CVE-2024-48771

An issue in almando GmbH Almando Play APP com.almando.play 1.8.2 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48788

An issue in YESCAM com.yescom.YesCam.zwave 1.0.2 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48776

CVE-2024-48776 affects Shelly com.home.shelly 1.0.4. The issue enables a remote attacker to obtain sensitive information via the firmware update process. Documents consistently describe the vulnerability but do not provide root-cause details, exploit code, or concrete remediation steps. CVSSv3.1 ...

CVE-2024-48775

CVE-2024-48775 affects Plug n Play Camera com.ezset.delaney 1.2.0. The issue, triggered during the firmware update process, may allow a remote attacker over the network to obtain sensitive information (confidentiality impact High; no integrity/availability impact reported). The vulnerability is d...

CVE-2024-48768

An issue in almaodo GmbH appinventor.aigoogle.almandocontrol 2.3.1 allows a remote attacker to obtain sensitive information via the firmware update process...

LEDVANCE com.ledvance.smartplus.eu 安全漏洞

LEDVANCE com.ledvance.smartplus.eu is a firmware program from LEDVANCE. A security vulnerability exists in LEDVANCE com.ledvance.smartplus.eu version 2.1.10, which originated from the inclusion of a vulnerability that could allow a remote attacker to obtain sensitive information through the...

Intel TDX Module Software Advisory - Lenovo Support US

No description provided...

Exploit for Command Injection in Avtech Avm1203_Firmware

EN GenAvTechRCEExploit A PoC exploit for the CVE-2024-7029...

PT-2024-18579 · Mediatek · Mediatek

Name of the Vulnerable Software and Affected Versions: MediaTek products affected versions not specified Description: A high-severity vulnerability affects MediaTek products, allowing for local escalation of privilege with System execution privileges needed. User interaction is not required for...

PT-2024-18577 · Mediatek · Mediatek

Name of the Vulnerable Software and Affected Versions: MediaTek products affected versions not specified Description: The issue is related to a possible out of bounds write in vdec due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges...

PT-2024-12651 · Eufy · Eufy Homebase 2

Name of the Vulnerable Software and Affected Versions: Eufy Homebase 2 versions prior to 3.3.4.1h Description: The Eufy Homebase 2 creates a dedicated wireless network for its ecosystem, serving as a proxy to the end user's primary network. The WPA2-PSK generation of this dedicated network is...

CVE-2024-28809

An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive password in firmware update packages allows attackers to access various appliance services via hardcoded credentials...

SNMP service is enabled by default in Sharp NEC Display Solutions projectors

Overview Multiple projectors provided by Sharp NEC Display Solutions, Ltd. are configured with SNMP service enabled by default, therefore can be accessed by specifying SNMP community name "public" CWE-1242 ,CVE-2024-7011. SNMP service configuration enable/disable cannot be changed on the manageme...

CVE-2024-28809

An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive password in firmware update packages allows attackers to access various appliance services via hardcoded credentials...

CVE-2024-28809

The CVE-2024-28809 issue affects Infinera hiT 7300, specifically version 5.60.50. The root cause is cleartext storage of sensitive passwords in firmware update packages, enabling access to various appliance services via hardcoded credentials. The connected Red Hat, NVD, CNNVD, CVE records confirm...

HPESBHF04703 rev.1 - HPE Superdome Flex and Superdome Flex 280 servers, Remote Code Execution (RCE) Vulnerability (RegreSSHion)

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex 280 Server - Prior to v1.90.12 HPE Superdome Flex Server - Prior to v4.0.10 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-6387 |...

Multiple vulnerabilities in PLANEX COMMUNICATIONS network devices

Overview Multiple network devices network cameras and a router provided by PLANEX COMMUNICATIONS INC. contain multiple vulnerabilities listed below. Cross-site request forgery CWE-352 - CVE-2024-45372 Cross-site scripting vulnerability in the web management page CWE-79 - CVE-2024-45836...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

JVN#78356367: Multiple NTT EAST Home GateWay/Hikari Denwa routers fail to restrict access permissions

Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION fail to restrict access permissions CWE-451. Impact An attacker who identified WAN-side IPv6 address may access the product's Device Setting page via WAN-side. Solution Update the firmware Updat...

JVN#81966868: Multiple vulnerabilities in PLANEX COMMUNICATIONS network devices

Multiple network devices network cameras and a router provided by PLANEX COMMUNICATIONS INC. contain multiple vulnerabilities listed below. Cross-site request forgery CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L Base Score 7.1 CVE-2024-45372 Cross-site scripting vulnerability in the web...