CVE-2019-5504: Missing Authentication for Critical Function

ONTAP Select Deploy administration utility versions 2.12 & 2.12.1 ship with an HTTP service bound to the network allowing unauthenticated remote attackers to perform administrative actions...

PT-2019-17719

Name of the Vulnerable Software and Affected Versions ONTAP Select Deploy administration utility versions 2.12 through 2.12.1 Description The issue allows unauthenticated remote attackers to perform administrative actions due to an HTTP service bound to the network. Recommendations For versions...

CVE-2018-17200

The Apache OFBiz HTTP engine org.apache.ofbiz.service.engine.HttpEngine.java handles requests for HTTP services via the /webtools/control/httpService endpoint. This service takes the serviceContent parameter in the request and deserializes it using XStream. This XStream instance is slightly guard...

CVE-2018-17200

The Apache OFBiz HTTP engine org.apache.ofbiz.service.engine.HttpEngine.java handles requests for HTTP services via the /webtools/control/httpService endpoint. This service takes the serviceContent parameter in the request and deserializes it using XStream. This XStream instance is slightly guard...

CVE-2018-17200

The CVE-2018-17200 entry concerns the Apache OFBiz HTTP engine (HttpEngine.java) handling HTTP service requests via /webtools/control/httpService. The vulnerability arises from deserializing the serviceContent parameter with XStream; although the XStream instance is guarded by disabling ProcessBu...

Siemens SIMATIC S7-300 PLC suffers from a denial of service vulnerability.

The Siemens SIMATIC S7-300 is a modular general-purpose controller from Siemens for the manufacturing industry. A denial of service vulnerability exists in the Siemens SIMATIC S7-300 PLC. An attacker can cause the HTTP service to refuse to respond by constructing a special data message...

FANUC Robotics Virtual Robot Controller 8.23 Buffer Overflow Vulnerability

Exploit for multiple platform in category web applications Product: FANUC Robotics Virtual Robot Controller Manufacturer: FANUC Robotics America, Inc. Affected Versions: V8.23 Tested Versions: V8.23 Vulnerability Type: Stack-based Buffer Overflow CWE-121 Risk Level: High CVE Reference:...

FANUC Robotics Virtual Robot Controller 8.23 Path Traversal Vulnerability

Exploit for multiple platform in category web applications Product: FANUC Robotics Virtual Robot Controller Manufacturer: FANUC Robotics America, Inc. Affected Versions: V8.23 Tested Versions: V8.23 Vulnerability Type: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

FANUC Robotics Virtual Robot Controller 8.23 Path Traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2019-025 Product: FANUC Robotics Virtual Robot Controller Manufacturer: FANUC Robotics America, Inc. Affected Versions: V8.23 Tested Versions: V8.23 Vulnerability Type: Improper Limitation of a Pathname to a Restricted Directory...

CVE-2017-13719

The Amcrest IPM-721S AmcrestIPC-AWXXEngNV2.420.AC00.17.R.20170322 allows HTTP requests that permit enabling various functionalities of the camera by using HTTP APIs, instead of the web management interface that is provided by the application. This HTTP API receives the credentials as base64 encod...

CVE-2019-12919

On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the local network has unauthenticated access to the internal SD card via the HTTP service on port 8000. The HTTP web server on the camera allows anyone to view or download the video archive recorded and saved o...

Code injection

On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the local network has unauthenticated access to the internal SD card via the HTTP service on port 8000. The HTTP web server on the camera allows anyone to view or download the video archive recorded and saved o...

CVE-2019-12919

On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the local network has unauthenticated access to the internal SD card via the HTTP service on port 8000. The HTTP web server on the camera allows anyone to view or download the video archive recorded and saved o...

CVE-2019-12919

CVE-2019-12919 affects Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4. The connected Red Hat/CNVD/NVD records describe an unauthenticated attacker on the local network gaining access to the device’s internal SD card through the HTTP service on port 8000, enabling viewing or downloadi...

PT-2019-13021

Name of the Vulnerable Software and Affected Versions Shenzhen Cylan Clever Dog Smart Camera versions DOG-2W and DOG-2W-V4 Description The issue allows an attacker on the local network to have unauthenticated access to the internal SD card via the HTTP service on port 8000. The HTTP web server on...

CVE-2019-12919: Missing Authentication for Critical Function

On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the local network has unauthenticated access to the internal SD card via the HTTP service on port 8000. The HTTP web server on the camera allows anyone to view or download the video archive recorded and saved o...

CleverDog Smart Camera DOG-2W DOG-2W-V4 - Multiple Vulnerabilities

CleverDog Smart Camera DOG-2W DOG-2W-V4 - Multiple Vulnerabilities 1. Advisory Information ======================================== Title: Clever Dog Smart Camera Vendor Homepage: http://www.cleverdog.com.cn/ Tested on Camera types : DOG-2W, DOG-2W-V4 Vulnerability: Hardware- Multiple...

PT-2019-9597

Name of the Vulnerable Software and Affected Versions TP-LINK WR840N v2 Firmware version 3.16.9 Build 150701 Rel.51516n Description The issue concerns the ping feature in the Diagnostic functionality, which can be exploited by remote attackers to cause a denial of service. This is achieved by...

CVE-2018-18489: Undefined Security Weakness

The ping feature in the Diagnostic functionality on TP-LINK WR840N v2 Firmware 3.16.9 Build 150701 Rel.51516n devices allows remote attackers to cause a denial of service HTTP service termination by modifying the packet size to be higher than the UI limit of 1472...

CVE-2018-8033

In Apache OFBiz 16.11.01 to 16.11.04, the OFBiz HTTP engine org.apache.ofbiz.service.engine.HttpEngine.java handles requests for HTTP services via the /webtools/control/httpService endpoint. Both POST and GET requests to the httpService endpoint may contain three parameters: serviceName,...