Lucene search
+L

77 matches found

Positive Technologies
Positive Technologies
•added 2019/04/30 12:00 a.m.•10 views

PT-2019-16784

Name of the Vulnerable Software and Affected Versions Crestron AM-100 version 1.6.0.2 Crestron AM-101 version 2.7.0.1 Barco wePresent WiPG-1000P version 2.3.0.10 Barco wePresent WiPG-1600W versions prior to 2.4.1.19 Extron ShareLink 200/250 version 2.0.3.4 Teq AV IT WIPS710 version 1.1.0.7 SHARP...

10CVSS0.06957EPSS
SaveExploits1References3
CNVD
CNVD
•added 2017/11/10 12:00 a.m.•16 views

InFocus Mondopad Authentication Bypass Vulnerability

InFocus Mondopad is a full-featured touchscreen whiteboard from InFocus. An authentication bypass vulnerability exists in InFocus Mondopad version 2.2.08. A remote attacker could exploit this vulnerability to obtain information...

7.5CVSS7.1AI score0.01305EPSS
SaveExploits0References1
Prion
Prion
•added 2017/10/09 5:29 a.m.•31 views

Design/Logic Flaw

Infocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The attacker provides a crafted Microsoft Office document containing a link that has a UNC pathname associated with an attacker-controller server. In one specific scenario, the attacker provides an Excel...

4.3CVSS5.3AI score0.00863EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2017/10/09 5:29 a.m.•35 views

CVE-2017-14971

Infocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The attacker provides a crafted Microsoft Office document containing a link that has a UNC pathname associated with an attacker-controller server. In one specific scenario, the attacker provides an Excel...

5.5CVSS5.3AI score0.00863EPSS
SaveExploits1References1
NVD
NVD
•added 2017/10/09 5:29 a.m.•24 views

CVE-2017-14972

InFocus Mondopad 2.2.08 is vulnerable to authentication bypass when accessing uploaded files by entering Control-Alt-Delete, and then using Task Manager to reach a file...

7.5CVSS7.7AI score0.01305EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2017/10/09 5:29 a.m.•22 views

CVE-2017-14971

Infocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The attacker provides a crafted Microsoft Office document containing a link that has a UNC pathname associated with an attacker-controller server. In one specific scenario, the attacker provides an Excel...

5.5CVSS5.8AI score0.00863EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2017/10/09 5:29 a.m.•16 views

CVE-2017-14972

InFocus Mondopad 2.2.08 is vulnerable to authentication bypass when accessing uploaded files by entering Control-Alt-Delete, and then using Task Manager to reach a file...

7.5CVSS5.8AI score0.01305EPSS
SaveExploits0References1
Prion
Prion
•added 2017/10/09 5:29 a.m.•31 views

Authentication flaw

InFocus Mondopad 2.2.08 is vulnerable to authentication bypass when accessing uploaded files by entering Control-Alt-Delete, and then using Task Manager to reach a file...

5CVSS7.6AI score0.01305EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2017/10/09 5:00 a.m.•40 views

CVE-2017-14971

Infocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The attacker provides a crafted Microsoft Office document containing a link that has a UNC pathname associated with an attacker-controller server. In one specific scenario, the attacker provides an Excel...

5.3AI score0.00863EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2017/10/09 5:00 a.m.•37 views

CVE-2017-14972

InFocus Mondopad 2.2.08 is vulnerable to authentication bypass when accessing uploaded files by entering Control-Alt-Delete, and then using Task Manager to reach a file...

7.7AI score0.01305EPSS
SaveExploits0References1
CVE
CVE
•added 2017/10/09 5:00 a.m.•72 views

CVE-2017-14971

Infocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The attacker delivers a crafted Microsoft Office document containing a link with a UNC pathname pointing to an attacker‑controlled server; in a described scenario, an Excel spreadsheet is used and the attacker‑...

5.5CVSS5.3AI score0.00863EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2017/10/09 5:00 a.m.•63 views

CVE-2017-14972

InFocus Mondopad 2.2.08 is affected by CVE-2017-14972, which is an authentication bypass vulnerability. The issue is described as being exploitable by accessing uploaded files after triggering a Control-Alt-Delete sequence and using Task Manager to reach a file. Connected sources (NVD/CNVD entrie...

7.5CVSS7.6AI score0.01305EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2017/10/09 12:00 a.m.•6 views

PT-2017-13793

Name of the Vulnerable Software and Affected Versions InFocus Mondopad version 2.2.08 Description The issue allows for authentication bypass when accessing uploaded files. This can be achieved by entering Control-Alt-Delete and then using Task Manager to reach a file. Recommendations For InFocus...

7.5CVSS0.01305EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/09 12:00 a.m.•9 views

CVE-2017-14972: Improper Authentication

InFocus Mondopad 2.2.08 is vulnerable to authentication bypass when accessing uploaded files by entering Control-Alt-Delete, and then using Task Manager to reach a file...

7.5CVSS7.3AI score0.01305EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/09 12:00 a.m.•13 views

CVE-2017-14971: Exposure of Sensitive Information to an Unauthorized Actor

Infocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The attacker provides a crafted Microsoft Office document containing a link that has a UNC pathname associated with an attacker-controller server. In one specific scenario, the attacker provides an Excel...

5.5CVSS5.9AI score0.00863EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2017/10/09 12:00 a.m.•7 views

PT-2017-13792

Name of the Vulnerable Software and Affected Versions Infocus Mondopad version 2.2.08 Description The issue allows an attacker to disclose hashed credentials by providing a crafted Microsoft Office document, such as an Excel spreadsheet, containing a link with a UNC pathname associated with an...

5.5CVSS0.00863EPSS
SaveExploits1References3
myhack58
myhack58
•added 2016/10/24 12:00 a.m.•29 views

Foxconn OEM Android phone discovered the“Pork Explosion”vulnerability-vulnerability warning-the black bar safety net

Recently, security research experts JonSawyer publicly stated that he in some by the Foxconn OEM manufacturing of Android smartphones found a backdoor, the attacker or by the back door to the root user of Android phone. Prior to that, JohnSawyer ever for the United States Local Governments and la...

SaveExploits0
CNVD
CNVD
•added 2015/05/20 12:00 a.m.•21 views

InFocus IN3128HD Projector Validates Bypass Vulnerability

The InFocus IN3128HD projector is a projector product used in the education industry. The InFocus IN3128HD firmware version 0.26 fails to properly handle user access, allowing remote attackers to bypass authentication and gain unauthorized access by sending a main.html request...

10CVSS7.2AI score0.03033EPSS
SaveExploits3References1
CNVD
CNVD
•added 2015/05/19 12:00 a.m.•24 views

Vulnerability in InFocus IN3128HD projector

InFocus IN3128HD projector is a projector product for the education industry from InFocus. A security vulnerability exists in the InFocus IN3128HD projector using firmware version 0.26. Because the program fails to restrict access to the cgi-bin/webctrl.cgi.elf file. A remote attacker can exploit...

9.4CVSS6.9AI score0.03212EPSS
SaveExploits3References1
NVD
NVD
•added 2015/05/18 3:59 p.m.•28 views

CVE-2014-8384

The InFocus IN3128HD projector with firmware 0.26 does not restrict access to cgi-bin/webctrl.cgi.elf, which allows remote attackers to modify the DHCP server and device IP configuration, reboot the device, change the device name, and have other unspecified impact via a crafted request...

9.4CVSS6.7AI score0.03212EPSS
SaveExploits3References3
Rows per page
Query Builder