|
247971
|
9.8 |
CRITICAL
Network
|
qualcomm
|
mdm9206_firmware mdm9607_firmware msm8909w_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_425_firmware sd_430_firmware sd_450_firmware sd_625_firmware sd_65…
|
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, an acc…
|
NVD-CWE-noinfo
|
CVE-2017-8274
|
2024-11-21 12:33 |
2018-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247972
|
9.8 |
CRITICAL
Network
|
qualcomm
|
sd_210_firmware sd_212_firmware sd_205_firmware sd_400_firmware sd_430_firmware sd_450_firmware sd_617_firmware sd_625_firmware sd_650_firmware sd_652_firmware sd_800_fi…
|
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 820, SD 835, an integer ove…
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2017-8275
|
2024-11-21 12:33 |
2018-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247973
|
7.2 |
HIGH
Network
|
huawei
|
fusionsphere_openstack_firmware
|
Huawei FusionSphere OpenStack V100R006C00SPC102(NFV) has a privilege escalation vulnerability. Due to improper privilege restrictions, an attacker with high privilege may obtain the other users' cert…
|
CWE-269
Improper Privilege Management
|
CVE-2017-8187
|
2024-11-21 12:33 |
2018-03-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247974
|
7.5 |
HIGH
Network
|
huawei
|
iptv_stb_firmware
|
Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability. An attacker could exploit this vulnerability to access the serial interface and…
|
NVD-CWE-noinfo
|
CVE-2017-8176
|
2024-11-21 12:33 |
2018-03-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247975
|
9.8 |
CRITICAL
Network
|
emc
|
data_protection_advisor
|
EMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x before patch 130 contains undocumented accounts with hard-coded passwords and various privileges. Affected accounts are: "Apollo System Tes…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2017-8013
|
2024-11-21 12:33 |
2018-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247976
|
5.5 |
MEDIUM
Local
|
huawei
|
mate_9_firmware
|
Mate 9 Huawei smart phones with versions earlier than MHA-AL00BC00B233 have a sensitive information leak vulnerability. An attacker can trick a user to install a malicious application to exploit this…
|
CWE-200
Information Exposure
|
CVE-2017-8165
|
2024-11-21 12:33 |
2018-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247977
|
3.3 |
LOW
Local
|
huawei
|
eva-al10_firmware eva-cl00_firmware eva-dl00_firmware eva-l09_firmware eva-l19_firmware eva-l29_firmware eva-tl00_firmware vie-l09_firmware vie-l29_firmware
|
Some Huawei smart phones with software EVA-L09C34B142; EVA-L09C40B196; EVA-L09C432B210; EVA-L09C440B138; EVA-L09C464B150; EVA-L09C530B127; EVA-L09C55B190; EVA-L09C576B150; EVA-L09C635B221; EVA-L09C63…
|
CWE-20
Improper Input Validation
|
CVE-2017-8164
|
2024-11-21 12:33 |
2018-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247978
|
6.1 |
MEDIUM
Network
|
gespage
|
gespage
|
Multiple cross-site scripting (XSS) vulnerabilities in Gespage before 7.4.9 allow remote attackers to inject arbitrary web script or HTML via the (1) printer name when adding a printer in the admin p…
|
CWE-79
Cross-site Scripting
|
CVE-2017-7998
|
2024-11-21 12:33 |
2018-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247979
|
9.8 |
CRITICAL
Network
|
gespage
|
gespage
|
Multiple SQL injection vulnerabilities in Gespage before 7.4.9 allow remote attackers to execute arbitrary SQL commands via the (1) show_prn parameter to webapp/users/prnow.jsp or show_month paramete…
|
CWE-89
SQL Injection
|
CVE-2017-7997
|
2024-11-21 12:33 |
2018-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247980
|
9.8 |
CRITICAL
Network
|
vmware pivotal_software
|
spring_boot spring_data_rest
|
Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) and Spring Boot versions prior to 1.5.9, 2.0 M6 can use s…
|
CWE-20
Improper Input Validation
|
CVE-2017-8046
|
2024-11-21 12:33 |
2018-01-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|