|
248221
|
6.4 |
MEDIUM
Physics
|
denx
|
u-boot
|
Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. Devices that make use of Das U-Boot's AES-CBC encryption feature using environment encryption (i.e., sett…
|
CWE-310
Cryptographic Issues
|
CVE-2017-3226
|
2024-11-21 12:25 |
2018-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248222
|
4.6 |
MEDIUM
Physics
|
denx
|
u-boot
|
Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. For devices utilizing this environment encryption mode, U-Boot's use of a zero initialization vector may …
|
CWE-310
Cryptographic Issues
|
CVE-2017-3225
|
2024-11-21 12:25 |
2018-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248223
|
8.2 |
HIGH
Adjacent
|
quagga
suse
redhat
|
quagga
opensuse
suse_linux
package_manager
|
Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber. According to RFC 2328 section 13.1, for two i…
|
CWE-345
Insufficient Verification of Data Authenticity
|
CVE-2017-3224
|
2024-11-21 12:25 |
2018-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248224
|
9.8 |
CRITICAL
Network
|
dahuasecurity
|
ip_camera_firmware
|
Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow. Dahua IP camera pro…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-3223
|
2024-11-21 12:25 |
2018-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248225
|
8.1 |
HIGH
Network
|
calamp
|
lmu_3030_obd-ii_firmware
lmu_3030_cdma_firmware
lmu_3030_gsm_firmware
|
CalAmp LMU 3030 series OBD-II CDMA and GSM devices has an SMS (text message) interface that can be deployed where no password is configured for this interface by the integrator / reseller. This inter…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2017-3217
|
2024-11-21 12:25 |
2018-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248226
|
7.8 |
HIGH
Local
|
portrait
fujitsu
hp
philips
|
portrait_display_sdk
displayview_click
displayview_click_suite
display_assistant
my_display
smart_control_premium
|
Applications developed using the Portrait Display SDK, versions 2.30 through 2.34, default to insecure configurations which allow arbitrary code execution. A number of applications developed using th…
|
CWE-16
Configuration
|
CVE-2017-3210
|
2024-11-21 12:25 |
2018-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248227
|
8.1 |
HIGH
Adjacent
|
dbpower
|
u818a_firmware
|
The DBPOWER U818A WIFI quadcopter drone provides FTP access over its own local access point, and allows full file permissions to the anonymous user. The DBPower U818A WIFI quadcopter drone runs an FT…
|
CWE-306
CWE-276
Missing Authentication for Critical Function
Incorrect Default Permissions
|
CVE-2017-3209
|
2024-11-21 12:25 |
2018-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248228
|
9.8 |
CRITICAL
Network
|
gigabyte
|
gb-bsi7h-6500_firmware
gb-bxi7-5775_firmware
|
GIGABYTE BRIX UEFI firmware does not cryptographically validate images prior to updating the system firmware. Additionally, the firmware updates are served over HTTP. An attacker can make arbitrary m…
|
CWE-347
CWE-311
Improper Verification of Cryptographic Signature
Missing Encryption of Sensitive Data
|
CVE-2017-3198
|
2024-11-21 12:25 |
2018-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248229
|
9.8 |
CRITICAL
Network
|
gigabyte
|
gb-bsi7h-6500_firmware
gb-bxi7-5775_firmware
|
GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not…
|
CWE-20
Improper Input Validation
|
CVE-2017-3197
|
2024-11-21 12:25 |
2018-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248230
|
9.8 |
CRITICAL
Network
|
themidnightcoders
|
weborb_for_java
|
The Java implementation of AMF3 deserializers used by WebORB for Java by Midnight Coders, version 5.1.1.0, allows external entity references (XXEs) from XML documents embedded within AMF3 messages. I…
|
CWE-611
XXE
|
CVE-2017-3208
|
2024-11-21 12:25 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
