Lucene search
+L

29 matches found

CNVD
CNVD
added 2022/01/06 12:00 a.m.51 views

Huawei HarmonyO SeID module out-of-bounds memory write vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. The Huawei HarmonyO SeID module is vulnerable to an out-of-bounds memory write vulnerability that could be exploited by an attacker to compromise data integrity...

7.5CVSS1.3AI score0.00562EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/01/05 12:00 a.m.9 views

Huawei HarmonyOS 缓冲区错误漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. The Huawei HarmonyO SeID module is vulnerable to an out-of-bounds memory write vulnerability that could be exploited by an attacker to compromise data integrity...

7.5CVSS5.7AI score0.00562EPSS
SaveExploits0References3
CVE
CVE
added 2020/11/24 6:03 p.m.108 views

CVE-2020-28333

Barco wePresent WiPG-1600W (firmware 2.5.1.8 affected) is vulnerable to an authentication bypass due to the SEID token being passed in URLs (no session cookies tracked for authenticated sessions). An attacker who captures the SEID and can originate requests from the same IP (e.g., via NAT or a pr...

9.8CVSS9.2AI score0.03239EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2020/11/24 6:03 p.m.34 views

CVE-2020-28333

Barco wePresent WiPG-1600W devices allow Authentication Bypass. Affected Versions: 2.5.1.8. The Barco wePresent WiPG-1600W web interface does not use session cookies for tracking authenticated sessions. Instead, the web interface uses a "SEID" token that is appended to the end of URLs in GET...

9.4AI score0.03239EPSS
SaveExploits2References2
zdt
zdt
added 2020/11/21 12:00 a.m.36 views

Barco wePresent WiPG-1600W Authentication Bypass Vulnerability

The Barco wePresent WiPG-1600W version 2.5.1.8 web interface does not use session cookies for tracking authenticated sessions. Instead, the web interface uses a "SEID" token that is appended to the end of URLs in GET requests. Thus the "SEID" would be exposed in web proxy logs and browser history...

9.8CVSS9.4AI score0.03239EPSS
SaveExploits2
KoreLogic Security
KoreLogic Security
added 2020/11/20 12:00 a.m.85 views

Barco wePresent Authentication Bypass

Vulnerability Details Affected Vendor: Barco Affected Product: wePresent WiPG-1600W Affected Version: 2.5.1.8 Platform: Embedded Linux CWE Classification: CWE-288: Authentication Bypass Using an Alternate Path or Channel CVE ID: CVE-2020-28333 2. Vulnerability Description The Barco wePresent web...

9.8CVSS8.8AI score0.03239EPSS
SaveExploits2Affected Software1
CNNVD
CNNVD
added 2020/11/20 12:00 a.m.14 views

Barco wePresent WiPG-1600W License Issue Vulnerability

Barco Barco wePresent WiPG-1600W is a management appliance for conference environments from Barco Belgium. A security vulnerability exists in the Barco wePresent web that stems from not using session cookies to track authenticated sessions. Instead, the web interface uses a "SEID" token that is...

9.8CVSS7.3AI score0.03239EPSS
SaveExploits2References4
CVE
CVE
added 2010/03/23 6:00 p.m.54 views

CVE-2010-1070

The CVE-2010-1070 issue affects ImagoScripts Deviant Art Clone’s index.php, where a SQL injection is possible in the forums viewcat action via the seid parameter. The underlying vulnerability allows remote attackers to execute arbitrary SQL commands, with the impact described as partial confident...

7.5CVSS8.6AI score0.01151EPSS
SaveExploits2References6Affected Software1
Prion
Prion
added 2007/11/15 10:46 p.m.13 views

Sql injection

SQL injection vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewcat s action on the forums page...

7.5CVSS9AI score0.01133EPSS
SaveExploits2References4
Rows per page
Query Builder