Fedora: Security Advisory for gnome-disk-utility (FEDORA-2021-303f6623fa)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

(0Day) (Pwn2Own) Sony X800H Smart TV Vewd Type-Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sony X800H Smart TV. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling o...

Unauthorized Access Vulnerability in Riptide Smart Web Management System

Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products, storage, and more. An unauthorized access vulnerability exists in the Ruijie Smart Web management syste...

CVE-2021-27568

A flaw was found in json-smart. When an exception is thrown from a function, but is not caught, the program using the library may crash or expose sensitive information. The highest threat from this vulnerability is to data confidentiality and system availability. In OpenShift Container Platform...

Arbitrary User Login Vulnerability in Ruijie Network Smart Web Management System

Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products and storage. An arbitrary user login vulnerability exists in the Smart Web Management System of Ruijie...

SQL Injection Vulnerability in Smart Heat Meter Management System of Hangzhou Xinlei Electronic Technology Co.

Hangzhou Xinlei Electronic Technology Co., Ltd. specializes in data collection and statistical analysis services in the field of water, electricity, gas, heat and industrial sensing. A SQL injection vulnerability exists in the smart heat meter management system of Hangzhou Xinlei Electronic...

Baidu Smart Monitor - Unauthorized Access Vulnerability in Frame Drawing Software

Ltd. is a company under Baidu, with several business lines such as web search, hao123 and Baidu promotion. Unauthorized access vulnerability exists in Baidu Intelligent Monitor - Frame Drawing software, which can be exploited by attackers to obtain sensitive information...

Critical Security Bug Can Knock Smart Meters Offline

Critical security vulnerabilities in Schneider Electric smart meters could allow an attacker a path to remote code execution RCE, or to reboot the meter causing a denial-of-service DoS condition on the device. Schneider Electric’s PowerLogic ION/PM smart meter product line, like other smart meter...

Linksys Smart Wi-Fi routers suffer from weak password vulnerability

Smart Wi-Fi is a router product from Linksys. Linksys Smart Wi-Fi routers have a weak password vulnerability that can be exploited by an attacker to directly log in to the router's management backend to control the device...

CVE-2020-19417

Emerson Smart Wireless Gateway 1420 4.6.59 allows non-privileged users such as the default account 'maint' to perform administrative tasks by sending specially crafted HTTP requests to the application...

Default credentials

Emerson Smart Wireless Gateway 1420 4.6.59 allows non-privileged users such as the default account 'maint' to perform administrative tasks by sending specially crafted HTTP requests to the application...

Authentication flaw

Incorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 allows remote attackers to obtain sensitive device information from the administrator console without authentication...

CVE-2020-19419

CVE-2020-19419 affects Emerson Smart Wireless Gateway 1420 run in firmware 4.6.59, where Incorrect Access Control allows remote, unauthenticated access to administrator console to obtain sensitive device information (e.g., logs). Public sources (NVD, Red Hat, PRION, PT Security, PacketStorm) conf...

CVE-2020-19419

Incorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 allows remote attackers to obtain sensitive device information from the administrator console without authentication...

CVE-2020-19417

CVE-2020-19417 affects Emerson Smart Wireless Gateway 1420 firmware 4.6.59. The issue lets non-privileged users (e.g., default account ‘maint’) perform administrative tasks by sending specially crafted HTTP requests to the application, enabling horizontal escalation on the device via the network....

Hackers steal $3.8 million from Defi Protocol DODO

By Habiba Rashid DODO is a decentralized exchange built on the proactive market maker algorithm that runs on Ethereum and Binance Smart Chain BSC This is a post from HackRead.com Read the original post: Hackers steal $3.8 million from Defi Protocol DODO...

Arbitrary File Download Vulnerability in Northeast Normal University Ideal Software Corporation's Smart Education Cloud Platform

Founded in 2001, Northeast Normal University Ideal Software Co., Ltd. is mainly engaged in the theoretical research of basic education informatization, the research, development, promotion and application of basic education resources and software, the training of teachers' education informatizati...

Emerson Smart Wireless Gateway 1420 4.6.59 Missing Authentication Vulnerability

Title: Missing access controls Product: Emerson Smart Wireless Gateway Vendor Homepage: http://emerson.com Vulnerable Version: 1420 4.6.59 CVE Number: CVE-2020-19419 Authors: Harsha Bhat, Anish Mitra and Unmesh Guragol Timeline: 2019-08-02 Disclosed to the vendor 2019-08-22 Vendor confirmed that...

Emerson Smart Wireless Gateway 1420 4.6.59 Missing Authentication

Title: Missing access controls Product: Emerson Smart Wireless Gateway Vendor Homepage: http://emerson.com Vulnerable Version: 1420 4.6.59 CVE Number: CVE-2020-19419 Authors: Harsha Bhat, Anish Mitra and Unmesh Guragol Timeline: 2019-08-02 Disclosed to the vendor 2019-08-22 Vendor confirmed that...

Emerson Smart Wireless Gateway 1420 4.6.59 Privilege Escalation Vulnerability

Title: Privilege Escalation Product: Emerson Smart Wireless Gateway Vendor Homepage: http://emerson.com Vulnerable Version: 1420 4.6.59 CVE Number: CVE-2020-19417 Authors: Harsha Bhat Anish Mitra and Unmesh Guragol Timeline: 2019-08-02 Disclosed to the vendor 2019-08-22 Vendor confirmed that the...