Design/Logic Flaw

Unencrypted way of remote control and communications in Hanwha Techwin Smartcams...

CVE-2018-6295

Unencrypted way of remote control and communications in Hanwha Techwin Smartcams...

CVE-2018-6295

Unencrypted way of remote control and communications in Hanwha Techwin Smartcams...

CVE-2018-6295

CVE-2018-6295 affects Hanwha Techwin SmartCam family with unencrypted remote control and communications. The NVD entry notes unencrypted remote control over network with low authentication, enabling potential unauthorized commands and control and high impact (C/H/I/A all high in CVSS3). Connected...

PT-2018-17455

Name of the Vulnerable Software and Affected Versions Hanwha Techwin Smartcams affected versions not specified Description The issue concerns an unencrypted method of remote control and communications in the affected devices. Recommendations At the moment, there is no information about a newer...

D-Link DCS-933L and DCS-934L Privilege Acquisition Vulnerability

The D-Link DCS-933L and DCS-934L are both network camera products from Terasic D-Link. mydlink+ is an application for remote access to camera devices such as the DCS-933L and DCS-934L. A security vulnerability exists in mydlink+ version 3.8.5 build 259 in the D-Link DCS-933L version 1.05.04 and...

CVE-2018-6019

Samsung Display Solutions App before 3.02 for Android allows man-in-the-middle attackers to spoof B2B content by leveraging failure to use encryption during information transmission...

CVE-2018-7698

An issue was discovered in D-Link mydlink+ 3.8.5 build 259 for DCS-933L 1.05.04 and DCS-934L 1.05.04 devices. The mydlink+ app sends the username and password for connected D-Link cameras such as DCS-933L and DCS-934L unencrypted from the app to the camera, allowing attackers to obtain these...

CVE-2018-7698

An issue was discovered in D-Link mydlink+ 3.8.5 build 259 for DCS-933L 1.05.04 and DCS-934L 1.05.04 devices. The mydlink+ app sends the username and password for connected D-Link cameras such as DCS-933L and DCS-934L unencrypted from the app to the camera, allowing attackers to obtain these...

Default credentials

An issue was discovered in D-Link mydlink+ 3.8.5 build 259 for DCS-933L 1.05.04 and DCS-934L 1.05.04 devices. The mydlink+ app sends the username and password for connected D-Link cameras such as DCS-933L and DCS-934L unencrypted from the app to the camera, allowing attackers to obtain these...

CVE-2018-7698

An issue was discovered in D-Link mydlink+ 3.8.5 build 259 for DCS-933L 1.05.04 and DCS-934L 1.05.04 devices. The mydlink+ app sends the username and password for connected D-Link cameras such as DCS-933L and DCS-934L unencrypted from the app to the camera, allowing attackers to obtain these...

CVE-2018-7698

The CVE-2018-7698 entry describes a vulnerability in D-Link mydlink+ 3.8.5 build 259 for DCS-933L (1.05.04) and DCS-934L (1.05.04). The root cause is that the mydlink+ app transmits the user credentials (username/password) unencrypted from the app to the camera, allowing an attacker to obtain cre...

PT-2018-18218

Name of the Vulnerable Software and Affected Versions: D-Link mydlink+ version 3.8.5 build 259 D-Link DCS-933L version 1.05.04 D-Link DCS-934L version 1.05.04 Description: An issue was discovered where the mydlink+ app sends the username and password for connected D-Link cameras unencrypted from...

CVE-2018-7698: Insufficiently Protected Credentials

An issue was discovered in D-Link mydlink+ 3.8.5 build 259 for DCS-933L 1.05.04 and DCS-934L 1.05.04 devices. The mydlink+ app sends the username and password for connected D-Link cameras such as DCS-933L and DCS-934L unencrypted from the app to the camera, allowing attackers to obtain these...

Trend Micro Email Encryption Gateway Information Disclosure Vulnerability

Trend Micro Email Encryption is a suite of identity-based email encryption solutions from Trend Micro, Inc. The Trend Micro Email Encryption Gateway TMEEG is one of the gateway products that provides data protection. An information disclosure vulnerability exists in Trend Micro Email Encryption...

CVE-2017-5251

In version 1012 and prior of Insteon's Insteon Hub, the radio transmissions used for communication between the hub and connected devices are not encrypted...

CVE-2017-5251

In version 1012 and prior of Insteon's Insteon Hub, the radio transmissions used for communication between the hub and connected devices are not encrypted...

qpid-proton: reactor sends messages in clear if ssl is requested but not available

The 1 proton.reactor.Connector, 2 proton.reactor.Container, and 3 proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain...

CVE-2017-16924

Remote Information Disclosure and Escalation of Privileges in ManageEngine Desktop Central MSP 10.0.137 allows attackers to download unencrypted XML files containing all data for configuration policies via a predictable /client-data//collections//usermgmt.xml URL, as demonstrated by passwords and...

CVE-2017-16924

Remote Information Disclosure and Escalation of Privileges in ManageEngine Desktop Central MSP 10.0.137 allows attackers to download unencrypted XML files containing all data for configuration policies via a predictable /client-data//collections//usermgmt.xml URL, as demonstrated by passwords and...