2013-06-19

2013-06-20

2013-06-21

All (3) Critical (3) High (7) Medium (3) Low (2)

CVE-2012-4960 MEDIUM POC THREAT This Month

The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S2300, S3300, S5300, S3300HI, S5300HI, S5306, S6300, S2700,. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 12.3%.

Huawei Information Disclosure Acu Ar 19 29 49 Ar G3 +63

NVD Exploit-DB

CVSS 2.0

6.5

EPSS

12.3%

CVE-2012-6568 MEDIUM POC This Month

Buffer overflow in the back-end component in Huawei UTPS 1.0 allows local users to gain privileges via a long IDS_PLUGIN_NAME string in a plug-in configuration file. Rated medium severity (CVSS 6.9). Public exploit code available and no vendor patch available.

Buffer Overflow Huawei Utps

NVD Exploit-DB

CVSS 2.0

6.9

EPSS

0.1%

CVE-2013-1905 MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in the Zero Point theme 7.x-1.x before 7.x-1.9 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

XSS Zeropoint

NVD

CVSS 2.0

4.3

EPSS

0.5%