Lucene search
+L

197 matches found

Packet Storm
Packet Storm
added 2021/08/16 12:0 a.m.336 views

COMMAX Smart Home IoT Control System CDP-1020n SQL Injection

COMMAX Smart Home IoT Control System CDP-1020n SQL Injection Authentication Bypass Vendor: COMMAX Co., Ltd. Prodcut web page: https://www.commax.com Affected version: CDP-1020n 481 System Summary: COMMAX Smart Home System is a smart IoT home solution for a large apartment complex that provides...

0.5AI score
SaveExploits0
zdt
zdt
added 2021/08/16 12:0 a.m.172 views

COMMAX Smart Home IoT Control System CDP-1020n - SQL Injection Authentication Bypass Vulnerability

Exploit Title: COMMAX Smart Home IoT Control System CDP-1020n - SQL Injection Authentication Bypass Exploit Author: LiquidWorm Vendor Homepage: https://www.commax.com COMMAX Smart Home IoT Control System CDP-1020n SQL Injection Authentication Bypass Vendor: COMMAX Co., Ltd. Prodcut web page:...

0.6AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
added 2021/08/15 12:0 a.m.547 views

COMMAX Smart Home IoT Control System CDP-1020n SQL Injection Authentication Bypass

Summary COMMAX Smart Home System is a smart IoT home solution for a large apartment complex that provides advanced life values and safety. Description The application suffers from an SQL Injection vulnerability. Input passed through the 'id' POST parameter in 'loginstart.asp' is not properly...

6.1AI score
SaveExploits0
Huntr
Huntr
added 2021/07/09 3:4 p.m.7 views

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

✍️ Description pimcore is a Open Source Data & Experience Management Platform PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce this package is vulnerable for Stored XSS thru gender tag 🕵️‍♂️ Proof of Concept 💥 Impact This vulnerability is capable of stored xss 📍 Location Gender.phpL21...

1.2AI score
SaveExploits0
Cvelist
Cvelist
added 2021/06/01 7:57 p.m.33 views

CVE-2021-26111

A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0 to 6.0.6, 3.6.11 and below may allow an attacker on an adjacent network to exhaust available memory by sending specifically crafted LLDP/CDP/EDP packets to the device...

6.5CVSS6.7AI score0.00381EPSS
SaveExploits0References1
CVE
CVE
added 2021/06/01 7:57 p.m.74 views

CVE-2021-26111

CVE-2021-26111 affects FortiSwitch memory management: versions 6.4.0–6.4.6, 6.2.0–6.2.6, 6.0.0–6.0.6, 3.6.11 and earlier are vulnerable. A missing release of memory after effective lifetime can allow an attacker on an adjacent network to exhaust available memory by sending specially crafted LLDP/...

6.5CVSS6.4AI score0.00381EPSS
SaveExploits0References1Affected Software1
Veeam
Veeam
added 2021/05/19 12:0 a.m.224 views

VeeamCDP I/O filter cannot be installed "Error: the operation is not allowed in the current state"

Challenge The installation of the Veeam CDP I/O Filter fails during deployment with the following error: Error Installing VeeamCDP components on cluster: ... Error: the operation is not allowed in the current state Error Failed to install VeeamCDP I/O filters: Failed to install VeeamCDP I/O...

6.8AI score
SaveExploits0Affected Software1
Veeam
Veeam
added 2021/05/05 12:0 a.m.210 views

Veeam CDP service does not start after the installation of the storage integration plug-in

Challenge Certain primary storage integration plug-in setup programs leave the Veeam Continuous Data Protection Veeam CDP service stopped after the installation. The following plug-ins are affected: Dell EMC SC Compellent Plug-In for Veeam Backup & Replication Tintri IntelliFlash Plug-In for Veea...

6.8AI score
SaveExploits0Affected Software1
Veeam
Veeam
added 2021/04/22 12:0 a.m.55 views

How to uninstall Veeam CDP VAIO filter driver manually

Article Applicability This article documents the manual filter driver removal process. If Veeam Backup & Replication is available, the recommended method for uninstalling the I/O Filter is documented in the user guide. Veeam Backup & Replication - Updating and Uninstalling I/O Filter Objective Th...

7.2AI score
SaveExploits0Affected Software1
Veeam
Veeam
added 2020/11/24 12:0 a.m.26 views

General HCI Storage & Veeam CDP support status

Veeam CDP supports the following HCI Storage systems: HPE dHCI HPE Simplivity NetApp HCI Cisco HyperFlex requirements see KB4093 Nutanix AOS with VMware vSphere If this KB article did not resolve your issue or you need further assistance with Veeam software, please create a Veeam Support Case. To...

6.9AI score
SaveExploits0Affected Software1
ThreatPost
ThreatPost
added 2020/10/08 5:30 p.m.67 views

Cisco Fixes High-Severity Webex, Security Camera Flaws

Cisco has issued patches for high-severity vulnerabilities plaguing its popular Webex video-conferencing system, its video surveillance IP cameras and its Identity Services Engine network administration product. Overall, Cisco on Wednesday issued the three high-severity flaws along with 11...

8.3CVSS1AI score0.00881EPSS
SaveExploits0References9
NVD
NVD
added 2020/09/23 1:15 p.m.20 views

CVE-2020-7122

Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the CDP Cisco Discovery Protocol process in the switch. This applies to firmwa...

7.5CVSS0.00992EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/23 1:15 p.m.8 views

CVE-2020-7122

Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the CDP Cisco Discovery Protocol process in the switch. This applies to firmwa...

7.5CVSS5.8AI score0.00992EPSS
SaveExploits0References1
Prion
Prion
added 2020/09/23 1:15 p.m.32 views

Memory corruption

Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the CDP Cisco Discovery Protocol process in the switch. This applies to firmwa...

5CVSS7.8AI score0.00992EPSS
SaveExploits0References1Affected Software6
Cvelist
Cvelist
added 2020/09/23 12:35 p.m.30 views

CVE-2020-7122

Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the CDP Cisco Discovery Protocol process in the switch. This applies to firmwa...

8AI score0.00992EPSS
SaveExploits0References1
NVD
NVD
added 2020/08/17 7:15 p.m.20 views

CVE-2020-1549

An elevation of privilege vulnerability exists when the Windows CDP User Components improperly handle memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

7.8CVSS8.6AI score0.00976EPSS
SaveExploits0References1
OSV
OSV
added 2020/08/17 7:15 p.m.3 views

CVE-2020-1550

An elevation of privilege vulnerability exists when the Windows CDP User Components improperly handle memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

7.8CVSS7.2AI score0.00856EPSS
SaveExploits0References1
NVD
NVD
added 2020/08/17 7:15 p.m.16 views

CVE-2020-1550

An elevation of privilege vulnerability exists when the Windows CDP User Components improperly handle memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

7.8CVSS8.6AI score0.00856EPSS
SaveExploits0References1
Prion
Prion
added 2020/08/17 7:15 p.m.16 views

Privilege escalation

An elevation of privilege vulnerability exists when the Windows CDP User Components improperly handle memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

7.2CVSS8.4AI score0.00976EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2020/08/17 7:13 p.m.25 views

CVE-2020-1549 Windows CDP User Components Elevation of Privilege Vulnerability

...

7.8CVSS8.6AI score0.00976EPSS
SaveExploits0References1
Rows per page
Query Builder