5200 matches found
Moxa EDR-810 Service Agent Multiple Denial of Service Vulnerabilities(CVE-2017-14438 - CVE-2017-14439)
Summary Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted packet can cause a denial of service. An attacker can send a large packet to 4000/tcp and 4001/tcp to trigger this vulnerability. Tested Version...
Moxa EDR-810 Web Server URI Denial of Service Vulnerability(CVE-2017-12124)
Summary An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in the web server crashing. An attacker can send a crafted URI to trigger this...
Moxa EDR-810 Web Server OpenVPN Config Multiple Command Injection Vulnerabilities
Summary An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into various paramaters in the...
Moxa EDR-810 Cleartext Transmission of Password Vulnerability
Summary An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317. An attacker can look at network traffic to get the admin password for the device. The attacker can then use the credentials to login as...
Moxa EDR-810 Web Server Certificate Signing Request Command Injection Vulnerability
Summary An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the CN= parm in the...
PT-2018-4331 · D Link · Dir-815
Name of the Vulnerable Software and Affected Versions: D-Link DIR-815 versions prior to 2.07.B01 Description: The issue allows remote attackers to obtain sensitive information by leveraging cleartext storage of the administrative password. Recommendations: For versions prior to 2.07.B01, update t...
PT-2018-4329 · D Link · D-Link Dir-815
Name of the Vulnerable Software and Affected Versions: D-Link DIR-815 versions prior to 2.07.B01 Description: The issue concerns the remote administration UI, allowing remote attackers to bypass intended access restrictions. Recommendations: For versions prior to 2.07.B01, update the firmware to...
Intel® 2G Firmware Update for Modems using ETWS
Summary: Buffer overflow in ETWS processing module Intel® XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R allows remote attacker to potentially execute arbitrary code via an adjacent network. Description: In late February 2018, external security researchers identified and disclosed to Intel a...
PT-2018-18960 · D Link · D-Link Dir-868L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-868L devices with Singapore StarHub firmware versions prior to v1.21SHCb03 Description: The issue allows remote attackers to execute arbitrary code on the affected devices. This is related to the authentication.cgi component...
HPESBHF03831 rev.1 - HPE Integrated Lights-Out 2 (iLO 2), Remote Disclosure of Information
Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 2 iLO 2 prior to 2.33 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2015-4000 |...
JVN#93397125: Multiple vulnerabilities in WZR-1750DHP2
WZR-1750DHP2 provided by BUFFALO INC. is a wireless LAN router. WXR-1900DHP2 contains multiple vulnerabilities listed below. Missing Authentication for Critical Function CWE-306 - CVE-2018-0554 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H| Base Score:...
Ubiquiti Inc.: UniFi Video Server web interface admin user Firmware Update path traversal leading to local system compromise
The UniFi Video Server for Windows web interface Firmware Update functionality, under certain circumstances, does not validate firmware download destinations to ensure they are within the intended destination directory tree. It accepts a request with a URL to firmware update information. If the...
Brocade Fabric OS Vulnerabilities - US
Lenovo Security Advisory: LEN-18214 Potential Impact: Cross-site Scripting, Denial of Service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2017-6225, CVE-2017-6227 Summary Description: Brocade issued advisories BSA-2018-525 and BSA-2018-526 related to vulnerabilities in Broca...
Brocade Fabric OS Vulnerabilities - Lenovo Support US
No description provided...
15-Year-old Finds Flaw in Ledger Crypto Wallet
A 15-year-old security researcher has discovered a serious flaw in cryptocurrency hardware wallets made by Ledger, a French company whose popular products are designed to physically safeguard public and private keys used to receive or spend the user’s cryptocurrencies. Ledger's Nano-S...
Geutebruck IP Cameras
CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit. Vendor: Geutebrück Equipment: IP Cameras Vulnerabilities: Improper Authentication, SQL Injection, Cross-Site Request Forgery, Improper Access Control, Server-Side Request Forgery, Cross-site Scripting AFFECTED PRODUCTS...
SUSE-SU-2018:0674-1 Security update for kernel-firmware
This update for kernel-firmware fixes the following issues: - CVE-2015-1142857: Add 7.13.1.0 bnx2x firmware files to fix a ethernet flow control vulnerability in SRIOV devices bsc1077355...
SUSE-SU-2018:0671-1 Security update for kernel-firmware
This update for kernel-firmware fixes the following issues: - CVE-2015-1142857: Add 7.13.1.0 bnx2x firmware files for ethernet flow control vulnerability in SRIOV devices bsc1077355...
Hanwha Techwin Smartcam Insecure Firmware Update Method Vulnerability
Hanwha Techwin Smartcam is a series of security surveillance cameras based on cloud-based services. Hanwha Techwin Smartcam is vulnerable to an insecure firmware update method vulnerability, for which a detailed vulnerability description is not currently available...
