|
212981
|
9.8 |
CRITICAL
Network
|
enphase
|
envoy
|
A directory traversal vulnerability was discovered in Enphase Envoy R3.*.* via images/, include/, include/js, or include/css on TCP port 8888.
|
CWE-22
Path Traversal
|
CVE-2019-7678
|
2024-11-21 13:48 |
2019-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212982
|
6.1 |
MEDIUM
Network
|
enphase
|
envoy
|
XSS exists in Enphase Envoy R3.*.* via the profileName parameter to the /home URI on TCP port 8888.
|
CWE-79
Cross-site Scripting
|
CVE-2019-7677
|
2024-11-21 13:48 |
2019-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212983
|
7.2 |
HIGH
Network
|
enphase
|
envoy
|
A weak password vulnerability was discovered in Enphase Envoy R3.*.*. One can login via TCP port 8888 with the admin password for the admin account.
|
CWE-521
Weak Password Requirements
|
CVE-2019-7676
|
2024-11-21 13:48 |
2019-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212984
|
7.5 |
HIGH
Network
|
mobotix
|
s14_firmware
|
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. The default management application is delivered over cleartext HTTP with Basic Authentication, as demonstrated by the /admin/index.html UR…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2019-7675
|
2024-11-21 13:48 |
2019-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212985
|
9.8 |
CRITICAL
Network
|
mobotix
|
s14_firmware
|
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. /admin/access accepts a request to set the "aaaaa" password, considered insecure for some use cases, from a user.
|
CWE-521
Weak Password Requirements
|
CVE-2019-7674
|
2024-11-21 13:48 |
2019-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212986
|
7.5 |
HIGH
Network
|
mobotix
|
s14_firmware
|
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. Administrator Credentials are stored in the 13-character DES hash format.
|
CWE-327
Use of a Broken or Risky Cryptographic Algorithm
|
CVE-2019-7673
|
2024-11-21 13:48 |
2019-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212987
|
5.5 |
MEDIUM
Local
|
elfutils_project debian canonical opensuse redhat
|
elfutils debian_linux ubuntu_linux leap enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_eus enterprise_linux_server_tus enter…
|
In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in libelf. A crafted ELF input can cause a segmentation fault leading to denial of s…
|
CWE-125
Out-of-bounds Read
|
CVE-2019-7665
|
2024-11-21 13:48 |
2019-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212988
|
5.5 |
MEDIUM
Local
|
elfutils_project redhat
|
elfutils enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux enterprise_linux_eus enterprise_linux_server_tus enterprise_linux_server_a…
|
In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect overflow check. Crafted elf input causes a segmentation fault, leading to denial…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-7664
|
2024-11-21 13:48 |
2019-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212989
|
6.5 |
MEDIUM
Network
|
libtiff debian canonical opensuse
|
libtiff debian_linux ubuntu_linux leap
|
An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tif_dirwrite.c in LibTIFF 4.0.10, affecting the cpSeparateBufToContigBuf function in tiffcp.c. Remote…
|
NVD-CWE-noinfo
|
CVE-2019-7663
|
2024-11-21 13:48 |
2019-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212990
|
6.5 |
MEDIUM
Network
|
webassembly
|
binaryen
|
An assertion failure was discovered in wasm::WasmBinaryBuilder::getType() in wasm-binary.cpp in Binaryen 1.38.22. This allows remote attackers to cause a denial of service (failed assertion and crash…
|
CWE-617
Reachable Assertion
|
CVE-2019-7662
|
2024-11-21 13:48 |
2019-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|