CVSS: 9.0EPSS: 0%CPEs: 2EXPL: 0CVE-2016-2405
https://notcve.org/view.php?id=CVE-2016-2405
12 Apr 2016 — Huawei Policy Center with software before V100R003C10SPC020 allows remote authenticated users to gain privileges and cause a denial of service (system crash) via a crafted URL. Huawei Policy Center con software en versiones anteriores a V100R003C10SPC020 permite a usuarios remotos autenticados obtener privilegios y provocar una denegación de servicio (caída de sistema) a través de una URL manipulada. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160217-01-policycenter-en • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 8.1EPSS: 0%CPEs: 3EXPL: 0CVE-2016-3675
https://notcve.org/view.php?id=CVE-2016-3675
11 Apr 2016 — SQL injection vulnerability in Huawei Policy Center with software before V100R003C10SPC020 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to system databases. Vulnerabilidad de inyección SQL en Huawei Policy Center con software en versiones anteriores a V100R003C10SPC020 permite a usuarios remotos autenticados ejecutar comandos SQL arbitrarios a través de vectores no especificados relacionados con bases de datos de sistema. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160325-01-policycenter-en • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 10.0EPSS: 0%CPEs: 160EXPL: 0CVE-2015-2808 – SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipher
https://notcve.org/view.php?id=CVE-2015-2808
01 Apr 2015 — The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue. El algoritmo RC4, utilizado en el protocolo TLS y el prot... • http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034 • CWE-327: Use of a Broken or Risky Cryptographic Algorithm •