Lucene search
+L

168 matches found

Zero Day Initiative
Zero Day Initiative
•added 2018/03/23 12:00 a.m.•26 views

OMRON CX-Supervisor SCS File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OMRON CX-Supervisor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

5.3CVSS5AI score0.00295EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/03/23 12:00 a.m.•24 views

OMRON CX-Supervisor SCS File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OMRON CX-Supervisor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

5.3CVSS3.7AI score0.00337EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/03/23 12:00 a.m.•31 views

OMRON CX-Supervisor SCS Scatter Chart Object Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OMRON CX-Supervisor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

5.3CVSS3.7AI score0.00337EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/03/23 12:00 a.m.•21 views

OMRON CX-Supervisor SCS File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OMRON CX-Supervisor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

5.3CVSS3.7AI score0.00337EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/03/23 12:00 a.m.•25 views

OMRON CX-Supervisor SCS File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OMRON CX-Supervisor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

5.3CVSS3.7AI score0.00337EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/03/23 12:00 a.m.•26 views

OMRON CX-Supervisor SCS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OMRON CX-Supervisor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processi...

5.3CVSS5AI score0.00357EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2018/02/05 10:36 p.m.•16 views

scs-laboutique.com XSS vulnerability

Open Bug Bounty ID: OBB-553767 Description| Value ---|--- Affected Website:| scs-laboutique.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2017/05/08 4:22 p.m.•10 views

scsglobalservices.com XSS vulnerability

Vulnerable URL: https://www.scsglobalservices.com/solr/index.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 699241 VIP website status:| No Check scsglobalservices.com SSL...

6.3AI score
SaveExploits0
NVD
NVD
•added 2013/07/18 4:51 p.m.•28 views

CVE-2013-4875

The Uboot bootloader on the Verizon Wireless Network Extender SCS-2U01 allows physically proximate attackers to bypass the intended boot process and obtain a login prompt by connecting a crafted HDMI cable and sending a SysReq interrupt...

6.2CVSS6.5AI score0.00725EPSS
SaveExploits0References3
CVE
CVE
•added 2013/07/18 2:00 p.m.•65 views

CVE-2013-4875

The CVE-2013-4875 entry concerns the U-Boot bootloader used on the Verizon Wireless Network Extender SCS-2U01. The vulnerability allows a physically proximate attacker to bypass the intended boot process and reach a login prompt by connecting a crafted HDMI cable and issuing a SysReq interrupt. T...

6.2CVSS6.7AI score0.00725EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2013/07/18 2:00 p.m.•43 views

CVE-2013-4875

The Uboot bootloader on the Verizon Wireless Network Extender SCS-2U01 allows physically proximate attackers to bypass the intended boot process and obtain a login prompt by connecting a crafted HDMI cable and sending a SysReq interrupt...

6.5AI score0.00725EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2013/07/18 2:00 p.m.•35 views

CVE-2013-4874

The Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot environment variable...

6.4AI score0.00683EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2013/07/18 2:00 p.m.•40 views

CVE-2013-4876

The Verizon Wireless Network Extender SCS-2U01 has a hardcoded password for the root account, which makes it easier for physically proximate attackers to obtain administrative access by leveraging a login prompt...

6.7AI score0.0072EPSS
SaveExploits0References2
CVE
CVE
•added 2013/07/18 2:00 p.m.•63 views

CVE-2013-4877

CVE-2013-4877 affects Verizon Wireless Network Extender models SCS-26UC4 and SCS-2U01. The root issue is that these devices do not use CAVE authentication, which allows an attacker to sniff registration packets over the network and obtain ESN and MIN values from arbitrary phones, enabling cloning...

2.6CVSS7AI score0.00784EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2013/07/18 2:00 p.m.•57 views

CVE-2013-4876

The CVE-2013-4876 entry applies to the Verizon Wireless Network Extender SCS-2U01, where a hardcoded password for the root account enables physically proximate attackers to obtain administrative access via the device login prompt. The description documents the root cause (hardcoded root credentia...

6.2CVSS6.9AI score0.0072EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2013/07/18 2:00 p.m.•71 views

CVE-2013-4874

CVE-2013-4874 affects the Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4. The vulnerability allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot environment variable. Exploitation details ...

6.2CVSS6.6AI score0.00683EPSS
SaveExploits0References3Affected Software1
CERT
CERT
•added 2013/07/15 12:00 a.m.•24 views

Verizon Wireless Network Extender multiple vulnerabilities

Overview iSEC Partners has reported that the Verizon Wireless Network Extender models SCS-26UC4 and SCS-2U01 made by Samsung are susceptible to a local compromise using a custom HDMI cable. Once compromised the device can be used to eavesdrop on voice, text and data communication for mobile devic...

7.8AI score
SaveExploits0References1
NVD
NVD
•added 2011/10/29 10:55 a.m.•20 views

CVE-2011-1370

The default configuration of the Sametime configuration servlet SCS in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authentication requirement, which allows remote attackers to read the configuration settings by examining a response message...

5CVSS6.5AI score0.01135EPSS
SaveExploits1References2
Prion
Prion
•added 2011/10/29 10:55 a.m.•21 views

Default configuration

The default configuration of the Sametime configuration servlet SCS in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authentication requirement, which allows remote attackers to read the configuration settings by examining a response message...

5CVSS7AI score0.01135EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2011/10/29 10:00 a.m.•59 views

CVE-2011-1370

The vulnerability CVE-2011-1370 affects IBM Lotus Sametime Server, specifically the Sametime configuration servlet (SCS) in versions 7.0 through 8.5.2. The root cause is lack of authentication on the configuration servlet, enabling remote readers to access configuration settings via responses. Im...

5CVSS6.7AI score0.01135EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder