717 matches found
PT-2018-3942
Name of the Vulnerable Software and Affected Versions D-Link DCS series Wi-Fi cameras versions 1.00 and above Description The issue is related to insufficient protection of registration data in the common/info.cgi component of D-Link DCS series Wi-Fi cameras' firmware. This can allow a remote...
Code injection
The Zizai Tech Nut device allows unauthenticated Bluetooth pairing, which enables unauthenticated connected applications to write data to the device name attribute...
CVE-2016-6549
The Zizai Tech Nut device allows unauthenticated Bluetooth pairing, which enables unauthenticated connected applications to write data to the device name attribute...
CVE-2016-6549: Missing Authentication for Critical Function
The Zizai Tech Nut device allows unauthenticated Bluetooth pairing, which enables unauthenticated connected applications to write data to the device name attribute...
PT-2018-4950
Name of the Vulnerable Software and Affected Versions Zizai Tech Nut device affected versions not specified Description The issue allows unauthenticated Bluetooth pairing, enabling unauthenticated connected applications to write data to the device name attribute. Recommendations At the moment,...
CVE-2014-5220
The CVE-2014-5220 issue affects the mdadm package (mdcheck script) in openSUSE 13.2 prior to version 3.3.1-5.14.1. The root cause is improper sanitization of device names in mdcheck, enabling a local attacker to execute arbitrary commands as root. This is supported by multiple sources in the conn...
joyplus-cms cross-site scripting vulnerability (CNVD-2018-08698)
joyplus-cms joy video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . A cross-site scripting vulnerability exists in...
CVE-2018-10096
joyplus-cms 1.6.0 has XSS via the devicename parameter in a manager/adminajax.php?action=save flag=add request...
PT-2018-9677
Name of the Vulnerable Software and Affected Versions: joyplus-cms version 1.6.0 Description: The issue concerns a Cross-Site Scripting XSS problem. It is exploited through the device name parameter in a "manager/admin ajax.php?action=save flag=add" request, specifically the "/manager/admin...
Microsoft Windows - Desktop Bridge VFS Privilege Escalation
Windows: Windows: Desktop Bridge VFS EoP Platform: Windows 1709 not tested earlier version Class: Elevation of Privilege Summary: The handling of the VFS for desktop bridge applications can allow an application to create virtual files in system folder which can result in EoP. Description: The...
CVE-2017-5256
In version 3.5 and prior of Cambium Networks ePMP firmware, all authenticated users have the ability to update the Device Name and System Description fields in the web administration console, and those fields are vulnerable to persistent cross-site scripting XSS injection...
CVE-2017-5256
In version 3.5 and prior of Cambium Networks ePMP firmware, all authenticated users have the ability to update the Device Name and System Description fields in the web administration console, and those fields are vulnerable to persistent cross-site scripting XSS injection...
CVE-2017-5256
In version 3.5 and prior of Cambium Networks ePMP firmware, all authenticated users have the ability to update the Device Name and System Description fields in the web administration console, and those fields are vulnerable to persistent cross-site scripting XSS injection...
CVE-2017-5256: Improper Neutralization of Input During Web Page Generation
In version 3.5 and prior of Cambium Networks ePMP firmware, all authenticated users have the ability to update the Device Name and System Description fields in the web administration console, and those fields are vulnerable to persistent cross-site scripting XSS injection...
Pelco Sarix/Spectra Cameras - Remote Code Execution
Schneider Electric Pelco Sarix/Spectra Cameras Root Remote Code Execution Vendor: Schneider Electric SE Product web page: https://www.pelco.com Affected version: Sarix Enhanced - Model: IME219 Firmware: 2.1.2.0.8280-A0.0 Sarix Enhanced - Model: IME119 Firmware: 2.1.2.0.8280-A0.0 Sarix - Model:...
CVE-2016-7469
A stored cross-site scripting XSS vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WOM and WebSafe version 12.0.0 - 12.1.2, 11.4.0 - 11.6.1, and 11.2.1 allows an...
PT-2017-9194
Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.2.1, 11.4.0 through 11.6.1, 12.0.0 through 12.1.2 Description A stored cross-site scripting XSS issue exists in the Configuration utility device name change page. This allows an authenticated user with Resource...
BMW 330i Denial of Service Vulnerability
The BMW 330i is an automobile from the German company BMW Bayerische Motoren Werke AG.Bluetooth stack is a Bluetooth transmission protocol applied to it. A security vulnerability exists in the Bluetooth stack in the BMW 330i version 2011. The vulnerability can be exploited by a remote attacker to...