Insteon Hub 2245-222 Buffer Overflow Vulnerability (CNVD-2019-13144)

The Insteon Hub is an Insteon central controller product from Insteon USA. This product can remotely control light bulbs, wall switches, air conditioners and more in your home. A buffer overflow vulnerability exists in Insteon Hub 2245-222 using firmware version 1012. An attacker could exploit th...

CVE-2017-16255

An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can send an authenticated HTTP...

CVE-2017-16254

An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can send an authenticated HTTP...

CVE-2018-2245

...

CVE-2018-2245

CVE-2018-2245 is rejected/not used; this candidate is not an active vulnerability entry.

Insteon Hub 2245-222 Buffer Overflow Vulnerability

The Insteon Hub 2245-222 is an Insteon central controller device from Insteon USA. This product can remotely control light bulbs, wall switches, air conditioners and more in your home. A stack-based buffer overflow vulnerability exists in the Insteon Hub 2245-222 using firmware version 1012. An...

Insteon Hub Stack Buffer Overflow Vulnerability

The Insteon Hub is an Insteon central controller product from Insteon USA. This product can remotely control light bulbs, wall switches, air conditioners and more in your home. A stack buffer overflow vulnerability exists in the PubNub service in Insteon Hub versions 2245-222 using firmware versi...

CVE-2017-14453

CVE-2017-14453 describes multiple PubNub-related buffer-overflow vulnerabilities in Insteon Hub 2245-222 with firmware 1012. The issues stem from unsafe strcpy usage when handling PubNub JSON fields (cc_r, ad_r, al, ak) that overflow 16-byte buffers in insteon_pubnub, enabling potential code exec...

CVE-2017-16252

Specially crafted commands sent through the PubNub service in Insteon Hub 2245-222 with firmware version 1012 can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability.At 0x9d014cc0 the value for the cmd...

CVE-2010-2245

CVE-2010-2245 is an XML External Entity (XXE) vulnerability in Apache Wink (1.1.1 and earlier) that could allow a remote attacker to read arbitrary files or cause a denial of service via crafted XML data. Connected IBM advisories show affected IBM products implementing Wink: IBM InfoSphere Inform...

CVE-2017-2245

The WordPress plugin Shortcodes Ultimate is affected by CVE-2017-2245: a directory traversal vulnerability in versions prior to 4.10.0. An authenticated administrator can read arbitrary files via crafted requests. Impact is information disclosure on the server. Remediation: upgrade to version 4.1...

CVE-2015-2245

CVE-2015-2245 affects Huawei Ascend P7 (Sophia-L09) running Android 4.4/EMUI 3.0. The vulnerability arises in the phone module when a third-party app sends specific broadcast messages or enables specific UIs, allowing remote-like triggering that leads to a denial of service (phone process crash)....

CVE-2012-2245

This CVE-2012-2245 entry is rejected/not used and does not represent an active vulnerability.

Moodle 2.2.x < 2.2.11 Multiple Vulnerabilities

Binary data 9415.prm...

CVE-2016-2245

HP Support Assistant prior to 8.1.52.1 contains an authentication bypass vulnerability (CVE-2016-2245). Remote attackers could bypass authentication via unspecified vectors. Impact per sources indicates high confidentiality/integrity/availability concerns (CVSS v3 base score 9.8, critical). HP ha...

Security Advisory- Local Denial of Service Vulnerability in Huawei Ascend P7

Huawei Ascend P7 Sophia-L09 uses Android 4.4, which is the upgrade version of EMUI 3.0. The phone module crashes when a third-party app sends specific broadcast messages or enables specific UIs. Vulnerability ID: HWPSIRT-2014-1233 This vulnerability has been assigned Common Vulnerabilities and...

Ubuntu 14.04 LTS : json-c vulnerabilities (USN-2245-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2245-1 advisory. Florian Weimer discovered that json-c incorrectly handled buffer lengths. An attacker could use this issue with a specially-crafted large JSON document t...

CVE-2014-2245

SQL injection vulnerability in the News module in CMS Made Simple CMSMS before 1.11.10 allows remote authenticated users with the "Modify News" permission to execute arbitrary SQL commands via the sortby parameter to admin/moduleinterface.php. NOTE: some of these details are obtained from third...

CVE-2014-2245

The CVE-2014-2245 entry concerns a SQL injection in the News module of CMS Made Simple (CMSMS). The vulnerability affects CMSMS prior to version 1.11.10 and can be triggered by remote authenticated users who hold the Modify News permission, via the sortby parameter to admin/moduleinterface.php. T...

Fedora Update for moodle FEDORA-2013-12964

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...