CVE-2017-11564

The D-Link EyeOn Baby Monitor DCS-825L 1.08.1 has multiple command injection vulnerabilities in the web service framework. An attacker can forge malicious HTTP requests to execute commands; authentication is required before executing the attack...

CVE-2017-11563

D-Link EyeOn Baby Monitor DCS-825L 1.08.1 has a remote code execution vulnerability. A UDP "Discover" service, which provides multiple functions such as changing the passwords and getting basic information, was installed on the device. A remote attacker can send a crafted UDP request to finderd t...

D-Link EyeOn Baby Monitor DCS-825L Stack Overflow Remote Code Execution Vulnerability

EyeOn Baby Monitor DCS-825L is a baby monitor from D-Link. The D-Link EyeOn Baby Monitor DCS-825L suffers from a stack overflow remote code execution vulnerability that allows a remote attacker to send a crafted request to the finder and execute arbitrary code without authentication...

Multiple Command Injection Vulnerabilities in D-Link EyeOn Baby Monitor DCS-825L

EyeOn Baby Monitor DCS-825L is a baby monitor from D-Link. The D-Link EyeOn Baby Monitor DCS-825L suffers from multiple command injection vulnerabilities that could allow an attacker to send a crafted request to execute a command...

Display adapter priority and monitor creation in Citrix sessions

This article includes information about the display adapter selection process, how virtual monitors are created, and manual configuration options for the same. Starting with XenDesktop 7.16 the Citrix Virtual Desktop Agent VDA for Windows 10 automatically selects the best display adapter to use f...

Xen Denial of Service Vulnerability (CNVD-2020-23022)

Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in X...

solarmonitor.org XSS vulnerability

Open Bug Bounty ID: OBB-665440 Description| Value ---|--- Affected Website:| solarmonitor.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

F5 Networks BIG-IP : MySQL vulnerability (K16845) (BACKRONYM)

An unspecified vulnerability in the MySQL Client component in Oracle MySQL 5.7.2 and earlier allows an attacker to downgrade MySQL SSL/TLS connections, snoop database queries and results, or directly manipulate database contents. CVE-2015-3152 Impact Although the BIG-IP system includes the...

The vulnerability of Medtronic MyCareLink Patient Monitor’s medical equipment lies in the storage of passwords in a reversible format, which allows an intruder to disclose protected information.

The vulnerability of Medtronic MyCareLink Patient Monitor relates to the storage of passwords in a reversible format. Exploiting this vulnerability could allow an intruder to disclose protected information...

CVE-2018-10622

Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication...

CVE-2018-10622

Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication...

Authentication flaw

A vulnerability was discovered in all versions of Medtronic MyCareLink 24950 and 24952 Patient Monitor. The affected products use per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication and encryption of local data at rest...

CVE-2018-10626

Medtronic MyCareLink Patient Monitor’s update service does not sufficiently verify the authenticity of the data uploaded. An attacker who obtains per-product credentials from the monitor and paired implantable cardiac device information can potentially upload invalid data to the Medtronic CareLin...

CVE-2018-10626

Medtronic MyCareLink 24950/24952 Patient Monitors are affected by CVE-2018-10626: the update service does not sufficiently verify data authenticity, enabling an attacker with per‑product credentials to upload invalid data to the CareLink network (CWE-345). Connected advisories corroborate affecte...

CVE-2018-10626 Medtronic MyCareLink 24950 Patient Monitor Insufficient Verification of Data Authenticity

Medtronic MyCareLink Patient Monitor’s update service does not sufficiently verify the authenticity of the data uploaded. An attacker who obtains per-product credentials from the monitor and paired implantable cardiac device information can potentially upload invalid data to the Medtronic CareLin...

CVE-2018-10622

The CVE-2018-10622 issue affects Medtronic MyCareLink Patient Monitor models 24950/24952, where per-product credentials are stored in a recoverable format. This allows an attacker with physical access to obtain credentials and use them for network authentication and encryption of data at rest. Th...

CVE-2018-10622 Medtronic MyCareLink Patient Monitor Network Credential Weakness

Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication...

MySQL Enterprise Monitor 3.3.x < 3.3.9.3339 / 3.4.x < 3.4.7.4296 / 4.0.x < 4.0.4.5233 Multiple Vulnerabilities (April 2018 CPU)

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.3.x prior to 3.3.9.3339 or 3.4.x prior to 3.4.7.4296 or 4.0.x prior to 4.0.4.5233. It is, therefore, affected by multiple vulnerabilities as noted in the April 2018 Critical Patch Upda...

[SECURITY] Fedora 28 Update: libcgroup-0.41-20.fc28

Control groups infrastructure. The library helps manipulate, control, administrate and monitor control groups and the associated controllers...

Remote Control Command Vulnerability in omron PLC SYSMAC CP1L

The omron PLC SYSMAC CP1L is a PLC from Omron. A remote control command vulnerability exists in the omron PLC SYSMAC CP1L, which can be exploited by an attacker to switch the PLC to monitor mode and then set and force writes to the PLC, as well as operate I/O points and auxiliary relays, and modi...