Lucene search
+L

941 matches found

NVD
NVD
added 2015/12/27 3:59 a.m.21 views

CVE-2015-8254

The Frontel protocol before 3 on RSI Video Technologies Videofied devices does not use integrity protection, which makes it easier for man-in-the-middle attackers to 1 initiate a false alarm or 2 deactivate an alarm by modifying the client-server data stream...

5.9CVSS5.7AI score0.00403EPSS
SaveExploits1References2
Prion
Prion
added 2015/12/27 3:59 a.m.17 views

Design/Logic Flaw

The Frontel protocol before 3 on RSI Video Technologies Videofied devices does not use integrity protection, which makes it easier for man-in-the-middle attackers to 1 initiate a false alarm or 2 deactivate an alarm by modifying the client-server data stream...

4.3CVSS7AI score0.00403EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2015/12/27 2:0 a.m.29 views

CVE-2015-8254

The Frontel protocol before 3 on RSI Video Technologies Videofied devices does not use integrity protection, which makes it easier for man-in-the-middle attackers to 1 initiate a false alarm or 2 deactivate an alarm by modifying the client-server data stream...

5.6AI score0.00403EPSS
SaveExploits1References2
CNVD
CNVD
added 2015/12/02 12:0 a.m.9 views

RSI Video Technologies Frontel Data Authenticity Validation Vulnerability

RSI Video Technologies Frontel is a suite of receiver software for monitoring Videofied wireless video alarm systems from the French company RSI Video Technologies. A security vulnerability exists in RSI Video Technologies Frontel, which arises from the program's failure to protect the integrity ...

5.9CVSS6.8AI score0.00403EPSS
SaveExploits1References1
Prion
Prion
added 2015/11/25 4:59 a.m.19 views

Authentication flaw

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 do not require authentication from Alarm Receiving Center ARC servers, which allows man-in-the-middle attackers to bypass intended access restrictions via a spoofed HSxx response...

5.8CVSS7.4AI score0.01497EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
added 2015/11/25 12:0 a.m.11 views

CSL DualCom GPRS CS2300-R SPT Man-in-the-Middle Attack Vulnerability

The CSL DualCom GPRS CS2300-R SPT is an alarm signaling board from CSL DualCom, UK, which provides a communication link between the burglar alarm and the monitoring center, allowing signals to be sent to the monitoring center when the alarm goes off, via the mobile network, ordinary phone lines o...

5.8CVSS7AI score0.01497EPSS
SaveExploits1References1
CNVD
CNVD
added 2015/11/25 12:0 a.m.10 views

CSL DualCom GPRS CS2300-R SPT is vulnerable (CNVD-2015-07790)

The CSL DualCom GPRS CS2300-R SPT is an alarm signaling board from CSL DualCom, UK, which provides a communication link between the burglar alarm and the monitoring center, allowing signals to be sent to the monitoring center when the alarm goes off, via the mobile network, ordinary phone lines o...

6.4CVSS7.1AI score0.02118EPSS
SaveExploits1References1
CNVD
CNVD
added 2015/11/25 12:0 a.m.16 views

CSL DualCom GPRS CS2300-R SPT is vulnerable.

The CSL DualCom GPRS CS2300-R SPT is an alarm signaling board from CSL DualCom, UK, which provides a communication link between the burglar alarm and the monitoring center, allowing signals to be sent to the monitoring center when the alarm goes off, via the mobile network, ordinary phone lines o...

4.3CVSS7.1AI score0.01654EPSS
SaveExploits1References1
CNVD
CNVD
added 2015/11/25 12:0 a.m.11 views

CSL DualCom GPRS CS2300-R SPT Arbitrary Command Execution Vulnerability

The CSL DualCom GPRS CS2300-R SPT is an alarm signaling board from CSL DualCom, UK, which provides a communication link between the burglar alarm and the monitoring center, allowing signals to be sent to the monitoring center when the alarm goes off, via the mobile network, ordinary phone lines o...

