Information disclosure

TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default. Attacker on the local network can monitor traffic and capture the cookie and other sensitive information...

CVE-2021-28858

CVE-2021-28858 affects TP-Link TL-WPA4220 (firmware 4.0.2 Build 20180308 Rel.37064). The vulnerability is an information-disclosure issue caused by not using SSL by default, enabling an attacker on the local network to monitor traffic and capture cookies and other sensitive information. The provi...

CVE-2021-28858

TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default. Attacker on the local network can monitor traffic and capture the cookie and other sensitive information...

Johnson Controls Metasys

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Johnson Controls Equipment: Metasys Servers, Engines, and Tools Vulnerability: Improper Privilege Management 2. RISK EVALUATION Successful exploitation of this vulnerability could give an authenticated...

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. macOS suffers from an input validation error vulnerability that stems from insufficient validation of user-supplied input when processing paths in smbx. A remote attacker on a local network could exploit this...

Apple macOS 输入验证错误漏洞

Apple macOS is a suite of specialized operating systems developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in the smbx component of Apple MacOS, which arises from insufficient validation of user-supplied input in smbx. A remote attacker on a local network...

Apple macOS 缓冲区错误漏洞

Apple macOS is a suite of specialized operating systems developed by Apple Inc. for Mac computers. A buffer error vulnerability exists in the smbx component of Apple MacOS, which stems from a boundary error in smbx. A remote attacker on a local network could exploit this vulnerability to send...

Apple macOS 信息泄露漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. An information disclosure vulnerability exists in macOS, which stems from excessive data output in smbx. A remote attacker on a local network could exploit this vulnerability to gain unauthorized access to...

Apple macOS 缓冲区错误漏洞

Apple macOS is a suite of specialized operating systems developed by Apple Inc. for Mac computers. A buffer error vulnerability exists in the smbx component of Apple MacOS, which stems from a boundary error in smbx. A remote attacker on a local network could exploit this vulnerability to send...

Apple macOS Big Sur 安全漏洞

Apple macOS Big Sur is a mobile application app by Apple Inc. A security vulnerability exists in macOS Big Sur, which can be exploited by a remote attacker on a local network to perform a MitM attack. Versions affected:macOS: 11.0 20A2411, 11.0.1 20B29, 11.0.1 20B50, 11.1 20C69, 11.2 20D64, 11.2....

Sitel CAP/PRX Information Disclosure Vulnerability

Sitel CAP/PRX is an operating system from Sitel France. It is used for central processing units that have a 180 MHz ARM9 architecture. An information disclosure vulnerability exists in SITEL CAP/PRX firmware 5.2.01, which can be exploited by an attacker to access the device's internal configurati...

Unspecified Vulnerability in Sitel CAP/PRX

Sitel CAP/PRX is an operating system from Sitel France. It is used for central processing units that have a 180 MHz ARM9 architecture. A security vulnerability exists in SITEL CAP/PRX firmware 5.2.01, which can be exploited by an attacker to gain access to the device's local network to obtain...

sane-backends: NULL pointer dereference in sanei_epson_net_read function

A NULL pointer dereference in saneiepsonnetread in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, aka GHSL-2020-075...

CVE-2021-32456

SITEL CAP/PRX firmware version 5.2.01 allows an attacker with access to the local network of the device to obtain the authentication passwords by analysing the network traffic...

CVE-2021-32456 SITEL CAP/PRX cleartext transmission of sensitive information

SITEL CAP/PRX firmware version 5.2.01 allows an attacker with access to the local network of the device to obtain the authentication passwords by analysing the network traffic...

Sitel CAP/PRX 访问控制错误漏洞

Sitel CAP/PRX is an operating system from Sitel France. It is used for central processing units that have a 180 MHz ARM9 architecture. An information disclosure vulnerability exists in SITEL CAP/PRX firmware 5.2.01, which can be exploited by an attacker to access the device's internal configurati...

PT-2021-19705 · Sitel · Sitel Cap/Prx

Name of the Vulnerable Software and Affected Versions: SITEL CAP/PRX firmware version 5.2.01 Description: The issue allows an attacker with access to the local network to access the internal configuration database of the device via HTTP without any authentication. This could be exploited to obtai...

PT-2021-19708 · Sitel · Sitel Cap/Prx

Name of the Vulnerable Software and Affected Versions: SITEL CAP/PRX firmware version 5.2.01 Description: The issue allows an attacker with access to the local network of the device to obtain authentication passwords by analyzing network traffic. Recommendations: For SITEL CAP/PRX firmware versio...

CVE-2021-32456

SITEL CAP/PRX firmware version 5.2.01 allows an attacker with access to the local network of the device to obtain the authentication passwords by analysing the network traffic...

MERCUSYS Mercury X18G 安全漏洞

The Mercusys Mercury X18G is a router from the Chinese company Mercusys. A security vulnerability exists in MERCUSYS Mercury X18G 1.0.5 that allows denial of service via a crafted value to POST to listen for http LAN parameters...