3397 matches found
PT-2020-9804
Name of the Vulnerable Software and Affected Versions homee Brain Cube V2 versions 2.23.0 and earlier Description The issue allows attackers with physical access to gain root access by manipulating the U-Boot environment via the Command Line Interface CLI after connecting to the internal UART...
CVE-2019-16258: Missing Authentication for Critical Function
The bootloader of the homee Brain Cube V2 through 2.23.0 allows attackers with physical access to gain root access by manipulating the U-Boot environment via the CLI after connecting to the internal UART interface...
esp-v2:service_control_filter_fuzz_test: Global-buffer-overflow in google::api_proxy::service_control::set_response_code_class
Project: https://github.com/GoogleCloudPlatform/esp-v2.git Detailed Report: https://oss-fuzz.com/testcase?key=5753507539058688 Project: esp-v2 Fuzzing Engine: libFuzzer Fuzz Target: servicecontrolfilterfuzztest Job Type: libfuzzerasanesp-v2 Platform Id: linux Crash Type: Global-buffer-overflow RE...
CVE-2020-10244
JPaseto before 0.3.0 generates weak hashes when using v2.local tokens...
CVE-2020-10244
JPaseto before 0.3.0 generates weak hashes when using v2.local tokens...
CVE-2020-10244
JPaseto before 0.3.0 generates weak hashes when using v2.local tokens...
CVE-2020-10244
JPaseto before 0.3.0 generates weak hashes when using v2.local tokens...
PT-2020-12000
Name of the Vulnerable Software and Affected Versions JPaseto versions prior to 0.3.0 Description The issue generates weak hashes when using v2.local tokens. Recommendations For versions prior to 0.3.0, update to version 0.3.0 or later to resolve the issue...
CVE-2020-10244: Inadequate Encryption Strength
JPaseto before 0.3.0 generates weak hashes when using v2.local tokens...
PT-2020-12010
Name of the Vulnerable Software and Affected Versions ThemeREX Addons plugin versions prior to 2020-03-09 Description The issue concerns a lack of access control on the "/trx addons/v2/get/sc layout" API endpoint, allowing any user to execute PHP functions. This is due to the trx addons rest get ...
The vulnerability of the cgi-bin/index2.asp component of Genexis Platinum-P4410-V2 and Genexis Platinum-4410 routing software allows a hacker to obtain authentication data necessary to access the router administration panel.
The vulnerability of the cgi-bin/index2.asp component of Genexis Platinum-P4410-V2 and Genexis Platinum-4410 routing software is related to authentication deficiencies. Exploiting this vulnerability could allow an attacker to obtain authentication credentials necessary to access the router...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2018-1433)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1178)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1181)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2018-1372)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2020-7874
Name of the Vulnerable Software and Affected Versions: Magento Community Edition versions prior to 1.9.2.1 Magento Enterprise Edition versions prior to 1.14.2.1 PHP versions prior to 5.4.24 or 5.5.8 Description: The issue allows remote authenticated users to execute arbitrary PHP code via the...
NewStart CGSL CORE 5.05 / MAIN 5.05 : kernel-rt Multiple Vulnerabilities (NS-SA-2019-0253)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has kernel-rt packages installed that are affected by multiple vulnerabilities: - A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make...
Authentication flaw
An authentication bypass exists in the web management interface in Belkin F5D8236-4 v2...
CVE-2013-3085
CVE-2013-3085 concerns Belkin F5D8236-4 v2 where an authentication bypass exists in the device’s web management interface. The CVSS-based metrics indicate a high to critical impact: CVSS 2.0 base score 7.5 (Network attack, no authentication, partial confidentiality/integrity/availability impact) ...