930 matches found
ASUS Asuswrt-Merlin Information Disclosure Vulnerability (CNVD-2020-17192)
ASUS Asuswrt-Merlin is a firmware from Asus ASUS of Taiwan, China that runs in its routers. An information disclosure vulnerability exists in ASUS Asuswrt-Merlin. An attacker can exploit the vulnerability by reading the newlanip variable on the errorpage.htm page to obtain information about the...
The vulnerability of the VMware SD-WAN platform managed by programmatically configured networks, caused by VeloCloud, stems from the lack of protection for service data. This allows a malicious actor to gain unauthorized access to account information.
The vulnerability of the VMware SD-WAN platform for programmatically configurable networks by VeloCloud is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to account information...
CVE-2020-3118 (AKA: CDPwn)
A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability is due to improper validation of string input from certain fields in Cisc...
Cisco SD-WAN Solution SQL Injection Vulnerability
Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. An SQL injection vulnerability exists in the web interface of Cisco SD-WAN Solution vManage. The vulnerability stems from insufficient validation of user-supplied input. A remote...
USN-4228-1 linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities
It was discovered that a heap-based buffer overflow existed in the Marvell WiFi-Ex Driver for the Linux kernel. A physically proximate attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2019-14895, CVE-2019-14901 It was discovered that a...
Huawei P30 Information Disclosure Vulnerability
Huawei P30 is a smartphone from Chinese company Huawei Huawei. An information disclosure vulnerability exists in previous versions of Huawei P30 10.0.0.166 C00E66R1P11, which can be exploited by an attacker to cause an information disclosure by sending commands over a local area network...
CVE-2019-5276
Huawei smart phones with earlier versions than ELLE-AL00B 9.1.0.222C00E220R2P1 have a buffer overflow vulnerability. An attacker may intercept and tamper with the packet in the local area network LAN to exploit this vulnerability. Successful exploitation may cause the affected phone abnormal...
Huawei ELLE-AL00B Buffer Overflow Vulnerability
The Huawei ELLE-AL00B is a smartphone from the Chinese company Huawei Huawei. A buffer overflow vulnerability exists in versions prior to Huawei ELLE-AL00B 9.1.0.222 C00E220R2P1, which can be exploited by an attacker to cause an anomaly in the handset by intercepting and tampering with data over ...
UBUNTU-CVE-2019-19529
In the Linux kernel before 5.3.11, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcbausb.c driver, aka CID-4d6636498c41...
Broadcom Brocade SANnav Encryption Issue Vulnerability
Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in the encryption key generation process in the PBE algorithm of Broadcom Brocade SANnav versions prior to 2.0. An attacker can exploit this vulnerability to decrypt passwords...
CVE-2019-15021
A security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that can allow an attacker to easily identify instances of Zingbox Inspectors in a local area network...
CVE-2019-15021
A security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that can allow an attacker to easily identify instances of Zingbox Inspectors in a local area network...
Security feature bypass
A security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that can allow an attacker to easily identify instances of Zingbox Inspectors in a local area network...
CVE-2019-15021
CVE-2019-15021 affects Palo Alto Networks Zingbox Inspector prior to 1.295 (
CVE-2019-15021
A security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that can allow an attacker to easily identify instances of Zingbox Inspectors in a local area network...
Server-side Request Forgery in Zingbox Inspector
A security vulnerability exists in the Zingbox Inspector that can allow an attacker to easily identify instances of Zingbox Inspectors in a local area network. Ref: CVE-2019-15021 The vulnerability allows for an attacker to easily identify any running instances of Zingbox Inspector on a local are...
Server-side Request Forgery in Zingbox Inspector
A security vulnerability exists in the Zingbox Inspector that can allow an attacker to easily identify instances of Zingbox Inspectors in a local area network. Ref: CVE-2019-15021 The vulnerability allows for an attacker to easily identify any running instances of Zingbox Inspector on a local are...
Improper access control
A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT devices that connect with itself via http://target/smarthome/devicecontrol without any authentication. CVSS 3.0 base score 10 Confidentiality, Integrity...
CVE-2019-11061
CVE-2019-11061 concerns the ASUS HG100 SmartHome Gateway. A broken access control flaw in HG100 firmware versions up to 4.00.06 lets an attacker on the same LAN access http://[target]/smarthome/devicecontrol without authentication, enabling remote control of connected IoT devices. Publicly stated...
CVE-2019-11061 HG100 has a broken access control vulnerability in its Web API Server
A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT devices that connect with itself via http://target/smarthome/devicecontrol without any authentication. CVSS 3.0 base score 10 Confidentiality, Integrity...