|
280101
|
- |
|
innominate
|
mguard_firmware
|
Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request.
|
CWE-200
Information Exposure
|
CVE-2014-2356
|
2024-11-21 11:06 |
2014-07-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280102
|
- |
|
hp
|
network_virtualization
|
Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows remote attackers to create files, and consequently execute…
|
CWE-22
Path Traversal
|
CVE-2014-2626
|
2024-11-21 11:06 |
2014-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280103
|
- |
|
hp
|
network_virtualization
|
Directory traversal vulnerability in the storedNtxFile function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows remote attackers to read arbitrary files via crafted input,…
|
CWE-22
Path Traversal
|
CVE-2014-2625
|
2024-11-21 11:06 |
2014-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280104
|
- |
|
morpho
|
itemiser_3
|
Morpho Itemiser 3 8.17 has hardcoded administrative credentials, which makes it easier for remote attackers to obtain access via a login request.
|
NVD-CWE-Other
|
CVE-2014-2363
|
2024-11-21 11:06 |
2014-07-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280105
|
- |
|
honeywell
|
falcon_xlweb_linux_controller falcon_xlweb_xlwebexe
|
Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow remote attackers to bypass authentication and obtain adminis…
|
NVD-CWE-Other
|
CVE-2014-2717
|
2024-11-21 11:06 |
2014-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280106
|
- |
|
omron
|
ns_series_system_program_firmware ns10_hmi_terminal ns12_hmi_terminal ns15_hmi_terminal ns5_hmi_terminal ns8_hmi_terminal
|
Cross-site scripting (XSS) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to inject arbitrary web scr…
|
CWE-79
Cross-site Scripting
|
CVE-2014-2370
|
2024-11-21 11:06 |
2014-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280107
|
- |
|
omron
|
ns_series_system_program_firmware ns10_hmi_terminal ns12_hmi_terminal ns15_hmi_terminal ns5_hmi_terminal ns8_hmi_terminal
|
Cross-site request forgery (CSRF) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to hijack the authen…
|
CWE-352
Origin Validation Error
|
CVE-2014-2369
|
2024-11-21 11:06 |
2014-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280108
|
- |
|
oleumtech
|
wio_dh2_wireless_gateway sensor_wireless_i\/o_module
|
OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic p…
|
NVD-CWE-Other
|
CVE-2014-2362
|
2024-11-21 11:06 |
2014-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280109
|
- |
|
oleumtech
|
wio_dh2_wireless_gateway sensor_wireless_i\/o_module
|
OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules, when BreeZ is used, do not require authentication for reading the site security key, which allows physically proximate attackers to…
|
NVD-CWE-Other
|
CVE-2014-2361
|
2024-11-21 11:06 |
2014-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280110
|
- |
|
oleumtech
|
wio_dh2_wireless_gateway sensor_wireless_i\/o_module
|
OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules allow remote attackers to execute arbitrary code via packets that report a high battery voltage.
|
CWE-20
Improper Input Validation
|
CVE-2014-2360
|
2024-11-21 11:06 |
2014-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|