7331 matches found
CVE-2022-1059 CROSS-SITE SCRIPTING CWE-79
Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials...
CVE-2022-1059
CVE-2022-1059 affects Aethon TUG Home Base Server versions prior to 24. The vulnerability is a reflected cross-site scripting (XSS) flaw in the Load tab of the Fleet Management Console. Unauthenticated attackers could trigger/script injection through this tab, potentially accessing data or impact...
CVE-2022-1059 CROSS-SITE SCRIPTING CWE-79
Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials...
CVE-2022-26423 MISSING AUTHORIZATION CWE-862
Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials...
CVE-2022-26423
CVE-2022-26423 affects the Aethon TUG Home Base Server (versions before 24). The vulnerability stems from missing authorization (CWE-862), enabling an unauthenticated attacker to freely access hashed user credentials. Affected product: TUG Home Base Server. Impact described in connected sources i...
CVE-2022-1066 MISSING AUTHORIZATION CWE-862
Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials...
CVE-2022-1066
CVE-2022-1066 affects Aethon TUG Home Base Server (versions prior to 24). Root cause: missing authorization allows an unauthenticated attacker to arbitrarily add new users with administrative privileges and delete/modify existing users; another vulnerability can expose hashed user credentials. Im...
Dell SupportAssist < 3.11.4 Multiple Vulnerabilities
According to its self-reported version number, the version of Dell SupportAssist Client is affected by multiple vulnerabilities. - Dell SupportAssist for Home PCs version 3.11.4 and prior and SupportAssist for Business PCs version 3.2.0 and prior contain information disclosure vulnerability. A...
Abode Systems, Inc. iota All-In-One Security Kit XCMD setAlexa OS command injection vulnerability
Talos Vulnerability Report TALOS-2022-1558 Abode Systems, Inc. iota All-In-One Security Kit XCMD setAlexa OS command injection vulnerability October 20, 2022 CVE Number CVE-2022-33189 SUMMARY An OS command injection vulnerability exists in the XCMD setAlexa functionality of Abode Systems, Inc. io...
CVE-2022-41588
The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity...
CVE-2022-41588
The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity...
CVE-2022-41587
Uncaptured exceptions in the home screen module. Successful exploitation of this vulnerability may affect stability...
CVE-2022-41587
Uncaptured exceptions in the home screen module. Successful exploitation of this vulnerability may affect stability...
CVE-2022-39065
A single malformed IEEE 802.15.4 Zigbee frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Smart app and TRÅDFRI remote control. The malformed Zigbee frame is an unauthenticated broadcast message, which means all vulnerable devices...
Design/Logic Flaw
The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity...
Huawei EMUI 代码问题漏洞
Huawei EMUI is an Android-based mobile operating system developed by Chinese company Huawei. A security vulnerability exists in Huawei EMUI version 11.0.1, which stems from an uncaught exception in the phone's desktop that affects stability...
CVE-2022-41588
The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity...
CVE-2022-39065
CVE-2022-39065 affects IKEA TRÅDFRI gateway. A single malformed IEEE 802.15.4 (Zigbee) frame, delivered as an unauthenticated broadcast message, can unanchor the gateway , making connected lighting unresponsive to the IKEA Home Smart app and TRÅDFRI remote control. The vulnerability is exploitabl...
PT-2022-25962 · Unknown · Home Screen Module
Name of the Vulnerable Software and Affected Versions: Home screen module affected versions not specified Description: The issue affects the service logic processing in the home screen module. Successful exploitation may impact data integrity. Recommendations: At the moment, there is no informati...