Archive
2 July 2019
Vulnerabilities first published on this day (UTC), newest first.
68 results · Feed
-
Unscored —
Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by roo…
-
Unscored —
modules/luksbootkeyfile/main.py in Calamares versions 3.1 through 3.2.10 has a race condition between the time when the…
-
Critical 9.8
Improper Verification of Cryptographic Signature in django-rest-registration
verification.py in django-rest-registration (aka Django REST Registration library) before 0.5.0 relies on a static string for signatures (i.e., the Django Signing API is misused), which allows remote attackers to spoof the verification process. This occurs be…
-
Unscored —
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, undisclosed traffic sent to BIG-IP iSes…
-
Unscored —
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, an undisclosed traffic pattern sent to …
-
Unscored —
Blipcare Wifi blood pressure monitor BP700 10.1 devices allow memory corruption that results in Denial of Service. When…
-
Unscored —
In the most recent firmware for Blipcare, the device provides an open Wireless network called "Blip" for communicating …
-
Unscored —
It was discovered as a part of the research on IoT devices in the most recent firmware for Blipcare device that the dev…
-
Unscored —CVE-2017-8416 EPSS 12%
An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device runs a custom daemon on UDP port 5978 which…
-
Unscored —
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.5, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, and 11.5.1-11.6.4, an undisclosed iContro…
-
Unscored —
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, 11.6.1-11.6.3.4, and 11.5.2-11.5.8 and BI…
-
Unscored —CVE-2017-8413 EPSS 10%
An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device runs a custom daemon on UDP port 5978 which…
-
Unscored —
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.5, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, and 11.5.1-11.6.4 and BIG-IQ 6.0.0-6.1.0 …
-
Unscored —
An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom telnet daemon as a part of the…
-
Unscored —
An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom binary called mp4ts under the …
-
Unscored —
An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device requires that a user logging into the devic…
-
Unscored —
In FreeBSD 12.0-STABLE before r349197 and 12.0-RELEASE before 12.0-RELEASE-p6, a bug in the non-default RACK TCP stack …
-
Unscored —
An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The binary orthrus in /sbin folder of the device handl…
-
Unscored —
Read the Docs before 3.5.1 has an Open Redirect if certain user-defined redirects are used. This affects private instan…
-
Unscored —
An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The binary rtspd in /sbin folder of the device handles…
-
Unscored —
An issue was discovered on D-Link DCS-1130 and DCS-1100 devices. The binary rtspd in /sbin folder of the device handles…
-
Medium 4.3
It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums. An attacker with …
-
High 8.1
A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached cli…
-
High 7.5
Arbitrary File Overwrite in fstream
fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink, will overwrite the system's file with the contents of the extracted f…
-
Unscored —
An out-of-bounds read vulnerability has been identified in Fuji Electric Alpha7 PC Loader Versions 1.1 and prior, which…
-
Unscored —
An issue was discovered on D-Link DCS-1130 devices. The device requires that a user logging to the device to provide a …
-
Unscored —
An issue was discovered on D-Link DCS-1130 devices. The device provides a crossdomain.xml file with no restrictions on …
-
Unscored —
Linear eMerge E3-Series devices have Default Credentials.
-
Unscored —
Linear eMerge E3-Series devices allow Directory Traversal.
-
Unscored —
An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of changing the admi…
-
Unscored —
Linear eMerge E3-Series devices allow File Inclusion.
-
Unscored —
An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB fol…
-
Unscored —
An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB fol…
-
Unscored —
Linear eMerge E3-Series devices allow XSS.
-
Unscored —
A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) th…
-
Unscored —
Linear eMerge E3-Series devices allow Unrestricted File Upload.
-
Unscored —CVE-2019-7258 EPSS 19%
Linear eMerge E3-Series devices allow Privilege Escalation.
-
Unscored —CVE-2019-7259 EPSS 13%
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.
-
Unscored —
Linear eMerge E3-Series devices have Cleartext Credentials in a Database.
-
Unscored —
Linear eMerge E3-Series devices have Hard-coded Credentials.