6055 matches found
CVE-2017-5250
In version 1.9.7 and prior of Insteon's Insteon for Hub Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner...
CVE-2017-5250
Technical details about CVE-2017-5250 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2017-5251
CVE-2017-5251 affects Insteon Hub (version 1012 and prior). The vulnerability stems from radio transmissions between the hub and connected devices not being encrypted, exposing confidentiality and integrity of communications. The available sources do not provide exploitation details or a confirme...
CVE-2017-5251
In version 1012 and prior of Insteon's Insteon Hub, the radio transmissions used for communication between the hub and connected devices are not encrypted...
CVE-2017-5250
In version 1.9.7 and prior of Insteon's Insteon for Hub Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner...
CVE-2017-5251: Authentication Bypass by Capture-replay
In version 1012 and prior of Insteon's Insteon Hub, the radio transmissions used for communication between the hub and connected devices are not encrypted...
PT-2018-8243
Name of the Vulnerable Software and Affected Versions: Insteon for Hub Android app versions 1.9.7 and prior Description: The issue concerns the insecure storage of the OAuth token used for authorizing user access. This token is not stored in an encrypted and secure manner, potentially exposing us...
PT-2018-8244
Name of the Vulnerable Software and Affected Versions: Insteon Hub versions 1012 and prior Description: The issue concerns the lack of encryption in radio transmissions between the hub and connected devices. Recommendations: For versions 1012 and prior, consider restricting access to the hub and...
CVE-2017-5250: Insecure Storage of Sensitive Information
In version 1.9.7 and prior of Insteon's Insteon for Hub Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner...
PYSEC-2018-151
An issue was discovered in Project Jupyter JupyterHub OAuthenticator 0.6.x before 0.6.2 and 0.7.x before 0.7.3. When using JupyterHub with GitLab group whitelisting for access control, group membership was not checked correctly, allowing members not in the whitelisted groups to create accounts on...
CVE-2018-5980
SQL Injection exists in the Solidres 2.5.1 component for Joomla! via the direction parameter in a hub.search action...
CVE-2018-6792
Multiple SQL injection vulnerabilities in Saifor CVMS HUB 1.3.1 allow an authenticated user to execute arbitrary SQL commands via multiple parameters to the /cvms-hub/privado/seccionesmib/secciones.xhtml resource. The POST parameters are jidt118, jidt120, jidt122, jidt124, jidt126, jidt128, and...
CVE-2018-6792
Multiple SQL injection vulnerabilities in Saifor CVMS HUB 1.3.1 allow an authenticated user to execute arbitrary SQL commands via multiple parameters to the /cvms-hub/privado/seccionesmib/secciones.xhtml resource. The POST parameters are jidt118, jidt120, jidt122, jidt124, jidt126, jidt128, and...
Sql injection
Multiple SQL injection vulnerabilities in Saifor CVMS HUB 1.3.1 allow an authenticated user to execute arbitrary SQL commands via multiple parameters to the /cvms-hub/privado/seccionesmib/secciones.xhtml resource. The POST parameters are jidt118, jidt120, jidt122, jidt124, jidt126, jidt128, and...
CVE-2018-6792
Consolidated view: Saifor CVMS HUB 1.3.1 contains Multiple SQL injection vulnerabilities exploitable by an authenticated user. The flaw allows executing arbitrary SQL commands via multiple POST parameters to /cvms-hub/privado/seccionesmib/secciones.xhtml (parameters j_idt118, j_idt120, j_idt122, ...
CVE-2018-6792
Multiple SQL injection vulnerabilities in Saifor CVMS HUB 1.3.1 allow an authenticated user to execute arbitrary SQL commands via multiple parameters to the /cvms-hub/privado/seccionesmib/secciones.xhtml resource. The POST parameters are jidt118, jidt120, jidt122, jidt124, jidt126, jidt128, and...
PT-2018-17748
Name of the Vulnerable Software and Affected Versions Saifor CVMS HUB version 1.3.1 Description The issue allows an authenticated user to execute arbitrary SQL commands. This is achieved via multiple parameters to the "/cvms-hub/privado/seccionesmib/secciones.xhtml" API endpoint. The vulnerable...
CVE-2018-6792: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Saifor CVMS HUB 1.3.1 allow an authenticated user to execute arbitrary SQL commands via multiple parameters to the /cvms-hub/privado/seccionesmib/secciones.xhtml resource. The POST parameters are jidt118, jidt120, jidt122, jidt124, jidt126, jidt128, and...
Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PRTL Interaction Hub Component (CNVD-2018-01735)
Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and other capabilities.PeopleSoft Enterprise PRTL Interaction Hub is one of the interactive components...
