686 matches found
Sierra Wireless AirLink ES450 ACEManager template_load.cgi Information Disclosure Exploit
An exploitable information disclosure vulnerability exists in the ACEManager templateload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a information leak, resulting in the disclosure of internal paths and files. An attacker can make an...
Sierra Wireless AirLink ES450 ACEManager Information Exposure Exploit
An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The ACEManager authentication functionality is done in plaintext XML to the web server. An attacker can listen to network traffic upstream from the device to...
Authentication flaw
The product M2M ETHERNET FW Versions 2.22 and prior, ETH-FW Versions 1.01 and prior is vulnerable in that an attacker can upload a malicious language file by bypassing the user authentication mechanism...
PT-2019-9532
Name of the Vulnerable Software and Affected Versions M2M ETHERNET versions 2.22 and prior ETH-FW versions 1.01 and prior Description The issue allows an attacker to upload a malicious language file by bypassing the user authentication mechanism. Recommendations For M2M ETHERNET versions 2.22 and...
Buffer overflow
In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Possible buffer overflow in TX and RX FIFOs of microcontroller in camera subsystem used to exchange commands and messages between Micro FW and CPP driver...
ABB M2M ETHERNET
1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION: Exploitable from an adjacent network/low skill level to exploit Vendor: ABB Equipment: M2M ETHERNET Vulnerability: Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to upload a malicious...
D-LINK Central WifiManager CWM-100 - Server-Side Request Forgery
Exploit Title: D-LINK Central WifiManager CWM-100 - Server-Side Request Forgery Author: John Page aka hyp3rlinx Date: 2018-11-09 Vendor: http://us.dlink.com Product Link: http://us.dlink.com/products/business-solutions/central-wifimanager-software-controller/ Version: Version 1.03 r0098 CVE: N/A...
fw-host-discovery (>=1.0.0, <=1.0.5) potentially affected by CVE-2018-16461 via libnmap (0.2.33)
libnmap NPM version 0.2.33 is affected by a known vulnerability. The following packages have a transitive dependency on libnmap and may be impacted: - fw-host-discovery =1.0.0, =1.0.5 Source cves: CVE-2018-16461 Source advisory: OSV:GHSA-7G2W-6R25-2J7P...
CVE-2018-11828
When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck in loop while trying to get random ADC samples in Snapdragon Mobile in version SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52...
CVE-2018-11828
CVE-2018-11828 affects Snapdragon Mobile platforms (SD210/SD212/SD205, SD425, SD430, SD450, SD625, SD650/52). The issue occurs when firmware tries to generate a random MAC address from a new software RNG and the ADC readings are constant, causing the device under test (DUT) to loop while collecti...
CVE-2018-12158
The CVE-2018-12158 issue affects Intel NUC Firmware Kits’ BIOS update utility. Insufficient input validation in the BIOS update executable for kits downloaded before May 24, 2018 could allow a local, privileged user to trigger a denial of service or information disclosure. Affected devices are In...
CVE-2018-12158: Exposure of Sensitive Information to an Unauthorized Actor
Insufficient input validation in BIOS update utility in Intel NUC FW kits downloaded before May 24, 2018 may allow a privileged user to potentially trigger a denial of service or information disclosure via local access...
PT-2018-2697
Name of the Vulnerable Software and Affected Versions Intel NUC FW kits versions prior to May 24, 2018 Description The issue is related to insufficient input validation in the BIOS update utility, which may allow a privileged user to trigger a denial of service or information disclosure via local...
Integer overflow
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, while processing preferred network offload scan results integer overflow may lead to buffer overflow when large frame length is received from FW...
CVE-2018-11297
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, a buffer over-read can occur In the WMA NDP event handler functions due to lack of validation of input value eventinfo which is received from FW...
CVE-2018-11297
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, a buffer over-read can occur In the WMA NDP event handler functions due to lack of validation of input value eventinfo which is received from FW...
PT-2018-10464
Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue arises when the WLAN FW fails to correctly fill the vdev id in stats events,...
CVE-2018-11263
In all Android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel, radioid is received from the FW and is used to access the buffer to copy the radio stats received for each radio from FW. If the radioid received from the FW is greater than or equal to...
PT-2018-12508
Name of the Vulnerable Software and Affected Versions Mondula Multi Step Form plugin versions prior to 1.2.6 Description The issue allows for XSS exploitation via specific fields in the contact form, including fw data id1, fw data id2, fw data id3, fw data id4, or the email field. This can be...
CVE-2018-12980
An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerability allows an authenticated user to upload arbitrary files to the file system with the permissions of the web server...