CVE Vulnerability Catalog

The SPDY/2 codec in Facebook Proxygen before 2015-11-09 truncates a certain field to two bytes, which allows hijacking and injection attacks.

The Summer Baby Zoom Wifi video monitoring system allows remote attackers to bypass authentication, related to the MySnapCam web service.

iBaby M3S has a password of 'admin' for the backdoor admin account.

Lens Peek-a-View contains default passwords for admin, user, and guest accounts, posing a serious security risk.

The Philips In.Sight B120/37 device has several accounts with default passwords that are easy to guess. Among them are passwords for root, admin, and user accounts, posing a serious security risk.

Gynoii has a password of 'guest' for the guest backdoor account and a password of '12345' for the admin backdoor account, which poses a serious security risk.

The Binary File Descriptor (BFD) library in GNU Binutils 2.28 has an undefined behavior issue related to member access within a null pointer, which may lead to application crashes.

CVE-2017-0561 describes a remote code execution vulnerability in the Broadcom Wi-Fi firmware that allows a remote attacker to execute arbitrary code within the context of the Wi-Fi SoC. This issue is rated as Critical due to the potential for remote code execution.

Dataprobe iBootBar (with firmware from 2007-09-20 and possibly later beta versions) allows remote attackers to bypass authentication and conduct power-cycle attacks on connected devices via a DCCOOKIE cookie.

Dataprobe iBootBar (with firmware from 2007-09-20 and possibly later) allows remote attackers to bypass authentication and conduct power-cycle attacks on connected devices via a DCRABBIT cookie.

SQL injection vulnerability in NewsController.php in the News module 5.3.2 and earlier for TYPO3 allows unauthenticated users to execute arbitrary SQL commands via vectors involving overwriteDemand for order and OrderByAllowed.

XiongMai uc-httpd has a directory traversal vulnerability allowing the reading of arbitrary files via a 'GET ../' HTTP request.

DragonWave Horizon 1.01.03 wireless radios have hardcoded login credentials that allow access to the devices. The username 'energetic' and password 'wireless' can be used in the web interface or by connecting via TELNET.

Urządzenia Schneider Electric Modicon TM221CE16R w wersji 1.3.3.3 umożliwiają zdalnym atakującym odkrycie hasła ochrony aplikacji poprzez wysłanie określonego żądania do portu Modbus (502/tcp). Po uzyskaniu hasła, aplikacja może być dowolnie pobierana, modyfikowana i przesyłana z powrotem.

Urządzenia Schneider Electric SoMachine Basic 1.4 SP1 oraz Schneider Electric Modicon TM221CE16R 1.3.3.3 mają podatność związaną z twardo zakodowanym kluczem. Funkcja Ochrony Projektu, która ma na celu zapobieganie nieautoryzowanemu dostępowi do chronionych plików XML, wykorzystuje klucz, który nie może być zmieniony, co umożliwia odczytanie hasła użytkownika z odszyfrowanych danych.

Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization.

Rogue Wave JViews before version 8.8 patch 21 and 8.9 before patch 1 allows remote attackers to execute arbitrary Java code that exists in the classpath. The issue exists because the ilog.views.faces.IlvFacesController servlet does not require explicit configuration of servlets that can be called.

A vulnerability in Cisco Aironet 1830 and 1850 Series Access Points running Cisco Mobility Express Software allows an unauthenticated remote attacker to take complete control of an affected device. The issue is due to the existence of default credentials available regardless of the device's configuration.

The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers to access the Spiceworks data/configurations directory. It leverages the unauthenticated nature of the TFTP service for all clients who can reach UDP port 69.