491 matches found
CVE-2021-31340
A vulnerability has been identified in SIMATIC RF166C All versions V1.1 and V1.1 and V1.1 and V1.1 and V1.1 and V1.1 and V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V4.0. Affected devices do not properly handle large numbers of incoming connections. A...
CVE-2021-31340
CVE-2021-31340 affects Siemens SIMATIC RF devices (RF166C/185C/186C/186CI/188C/188CI; RF360R; Reader RF610R/615R/650R/680R/685R) with multiple versions vulnerable to Uncontrolled Resource Consumption (CWE-400) causing Denial-of-Service by not handling large numbers of incoming connections. Affect...
CVE-2021-31340: Uncontrolled Resource Consumption
A vulnerability has been identified in SIMATIC RF166C All versions V1.1 and V1.1 and V1.1 and V1.1 and V1.1 and V1.1 and V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V4.0. Affected devices do not properly handle large numbers of incoming connections. A...
CVE-2021-32403
Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery CSRF due to lack of security mechanisms for token protection and unsafe inputs and modules...
CVE-2021-32403
The CVE-2021-32403 entry concerns Intelbras Router RF 301K (Firmware 1.1.2) with a Cross Site Request Forgery (CSRF) vulnerability caused by missing token protection and unsafe inputs/modules. Public records in this set confirm an exploitable CSRF condition (including a DNS hijack scenario) and s...
CVE-2021-32402
CVE-2021-32402 affects Intelbras Router RF 301K Firmware 1.1.2. The vulnerability is a Cross Site Request Forgery (CSRF) caused by lack of input validation and insecure configurations in inputs and modules. The impact is described as CSRF, with no publicly documented exploit details in the provid...
CVE-2021-32402
Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery CSRF due to lack of validation and insecure configurations in inputs and modules...
CVE-2021-32403: Cross-Site Request Forgery (CSRF)
Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery CSRF due to lack of security mechanisms for token protection and unsafe inputs and modules...
PT-2021-19701
Name of the Vulnerable Software and Affected Versions: Intelbras Router RF 301K Firmware version 1.1.2 Description: The issue is related to a lack of security mechanisms for token protection and the presence of unsafe inputs and modules, making it vulnerable to Cross Site Request Forgery CSRF...
Intelbras Router RF 301K 跨站请求伪造漏洞
The Intelbras Router RF 301K is a router from Intelbras in China. A cross-site request forgery vulnerability exists in Intelbras Router RF 301K Firmware 1.1.2, which stems from a lack of authentication and insecure configuration in inputs and modules...
PT-2021-19700
Name of the Vulnerable Software and Affected Versions: Intelbras Router RF 301K Firmware version 1.1.2 Description: The issue is related to a lack of validation and insecure configurations in inputs and modules, leading to Cross Site Request Forgery CSRF. Recommendations: For Intelbras Router RF...
CVE-2021-32402: Cross-Site Request Forgery (CSRF)
Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery CSRF due to lack of validation and insecure configurations in inputs and modules...
Malicious Package
Overview All versions of nagibabel contained malicious code. The package ran rm -rf on the current working directory. Recommendation Remove the package from your environment...
PT-2020-21375
Name of the Vulnerable Software and Affected Versions anarchy versions affected versions not specified Description The issue concerns malicious code within the anarchy package, which executes a harmful command rm -rf / as part of its installation script. Recommendations Remove the anarchy package...
CVE-2020-14158
The ABUS Secvest FUMO50110 hybrid module does not have any security mechanism that ensures confidentiality or integrity of RF packets that are exchanged with an alarm panel. This makes it easier to conduct wAppLoxx authentication-bypass attacks...
Authentication flaw
The ABUS Secvest FUMO50110 hybrid module does not have any security mechanism that ensures confidentiality or integrity of RF packets that are exchanged with an alarm panel. This makes it easier to conduct wAppLoxx authentication-bypass attacks...
CVE-2020-14158
The CVE-2020-14158 issue affects the ABUS Secvest FUMO50110 hybrid module, which allegedly lacks confidentiality/integrity protections for RF packets exchanged with the alarm panel. Several connected sources confirm an authentication-bypass vulnerability enabling spoofing or bypass via exposed RF...
CVE-2020-14158
The ABUS Secvest FUMO50110 hybrid module does not have any security mechanism that ensures confidentiality or integrity of RF packets that are exchanged with an alarm panel. This makes it easier to conduct wAppLoxx authentication-bypass attacks...
CVE-2020-14158: Improper Authentication
The ABUS Secvest FUMO50110 hybrid module does not have any security mechanism that ensures confidentiality or integrity of RF packets that are exchanged with an alarm panel. This makes it easier to conduct wAppLoxx authentication-bypass attacks...
PT-2020-13899
Name of the Vulnerable Software and Affected Versions ABUS Secvest FUMO50110 hybrid module affected versions not specified Description The issue concerns the lack of security mechanisms to ensure confidentiality or integrity of RF packets exchanged with an alarm panel. This makes it easier to...