CVE-2020-29667: Insufficient Session Expiration

In Lan ATMService M3 ATM Monitoring System 6.1.0, a remote attacker able to use a default cookie value, such as PHPSESSID=LANIT-IMANAGER, can achieve control over the system because of Insufficient Session Expiration...

m3-managementservice.de Cross Site Scripting vulnerability OBB-1326622

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

rodekruism3.nl Cross Site Scripting vulnerability OBB-1282390

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2019-11523

Anviz Global M3 Outdoor RFID Access Control executes any command received from any source. No authentication/encryption is done. Attackers can fully interact with the device: for example, send the "open door" command, download the users list which includes RFID codes and passcodes in cleartext, o...

Design/Logic Flaw

Anviz Global M3 Outdoor RFID Access Control executes any command received from any source. No authentication/encryption is done. Attackers can fully interact with the device: for example, send the "open door" command, download the users list which includes RFID codes and passcodes in cleartext, o...

CVE-2019-11523

Anviz Global M3 Outdoor RFID Access Control executes any command received from any source. No authentication/encryption is done. Attackers can fully interact with the device: for example, send the "open door" command, download the users list which includes RFID codes and passcodes in cleartext, o...

CVE-2019-11523

The CVE-2019-11523 issue affects the Anviz M3 Outdoor RFID Access Control. The vulnerability arises from a lack of authentication and encryption in the device’s TCP/IP network communications, allowing an attacker to send commands (e.g., open door), retrieve the user list (RFID codes and plaintext...

GHSA-CJ6J-32RG-45R2 Cross-site Scripting in JSPWiki

A carefully crafted InterWiki link could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking...

GHSA-CXX2-FP39-RF3R Cross-Site Scripting in JSPWiki

A carefully crafted malicious attachment could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking...

Cross-Site Scripting in JSPWiki

A carefully crafted malicious attachment could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking...

CVE-2019-11523: Missing Authentication for Critical Function

Anviz Global M3 Outdoor RFID Access Control executes any command received from any source. No authentication/encryption is done. Attackers can fully interact with the device: for example, send the "open door" command, download the users list which includes RFID codes and passcodes in cleartext, o...

Anviz M3 RFID Missing Unauthorized Access Vulnerability

Anviz M3 RFID is an access control access controller from Anviz China. A security vulnerability exists in the Anviz M3 RFID. An attacker could exploit this vulnerability to bypass access control and disclose or modify private information...

PT-2019-12354

Name of the Vulnerable Software and Affected Versions Anviz Global M3 Outdoor RFID Access Control affected versions not specified Description The issue allows attackers to execute any command on the device without authentication or encryption. This enables full interaction with the device,...

Exploit for Missing Authentication for Critical Function in Anviz M3_Firmware

Anviz M3 RFID Access Control security issues Security issues...

CVE-2018-7992

Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356C00; P10 Plus versions earlier than 8.0.0.357C00 has a buffer overflow vulnerability. The driver does not sufficiently validate the input, an attacker could trick the user to install a...

Buffer overflow

Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356C00; P10 Plus versions earlier than 8.0.0.357C00 has a buffer overflow vulnerability. The driver does not sufficiently validate the input, an attacker could trick the user to install a...

CVE-2018-7992

Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356C00; P10 Plus versions earlier than 8.0.0.357C00 has a buffer overflow vulnerability. The driver does not sufficiently validate the input, an attacker could trick the user to install a...

CVE-2018-7992

CVE-2018-7992 affects Huawei Mdapt (madapt) driver used by Huawei MediaPad M3, Mate 9 Pro (pre-8.0.0.356(C00)) and P10 Plus (pre-8.0.0.357(C00)). The vulnerability is a buffer overflow caused by insufficient input validation in the driver, which could allow an attacker to trick a user into instal...

PT-2018-18362

Name of the Vulnerable Software and Affected Versions: Huawei MediaPad M3 version BTV-W09C128B353CUSTC128D001 Mate 9 Pro versions earlier than 8.0.0.356C00 P10 Plus versions earlier than 8.0.0.357C00 Description: The issue is related to a buffer overflow. It occurs because the Mdapt Driver does n...

CVE-2018-7992: Improper Restriction of Operations within the Bounds of a Memory Buffer

Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356C00; P10 Plus versions earlier than 8.0.0.357C00 has a buffer overflow vulnerability. The driver does not sufficiently validate the input, an attacker could trick the user to install a...