|
222111
|
6.0 |
MEDIUM
Local
|
synaptics
lenovo
hp
|
vfs75xx_firmware
thinkpad_25_firmware
thankpad_a475_firmware
thankpad_a485_firmware
thinkpad_e480_firmware
thinkpad_e580_firmware
thinkpad_e485_firmware
thinkpad_e585_firmware
Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attack…
|
NVD-CWE-noinfo
|
CVE-2019-18618
|
2024-11-21 13:33 |
2020-07-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
|
222112
|
7.8 |
HIGH
Local
|
cypress
|
cyw20735_firmware
|
On the Cypress CYW20735 evaluation board, any data that exceeds 384 bytes is copied and causes an overflow. This is because the maximum BLOC buffer size for sending and receiving data is set to 384 b…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-18614
|
2024-11-21 13:33 |
2020-06-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222113
|
9.8 |
CRITICAL
Network
|
dlink
|
dap-1360_revision_f_firmware
|
An issue was discovered on D-Link DAP-1360 revision F devices. Remote attackers can start a telnet service without authorization via an undocumented HTTP request. Although this is the primary vulnera…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2019-18666
|
2024-11-21 13:33 |
2020-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222114
|
7.5 |
HIGH
Network
|
blaauwproducts
|
remote_kiln_control
|
Weak password requirements in Blaauw Remote Kiln Control through v3.00r4 allow a user to set short or guessable passwords (e.g., 1 or 1234).
|
CWE-521
Weak Password Requirements
|
CVE-2019-18872
|
2024-11-21 13:33 |
2020-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222115
|
8.8 |
HIGH
Network
|
blaauwproducts
|
remote_kiln_control
|
A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to upload arbitrary files, leading to arbitrary remote code execu…
|
CWE-22
Path Traversal
|
CVE-2019-18871
|
2024-11-21 13:33 |
2020-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222116
|
6.5 |
MEDIUM
Network
|
blaauwproducts
|
remote_kiln_control
|
A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to download arbitrary files from the host machine.
|
CWE-22
Path Traversal
|
CVE-2019-18870
|
2024-11-21 13:33 |
2020-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222117
|
9.8 |
CRITICAL
Network
|
blaauwproducts
|
remote_kiln_control
|
Leftover Debug Code in Blaauw Remote Kiln Control through v3.00r4 allows a user to execute arbitrary php code via /default.php?idx=17.
|
NVD-CWE-Other
|
CVE-2019-18869
|
2024-11-21 13:33 |
2020-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222118
|
7.5 |
HIGH
Network
|
blaauwproducts
|
remote_kiln_control
|
Unauthenticated SQL injection via the username in the login mechanism in Blaauw Remote Kiln Control through v3.00r4 allows a user to extract arbitrary data from the rkc database.
|
CWE-89
SQL Injection
|
CVE-2019-18866
|
2024-11-21 13:33 |
2020-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222119
|
7.5 |
HIGH
Network
|
blaauwproducts
|
remote_kiln_control
|
/server-info and /server-status in Blaauw Remote Kiln Control through v3.00r4 allow an unauthenticated attacker to gain sensitive information about the host machine.
|
NVD-CWE-noinfo
|
CVE-2019-18864
|
2024-11-21 13:33 |
2020-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222120
|
9.8 |
CRITICAL
Network
|
blaauwproducts
|
remote_kiln_control
|
Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to access MySQL credentials in cleartext in /engine/db.inc, /lang/nl.bak, or /lang/en.bak.
|
CWE-312
CWE-522
Cleartext Storage of Sensitive Information
Insufficiently Protected Credentials
|
CVE-2019-18868
|
2024-11-21 13:33 |
2020-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
