|
247241
|
5.3 |
MEDIUM
Network
|
huawei
|
honor_8_lite_firmware
|
The Themes App Honor 8 Lite Huawei mobile phones with software of versions before Prague-L31C576B172, versions before Prague-L31C530B160, versions before Prague-L31C432B180 has a man-in-the-middle (M…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2017-8154
|
2024-11-21 12:33 |
2018-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247242
|
9.8 |
CRITICAL
Network
|
qualcomm
|
mdm9206_firmware mdm9607_firmware msm8909w_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_425_firmware sd_430_firmware sd_450_firmware sd_625_firmware sd_65…
|
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, an acc…
|
NVD-CWE-noinfo
|
CVE-2017-8274
|
2024-11-21 12:33 |
2018-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247243
|
9.8 |
CRITICAL
Network
|
qualcomm
|
sd_210_firmware sd_212_firmware sd_205_firmware sd_400_firmware sd_430_firmware sd_450_firmware sd_617_firmware sd_625_firmware sd_650_firmware sd_652_firmware sd_800_fi…
|
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 820, SD 835, an integer ove…
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2017-8275
|
2024-11-21 12:33 |
2018-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247244
|
7.2 |
HIGH
Network
|
huawei
|
fusionsphere_openstack_firmware
|
Huawei FusionSphere OpenStack V100R006C00SPC102(NFV) has a privilege escalation vulnerability. Due to improper privilege restrictions, an attacker with high privilege may obtain the other users' cert…
|
CWE-269
Improper Privilege Management
|
CVE-2017-8187
|
2024-11-21 12:33 |
2018-03-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247245
|
7.5 |
HIGH
Network
|
huawei
|
iptv_stb_firmware
|
Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability. An attacker could exploit this vulnerability to access the serial interface and…
|
NVD-CWE-noinfo
|
CVE-2017-8176
|
2024-11-21 12:33 |
2018-03-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247246
|
9.8 |
CRITICAL
Network
|
emc
|
data_protection_advisor
|
EMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x before patch 130 contains undocumented accounts with hard-coded passwords and various privileges. Affected accounts are: "Apollo System Tes…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2017-8013
|
2024-11-21 12:33 |
2018-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247247
|
5.5 |
MEDIUM
Local
|
huawei
|
mate_9_firmware
|
Mate 9 Huawei smart phones with versions earlier than MHA-AL00BC00B233 have a sensitive information leak vulnerability. An attacker can trick a user to install a malicious application to exploit this…
|
CWE-200
Information Exposure
|
CVE-2017-8165
|
2024-11-21 12:33 |
2018-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247248
|
3.3 |
LOW
Local
|
huawei
|
eva-al10_firmware eva-cl00_firmware eva-dl00_firmware eva-l09_firmware eva-l19_firmware eva-l29_firmware eva-tl00_firmware vie-l09_firmware vie-l29_firmware
|
Some Huawei smart phones with software EVA-L09C34B142; EVA-L09C40B196; EVA-L09C432B210; EVA-L09C440B138; EVA-L09C464B150; EVA-L09C530B127; EVA-L09C55B190; EVA-L09C576B150; EVA-L09C635B221; EVA-L09C63…
|
CWE-20
Improper Input Validation
|
CVE-2017-8164
|
2024-11-21 12:33 |
2018-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247249
|
6.1 |
MEDIUM
Network
|
gespage
|
gespage
|
Multiple cross-site scripting (XSS) vulnerabilities in Gespage before 7.4.9 allow remote attackers to inject arbitrary web script or HTML via the (1) printer name when adding a printer in the admin p…
|
CWE-79
Cross-site Scripting
|
CVE-2017-7998
|
2024-11-21 12:33 |
2018-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247250
|
9.8 |
CRITICAL
Network
|
gespage
|
gespage
|
Multiple SQL injection vulnerabilities in Gespage before 7.4.9 allow remote attackers to execute arbitrary SQL commands via the (1) show_prn parameter to webapp/users/prnow.jsp or show_month paramete…
|
CWE-89
SQL Injection
|
CVE-2017-7997
|
2024-11-21 12:33 |
2018-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|