CVE-2020-5606

Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers to inject arbitrary script via a specially crafted page...

HPSBPI03688 rev. 1 - Certain HP Printer and MFP products - Cross-Site Scripting (XSS)

Potential Security Impact Cross-site Scripting XSS Source: HP, HP Product Security Response Team PSRT Reported by: The jQuery Foundation VULNERABILITY SUMMARY A potential security vulnerability has been identified for certain HP printers and MFPs. In jQuery versions before 3.5.0, passing HTML fro...

Buffalo WHR-G54S Path Traversal Vulnerability

Buffalo WHR-G54S firmware WHR-G54S firmware,WHR-G54S firmware is a driver for Buffalo Miroku WHR-G54S wireless router from Buffalo, Japan. A path traversal vulnerability exists in WHR-G54S version 1.43 and earlier versions, which arises from a failure of a network system or product to properly...

Sagemcom F@ST 5280 routers elevation of privilege vulnerability

Sagemcom F@ST 5280 routers is a router product. A deserialization vulnerability exists in firmware version 1.150.61 in the Sagemcom F@ST 5280 routers, which originates when any authenticated user performs an elevation of privilege on any other user. An attacker could exploit the vulnerability to...

Western Digital My Cloud Multiple Products < 2.21.111 Multiple Vulnerabilities

Multiple Western Digital My Cloud products are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Western Digital My Cloud Multiple Products < 2.31.183 Multiple Vulnerabilities

Multiple Western Digital My Cloud products are prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

Western Digital My Cloud Multiple Products < 2.11.178 / 2.20 - 2.30 < 2.30.196 Authentication Bypass Vulnerability

Multiple Western Digital My Cloud products are prone to an authentication bypass vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2020-24034

Sagemcom F@ST 5280 routers using firmware version 1.150.61 have insecure deserialization that allows any authenticated user to perform a privilege escalation to any other user. By making a request with valid sessid, nonce, and ha1 values inside of the serialized session cookie, an attacker may...

CVE-2020-24354

Zyxel VMG5313-B30B router on firmware 5.13ABCJ.6b31127, and possibly older versions of firmware are affected by shell injection...

JVN#29903998: Multiple NETGEAR switching hubs vulnerable to cross-site request forgery

GS716Tv2 and GS724Tv3 switching hubs provided by NETGEAR contain a cross-site request forgery vulnerability. Impact If a user views a malicious page while logged in to the management screen, the product's settings may be changed unintentionally. Solution Apply a workaround Applying the following...

CVE-2020-8232

An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized information through SNMP community pages...

Huawei E6878-370 Improper Authorization Vulnerability

The Huawei E6878-370 is a portable 5G router from Huawei China. A security vulnerability exists in Huawei E6878-370 version 10.0.3.1 H563SP1C00 and version 10.0.3.1 H563SP21C233, which stems from the device failing to properly restrict certain data received on the WAN port. An attacker could...

Intel® Server Board M10JNP2SB Advisory

Summary: Potential security vulnerabilities in the Intel® Server Board M10JNP2SB may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-8733 Description: Improper buffer restrictions in the firmwar...

Lindy 42633 Authentication Bypass Vulnerability

The Lindy 42633 is a 4-port USB 2.0 Gigabit network server. An authentication bypass vulnerability exists in the Lindy 42633 2.078.000. An attacker on the same network can exploit this vulnerability to bypass authentication via a web management request that lacks a password parameter...

Lindy 42633 Denial of Service Vulnerability

The Lindy 42633 is a 4-port USB 2.0 Gigabit network server. A denial of service vulnerability exists in the Lindy 42633 2.078.000. An attacker on the same network can exploit this vulnerability by entering a long value to cause the device to deny service...

Teltonika TRB245 Improper Input Validation Vulnerability (CNVD-2020-44605)

Teltonika TRB245 is a cellular network gateway product from Teltonika Lithuania. An improper input validation vulnerability exists in the firmware TRB2R00.02.04.01 of the Teltonika TRB245. A remote attacker can exploit this vulnerability to gain root privileges with the help of a malicious backup...

CVE-2020-5770

Cross-site request forgery in Teltonika firmware TRB2R00.02.04.01 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link...

Grandstream HT800 series code issue vulnerability

The Grandstream HT800 series is an HT800 series analog phone adapter from Grandstream. A code issue vulnerability exists in the Grandstream HT800 series using firmware version 1.0.17.5 and earlier. An attacker could exploit this vulnerability to cause a denial of service...

Unspecified vulnerability in the Grandstream HT800 series

The Grandstream HT800 series is an HT800 series analog phone adapter from Grandstream. An input validation error vulnerability exists in the Grandstream HT800 series using firmware version 1.0.17.5 and earlier. The vulnerability stems from a failure of the system to properly validate incoming dat...

Dell iDRAC9 Directory Traversal (DSA-2020-128)

The remote host is running iDRAC9 with a firmware version prior to 4.20.20.20. It is, therefore, affected by a directory traversal vulnerability due to insufficient validation of user input. An authenticated, remote attacker can exploit this, by sending a URI that contains directory traversal...