21724

A ZTE product has a memory leak vulnerability. Due to the product's improper handling of memory release in certain scenarios, a local attacker with device permissions repeatedly attenuated the optical signal to cause memory leak and abnormal service. This affects: ZXR10 8900E, all versions up to...

Command Execution Vulnerability in ZXHN H168N at ZTE Corporation

ZTE Corporation is a leading global provider of integrated communications solutions. A command execution vulnerability exists in ZXHN H168N of ZTE Corporation, which can be exploited by an attacker to execute arbitrary commands...

Unauthorized Access Vulnerability in ZXHN F460 of ZTE Corporation

ZXHN F460 is ZTE's EPON mode optical cat. An unauthorized access vulnerability exists in the ZXHN F460 of ZTE Corporation, which can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in the EBG2800 enterprise business gateway management system of ZTE Corporation (CNVD-2021-18279)

ZTE Corporation is a leading global provider of integrated communications solutions. A weak password vulnerability exists in the EBG2800 Enterprise Business Gateway management system of ZTE Corporation, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in ZXV10 W815N Router from ZTE Corporation

ZTE Corporation is a leading global provider of integrated communications solutions. An unauthorized access vulnerability exists in the ZXV10 W815N router of ZTE Corporation, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in ZXHN H168N at ZTE CORPORATION

ZTE Corporation is a leading global provider of integrated communications solutions. An unauthorized access vulnerability exists in ZXHN H168N of ZTE Corporation, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in ZXHN F460 at ZTE Corporation

ZXHN F460 is ZTE's EPON mode optical cat. A command execution vulnerability exists in the ZXHN F460 of ZTE Corporation, which can be exploited by an attacker to execute arbitrary commands...

Weak Password Vulnerability in ZTE Corporation IAD 16FXS

ZTE Corporation is a leading global provider of integrated communications solutions. A weak password vulnerability exists in the ZTE Corporation IAD 16FXS, which can be exploited by attackers to obtain sensitive information...