3382 matches found
CVE-2019-6971: Undefined Security Weakness
An issue was discovered on TP-Link TL-WR1043ND V2 devices. An attacker can send a cookie in an HTTP authentication packet to the router management web interface, and fully control the router without knowledge of the credentials...
CVE-2019-6972: Inadequate Encryption Strength
An issue was discovered on TP-Link TL-WR1043ND V2 devices. The credentials can be easily decoded and cracked by brute-force, WordList, or Rainbow Table attacks. Specifically, credentials in the "Authorization" cookie are encoded with URL encoding and base64, leading to easy decoding. Also, the...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
PT-2019-12692
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine NetFlow Analyzer version 12.3 Description A SQL injection issue allows attackers to execute arbitrary SQL commands via the DeviceID parameter in the "/client/api/json/v2/nfareports/compareReport" API endpoint. Recommendations...
Low: Red Hat Security Advisory: kernel-alt security and bug fix update
An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
ZyXEL P-660HN-T1 V2 Missing Authentication / Password Disclosure Vulnerabilities
Exploit for hardware platform in category web applications Description: The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 2.00AAKK.3 devices. After accessing the page, the admin user's password can be obtained by viewing the HTML source code, and the...
CVE-2019-6725
The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 2.00AAKK.3 devices. After accessing the page, the admin user's password can be obtained by viewing the HTML source code, and the interface of the modem can be accessed as admin...
Design/Logic Flaw
The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 2.00AAKK.3 devices. After accessing the page, the admin user's password can be obtained by viewing the HTML source code, and the interface of the modem can be accessed as admin...
CVE-2019-6725
The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 2.00AAKK.3 devices. After accessing the page, the admin user's password can be obtained by viewing the HTML source code, and the interface of the modem can be accessed as admin...
CVE-2019-6725
Summary (CVE-2019-6725): Affected device: ZyXEL P-660HN-T1 V2 with firmware 2.00(AAKK.3). The rpWLANRedirect.asp page is accessible without authentication, allowing an admin password to be read from the HTML source and enabling interface access as admin. This leads to complete control of the mode...
PT-2019-18285
Name of the Vulnerable Software and Affected Versions ZyXEL P-660HN-T1 V2 version 2.00AAKK.3 Description The issue allows unauthorized access to the rpWLANRedirect.asp ASP page without authentication. By accessing this page, an attacker can obtain the admin user's password by viewing the HTML...
CVE-2019-6725: Use of Hard-coded Credentials
The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 2.00AAKK.3 devices. After accessing the page, the admin user's password can be obtained by viewing the HTML source code, and the interface of the modem can be accessed as admin...
openSUSE Security Update : the Linux Kernel (openSUSE-2019-1407) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)
The openSUSE Leap 42.3 kernel was updated to 4.4.179 to receive various security and bugfixes. Four new speculative execution information leak issues have been identified in Intel CPUs. bsc1111331 - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling MSBDS - CVE-2018-12127:...
Security update for the Linux Kernel (important)
openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2019:1407-1 Rating: important References: 1012382 1020645 1020989 1031492 1047487 1051510 1053043 1062056 1063638 1064388 1066223 1070872 1085539 1087092 1094244 1096480 1096728 1097104 1100132 1103186...
Memory Corruption Vulnerability in Softi ScanWiz V2
Softi ScanWiz is a scanning and optical character recognition software. A memory corruption vulnerability exists in Softi ScanWiz V2. An attacker could exploit this vulnerability to gain control of a user's system or crash the program...
EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1478)
According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In the eaget function in fs/jfs/xattr.c in the Linux kernel through 4.17.1, a memory corruption bug in JFS can be...
Omron NS5-V2 HMI Detection
Binary data 756187.prm...
Omron NS10-V2 HMI Detection
Binary data 756196.prm...