2414 matches found
CVE-2018-4064
An exploitable unverified password change vulnerability exists in the ACEManager upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a unverified device configuration change, resulting in an unverified change of the user password on the...
CVE-2018-4064: Improper Authentication
An exploitable unverified password change vulnerability exists in the ACEManager upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a unverified device configuration change, resulting in an unverified change of the user password on the...
GREE+ application for Android cross-site request forgery vulnerability
GREE+ application for Android is an Android-based application for controlling and managing GREE air-conditioning devices from Gree Electric Appliances GREE, China. A cross-site request forgery vulnerability exists in version 1.4.0.8 of the GREE+ application for Android. The vulnerability stems fr...
PT-2019-14458
Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x through 3.2.3, and 3.3.x through 3.3.1 Description An issue allows an attacker to bypass the Secure Boot digest verification at startup using fault injection to...
pfSense cross-site scripting vulnerability (CNVD-2019-43357)
pfsense is an open source routing and firewall software , based on freebsd system customization and development . A cross-site scripting vulnerability exists in pfSense 2.4.4-p3 and earlier versions. The vulnerability stems from the unverified display of the username and delmac parameters in...
3S-Smart Software Solutions GmbH CODESYS V3
1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : 3S-Smart Software Solutions GmbH Equipment : CODESYS V3 Vulnerabilities : Unverified Ownership, Uncontrolled Memory Allocation 2. RISK EVALUATION Successful exploitation of these vulnerabilities...
CVE-2019-2281
An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS405, QCS605, SD 636, SD 665, SD 675...
Session fixation
An issue was discovered in PrinterOn Central Print Services CPS through 4.1.4. The core components that create and launch a print job do not perform complete verification of the session cookie that is supplied to them. As a result, an attacker with guest/pseudo-guest level permissions can bypass...
CVE-2018-17210
An issue was discovered in PrinterOn Central Print Services CPS through 4.1.4. The core components that create and launch a print job do not perform complete verification of the session cookie that is supplied to them. As a result, an attacker with guest/pseudo-guest level permissions can bypass...
PT-2019-11553 · Unknown +1 · Libiec61850 +1
Name of the Vulnerable Software and Affected Versions: libiec61850 versions 1.3.0 through 1.3.2 Description: The issue is related to a Buffer Overflow, which can cause a software crash. The component affected is the server example complex array. The attack vector involves sending a specific MMS...
CVE-2019-12803
In Hunesion i-oneNet version 3.0.7 3.0.53 and 4.0.4 4.0.16, the specific upload web module doesn't verify the file extension and type, and an attacker can upload a webshell. After the webshell upload, an attacker can use the webshell to perform remote code exection such as running a system comman...
Microsoft Office Spoofing Vulnerability
A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office documents. An attacker who successfully exploited this vulnerability could read or write information in Office documents. The security update addresses the...
Foxit Reader AcroForm Memory Misreference Vulnerability
Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A memory misreference vulnerability exists in Foxit Reader AcroForm. The vulnerability stems from a failure to verify the existence of an object before performing an operation on it. A remote attacker can exploit this...
Chamilo LMS Code Execution Vulnerability
Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, distance training and online question and answer sessions. A security vulnerability exists in Chamilo LMS version 1.11.8 and version 2.x,...
CVE-2019-7281
Prima Systems FlexAir, Versions 2.3.38 and prior. An unauthenticated user can send unverified HTTP requests, which may allow the attacker to perform certain actions with administrative privileges if a logged-in user visits a malicious website...
PT-2019-18511 · Prima Systems · Flexair
Name of the Vulnerable Software and Affected Versions: Prima Systems FlexAir versions 2.3.38 and prior Description: The issue allows an unauthenticated user to send unverified HTTP requests. This may enable an attacker to perform certain actions with administrative privileges if a logged-in user...
ABB HMI Missing Certification Bypass Vulnerability
The ABB CP635 HMI is a human-machine interface control panel from ABB Switzerland. A security vulnerability exists in the ABB CP635 HMI that stems from a transmission method that fails to use any form of encryption or fails to perform reliability checks on binaries of new HMI software. An attacke...
STOPzilla AntiMalware Null Pointer Dereference Vulnerability
STOPzilla AntiMalware is a malware removal software. A null pointer dereference vulnerability exists in the driver file szkg64.sys in STOPzilla AntiMalware 6.5.2.59. The vulnerability stems from an unverified output buffer address value starting at IOCtl 0x80002028. An attacker could exploit this...
Cisco NX-OS Software Data Forgery Issue Vulnerability
Cisco NX-OS Software is a set of data center-grade operating system software for switches from the U.S. company Cisco Cisco. A data forgery vulnerability exists in the Image Signature Verification feature in Cisco NX-OS Software. The vulnerability arises from a network system or product that does...
