CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

829 matches found

prion•added 2019/11/14 10:15 p.m.•17 views

Authentication flaw

On Signify Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb 9290022656 devices, an unprotected API lets remote users control the bulb's operation. Anyone can turn the bulb on or off, or change its color or brightness remotely. There is no authentication or encryption to use the control API. Th...

5CVSS7.7AI score0.00439EPSS

Exploits1References1

cve•added 2019/11/14 9:3 p.m.•79 views

CVE-2019-18980

The CVE describes an authentication-less control API on Signify Philips Taolight Smart Wi‑Fi Wiz Connected LED Bulb 9290022656. A remote attacker with network access can operate the bulb: turn it on/off, adjust color, or change brightness, due to no authentication or encryption on the control API...

7.5CVSS7.7AI score0.00439EPSS

Exploits1References1Affected Software1

cvelist•added 2019/11/14 9:3 p.m.•23 views

CVE-2019-18980

7.7AI score0.00439EPSS

Exploits1References1

vulnersosv•added 2019/10/25 7:41 p.m.•5 views

@ia-cloud/node-red-contrib-ia-cloud-dashboard (>=0.0.1 <=0.0.4), node-red-contrib-ui-led (>=0.1.0 <=0.3.0) potentially affected by CVE-2019-10756 via node-red-dashboard (>=2.13.2 <=2.15.0)

node-red-dashboard NPM version =2.13.2, =0.0.1, =0.1.0, =0.3.0 Source cves: CVE-2019-10756 Source advisory: OSV:GHSA-XG59-M7WX-853Q...

5.4CVSS6AI score0.0057EPSS

Exploits1

openbugbounty•added 2019/08/04 7:59 p.m.•6 views

led-svet.com.ua Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8544 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting led-svet.com.ua website and its users. Following coordinat...

0.1AI score

Exploits0

nvd•added 2019/07/19 9:15 p.m.•18 views

CVE-2019-13991

Embedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs directly connected to GPIO pins via a laser, because of LED photosensitivity...

6.5CVSS6.5AI score0.00667EPSS

Exploits0References1

cvelist•added 2019/07/19 8:39 p.m.•22 views

CVE-2019-13991

Embedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs directly connected to GPIO pins via a laser, because of LED photosensitivity...

6.5AI score0.00667EPSS

Exploits0References1