7.5CVSS7.8AI score0.03212EPSS
SaveExploits1References1
myhack58
myhack58
added 2015/09/01 12:0 a.m.15 views

Fluorite A1 Internet Alarm box crack details analysis-vulnerability warning-the black bar safety net

Fluorite is Hikvision's safety of life service brand,for the home and small business users with Visual security as the Foundation of caring, communication, sharing service. Fluorite business covers the fluorite cloud video APP, fluorite cloud video services platform, a series of Internet...

7.6AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.13 views

The vulnerability of the Cisco IOS operating system, which allows a remote attacker to trigger a service failure

The vulnerability of the ANI interface allows a remote attacker to trigger a service failure by using specially crafted AN messages...

7.8CVSS5.5AI score0.01911EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2015/03/12 12:0 a.m.8 views

SPCanywhere Code Injection Vulnerability

SPCanywhere is an application for accessing the Siemens SPC anti-theft alarm system. SPCanywhere suffers from a security vulnerability where unencrypted code is loaded, allowing an attacker to inject code and perform arbitrary actions on a mobile device...

6.8CVSS7.2AI score0.01066EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/03/09 12:0 a.m.9 views

SPCanywhere Authentication Bypass Vulnerability

SPCanywhere is the mobile application. The Siemens SPC intrusion alarm system can be accessed remotely from your cell phone. An authentication bypass vulnerability exists in SPCanywhere, which allows an attacker to bypass certain security restrictions and perform unauthorized operations...

2.1CVSS7.1AI score0.00398EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/03/09 12:0 a.m.6 views

SPCanywhere Information Disclosure Vulnerability

SPCanywhere is the mobile application. The Siemens SPC intrusion alarm system can be accessed remotely from your cell phone. SPCanywhere has an information disclosure vulnerability that allows attackers to exploit the vulnerability to obtain sensitive information...

4.3CVSS6.2AI score0.00674EPSS
SaveExploits0References1
NVD
NVD
added 2015/03/07 2:59 a.m.24 views

CVE-2015-1595

The Siemens SPCanywhere application for Android and iOS does not use encryption during lookups of system ID to IP address mappings, which allows man-in-the-middle attackers to discover alarm IP addresses and spoof servers by intercepting the client-server data stream...

4.3CVSS6.2AI score0.00674EPSS
SaveExploits0References1
Prion
Prion
added 2015/03/07 2:59 a.m.24 views

Code injection

The Siemens SPCanywhere application for Android and iOS does not use encryption during lookups of system ID to IP address mappings, which allows man-in-the-middle attackers to discover alarm IP addresses and spoof servers by intercepting the client-server data stream...

4.3CVSS6.6AI score0.00674EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2015/03/07 2:0 a.m.34 views

CVE-2015-1595

The Siemens SPCanywhere application for Android and iOS does not use encryption during lookups of system ID to IP address mappings, which allows man-in-the-middle attackers to discover alarm IP addresses and spoof servers by intercepting the client-server data stream...

6.2AI score0.00674EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2014/12/04 12:0 a.m.27 views

Scientific Linux Security Update : firefox on SL5.x, SL6.x, SL7.x i386/x86_64 (20141202)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2014-1587, CVE-2014-1590, CVE-2014-1592, CVE-2014-1593 A flaw was...

6.8CVSS8AI score0.04052EPSS
SaveExploits0References6
Cent OS
Cent OS
added 2014/12/03 10:51 p.m.74 views

firefox security update

CentOS Errata and Security Advisory CESA-2014:1919 Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS bas...

6.8CVSS7.2AI score0.04052EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2014/11/04 12:0 a.m.33 views

Scientific Linux Security Update : firefox on SL5.x, SL6.x, SL7.x i386/x86_64 (20141015)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2014-1574, CVE-2014-1578, CVE-2014-1581, CVE-2014-1576,...

7.5CVSS8AI score0.05087EPSS
SaveExploits0References7
Rows per page
Query Builder