29 matches found
Huawei HarmonyO SeID module out-of-bounds memory write vulnerability
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. The Huawei HarmonyO SeID module is vulnerable to an out-of-bounds memory write vulnerability that could be exploited by an attacker to compromise data integrity...
Huawei HarmonyOS 缓冲区错误漏洞
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. The Huawei HarmonyO SeID module is vulnerable to an out-of-bounds memory write vulnerability that could be exploited by an attacker to compromise data integrity...
CVE-2020-28333
Barco wePresent WiPG-1600W (firmware 2.5.1.8 affected) is vulnerable to an authentication bypass due to the SEID token being passed in URLs (no session cookies tracked for authenticated sessions). An attacker who captures the SEID and can originate requests from the same IP (e.g., via NAT or a pr...
CVE-2020-28333
Barco wePresent WiPG-1600W devices allow Authentication Bypass. Affected Versions: 2.5.1.8. The Barco wePresent WiPG-1600W web interface does not use session cookies for tracking authenticated sessions. Instead, the web interface uses a "SEID" token that is appended to the end of URLs in GET...
Barco wePresent WiPG-1600W Authentication Bypass Vulnerability
The Barco wePresent WiPG-1600W version 2.5.1.8 web interface does not use session cookies for tracking authenticated sessions. Instead, the web interface uses a "SEID" token that is appended to the end of URLs in GET requests. Thus the "SEID" would be exposed in web proxy logs and browser history...
Barco wePresent Authentication Bypass
Vulnerability Details Affected Vendor: Barco Affected Product: wePresent WiPG-1600W Affected Version: 2.5.1.8 Platform: Embedded Linux CWE Classification: CWE-288: Authentication Bypass Using an Alternate Path or Channel CVE ID: CVE-2020-28333 2. Vulnerability Description The Barco wePresent web...
Barco wePresent WiPG-1600W License Issue Vulnerability
Barco Barco wePresent WiPG-1600W is a management appliance for conference environments from Barco Belgium. A security vulnerability exists in the Barco wePresent web that stems from not using session cookies to track authenticated sessions. Instead, the web interface uses a "SEID" token that is...
CVE-2010-1070
The CVE-2010-1070 issue affects ImagoScripts Deviant Art Clone’s index.php, where a SQL injection is possible in the forums viewcat action via the seid parameter. The underlying vulnerability allows remote attackers to execute arbitrary SQL commands, with the impact described as partial confident...
Sql injection
SQL injection vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewcat s action on the forums page...