|
196731
|
5.5 |
MEDIUM
Local
|
huawei
|
magic_ui emui
|
A memory buffer error vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to cause memory leakage and doS attacks by carefully construct…
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2020-9146
|
2024-11-21 14:40 |
2021-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196732
|
6.5 |
MEDIUM
Network
|
huawei
|
usg9500_firmware
|
There is a vulnerability in some version of USG9500 that the device improperly handles the information when a user logs in to device. The attacker can exploit the vulnerability to perform some operat…
|
NVD-CWE-noinfo
|
CVE-2020-9212
|
2024-11-21 14:40 |
2021-03-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196733
|
6.7 |
MEDIUM
Local
|
huawei
|
eudc660_firmware
|
The eUDC660 product has a resource management vulnerability. An attacker with high privilege needs to perform specific operations to exploit the vulnerability on the affected device. Due to improper …
|
NVD-CWE-noinfo
|
CVE-2020-9206
|
2024-11-21 14:40 |
2021-03-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196734
|
7.5 |
HIGH
Network
|
huawei
|
ngfw_module_firmware nip6300_firmware nip6600_firmware nip6800_firmware secospace_usg6300_firmware secospace_usg6500_firmware secospace_usg6600_firmware usg9500_firmware
|
There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit…
|
NVD-CWE-noinfo
|
CVE-2020-9213
|
2024-11-21 14:40 |
2021-03-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196735
|
7.8 |
HIGH
Local
|
zohocorp
|
manageengine_desktop_central
|
The MPS Agent in Zoho ManageEngine Desktop Central MSP build MSP build 10.0.486 is vulnerable to DLL Hijacking: dcinventory.exe and dcconfig.exe try to load CSUNSAPI.dll without supplying the complet…
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2020-9367
|
2024-11-21 14:40 |
2021-03-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196736
|
5.5 |
MEDIUM
Local
|
apache
|
asterixdb
|
When loading a UDF, a specially crafted zip file could allow files to be placed outside of the UDF deployment directory. This issue affected Apache AsterixDB unreleased builds between commits 580b81a…
|
CWE-22
Path Traversal
|
CVE-2020-9479
|
2024-11-21 14:40 |
2021-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196737
|
8.8 |
HIGH
Adjacent
|
tesla
|
solarcity_solar_monitoring_gateway
|
Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a .pyc file to store the cleartext password for the python user …
|
CWE-798 CWE-522
Use of Hard-coded Credentials Insufficiently Protected Credentials
|
CVE-2020-9306
|
2024-11-21 14:40 |
2021-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196738
|
6.5 |
MEDIUM
Adjacent
|
belden
|
hirschmann_hios
|
Hirschmann OS2, RSP, and RSPE devices before HiOS 08.3.00 allow a denial of service. An unauthenticated, adjacent attacker can cause an infinite loop on one of the HSR ring ports of the device. This …
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2020-9307
|
2024-11-21 14:40 |
2021-02-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196739
|
4.9 |
MEDIUM
Network
|
huawei
|
manageone
|
There has a CSV injection vulnerability in ManageOne 8.0.1. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input…
|
CWE-1236
Improper Neutralization of Formula Elements in a CSV File
|
CVE-2020-9205
|
2024-11-21 14:40 |
2021-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196740
|
6.8 |
MEDIUM
Physics
|
huawei
|
ais-bw80h-00_firmware
|
There is an insufficient integrity check vulnerability in Huawei Sound X Product. The system does not check certain software package's integrity sufficiently. Successful exploit could allow an attack…
|
CWE-354
Improper Validation of Integrity Check Value
|
CVE-2020-9118
|
2024-11-21 14:40 |
2021-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|