Lucene search
K

11 matches found

NVD
NVD
added 2026/04/24 12:16 a.m.1 views

CVE-2026-40623

A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation and safety controls. Due to inadequate enforcement of constraints on sensitive functions, parameters such as IP addressing, watchd...

8.1CVSS0.0004EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 12:12 p.m.11 views

CVE-2018-18878

In firmware version MS2.6.9900 of Columbia Weather MicroServer, the BACnet daemon does not properly validate input, which could allow a remote attacker to send specially crafted packets causing the device to become unavailable...

7.8CVSS7.1AI score0.01148EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-17223

Malware in sbrugna...

7.8CVSS7.8AI score0.0023EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/03/15 12:0 a.m.5 views

CVE-2023-28338

Any request send to a Netgear Nighthawk Wifi6 Router RAX30's web service containing a “Content-Type” of “multipartboundary=” will result in the request body being written to “/tmp/mulipartFile” on the device itself. A sufficiently large file will cause device resources to be exhausted, resulting ...

7.5AI score0.00413EPSS
Exploits0References1
OSV
OSV
added 2018/03/05 5:29 p.m.2 views

CVE-2018-5453

An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker may be able to edit the element of an HTTP request, causing the device to become unavailable...

7.5CVSS5.8AI score0.0023EPSS
Exploits0References1
Cvelist
Cvelist
added 2018/03/05 5:0 p.m.14 views

CVE-2018-5453

An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker may be able to edit the element of an HTTP request, causing the device to become unavailable...

7.4AI score0.0023EPSS
Exploits0References1
CNVD
CNVD
added 2016/08/31 12:0 a.m.1 views

Command Execution Vulnerability in Huawei UMA

Huawei UMA Unified Maintenance Audit is a unified audit system. It provides a unified O&M operation portal, controls and records O&M operations performed by users, and supports auditing by command view and video playback. A command execution vulnerability exists in Huawei UMA. As the system does...

10CVSS6.8AI score0.01749EPSS
Exploits0References1
Huawei
Huawei
added 2016/08/24 12:0 a.m.31 views

Security Advisory - Two Command Injection Vulnerabilities in Huawei UMA

The Unified Maintenance Audit UMA system provides a unified portal for O&M operations, controls and records users' O&M operations, and supports auditing by way of command display and video replay. The UMA has two command injection vulnerabilities due to the lack of validation on special fields. A...

10CVSS9.6AI score0.01749EPSS
Exploits0Affected Software1
OpenVAS
OpenVAS
added 2015/12/01 12:0 a.m.23 views

Huawei VP9660 Multi-Point Control Unit Multiple Vulnerabilities (huawei-sa-20151111-01-vp9660)

Huawei VP9660 Multi-Point Control Unit is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.5CVSS6.8AI score0.0016EPSS
Exploits0References1
Huawei
Huawei
added 2015/11/11 12:0 a.m.24 views

Security Advisory - Input Validation Vulnerability in Huawei VP9660 Products

VP9660 is the multi-point control unit of Huawei Video Conference system. The server of the Huawei VP9660 does not validate the input when using build-in WebServer. In such case, an attacker could log in to the device as an business administrator, graft a message to change the specific informatio...

8.5CVSS6.2AI score0.0016EPSS
Exploits0Affected Software1
Palo Alto Networks
Palo Alto Networks
added 2012/04/27 11:30 p.m.25 views

Management Server DOS Vulnerability

An issue exists whereby the management server of the device can be crashed when an authenticated users sends a specially crafted command via the command line interface. Ref 35254 This issue results in the unavailability of the management server of the device. The attacker must be an authenticated...

6.3CVSS4.9AI score0.00351EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder