CVE-2016-3081

Apache Struts 2.x is affected by CVE-2016-3081 where Dynamic Method Invocation (DMI) enabled leads to remote code execution via a method: prefix, tied to chained expressions. The affected ranges listed are 2.3.19–2.3.20.2, 2.3.21–2.3.24.1, and 2.3.25–2.3.28. Public exploit evidence exists (Exploi...

CVE-2015-8671

Huawei LogCenter V100R001C10 contains an authentication-based privilege-escalation vulnerability where an authenticated attacker can tamper with requests using a tool and submit requests to elevate privileges, impacting certain system functions. The issue is associated with CVE-2015-8671. Huawei’...

CVE-2015-8670

Huawei LogCenter (V100R001C10) is affected by CVE-2015-8670 due to lack of legitimacy checking of incoming device information, allowing an authenticated attacker to add abnormal device data to the log collection module and cause a denial of service. The vulnerability impacts the log collection co...