CVE Vulnerability Catalog

FusionSphere OpenStack versions V100R006C00 and V100R006C10 have a command injection vulnerability due to insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit these vulnerabilities to gain root privileges by sending malicious commands.

FusionSphere OpenStack versions V100R006C00 and V100R006C10 have a command injection vulnerability due to insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit this vulnerability by sending malicious commands to gain root privileges.

The UMA product with software versions V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

The UMA product with software versions V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

The UMA product with software version V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

The UMA product with software version V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

The UMA product with software version V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

The UMA product with software versions V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

The UMA product with software versions V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

The UMA product with software versions V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

VCM5010 with software versions earlier than V100R002C50SPC100 has an authentication bypass vulnerability and an arbitrary file upload vulnerability. An unauthenticated attacker can bypass the login process, while an authenticated attacker can upload unvalidated files to the system.

VCM5010 with software versions earlier than V100R002C50SPC100 has an arbitrary file upload vulnerability. The software does not validate the uploaded files, allowing an authenticated attacker to upload arbitrary files to the system.

VCM5010 with software versions earlier than V100R002C50SPC100 has a command injection vulnerability. This is due to insufficient validation of user input.

TIT-AL00 smartphones with software versions earlier than TIT-AL00C583B214 have an exposed system interface vulnerability. The software provides a system interface for interaction with external applications, but calling the interface is not properly restricted.

The boot loaders in Honor 5A smart phones with software Versions earlier than CAM-TL00C01B193, CAM-TL00HC00B193, and CAM-UL00C00B193 have a buffer overflow vulnerability. An attacker with root privileges on an Android system may trick a user into installing a malicious APP that can modify data to cause buffer overflow on the next system reboot.

Bastet in P10 Plus and P10 smartphones with software earlier than VKY-AL00C00B123 and VTR-AL00C00B123 has a buffer overflow vulnerability. An attacker with root privileges on the Android system may trick a user into installing a malicious app that can modify data and cause a buffer overflow on the next system reboot.

Bastet in P10 Plus and P10 smartphones with software earlier than VKY-AL00C00B123 and VTR-AL00C00B123 has a buffer overflow vulnerability. An attacker with root privileges on the Android system may trick a user into installing a malicious app that can modify data and cause buffer overflow on the next system reboot.

Bastet in P10 Plus and P10 smartphones with software earlier than VKY-AL00C00B123 and VTR-AL00C00B123 versions has a buffer overflow vulnerability. An attacker with root privileges on the Android system may trick a user into installing a malicious APP that can modify data to cause a buffer overflow on the next system reboot.

Devices DP300, TP3106, ViewPoint 9030, eCNS210_TD, eSpace 7950, eSpace IAD, and eSpace U1981 have an input validation vulnerability. A remote attacker may exploit this vulnerability by sending a malformed packet to the device.