|
250121
|
7.5 |
HIGH
Network
|
moxa
|
oncell_g3470a-lte-us_firmware oncell_g3470a-lte-us-t_firmware oncell_g3470a-lte-eu_firmware oncell_g3470a-lte-eu-t_firmware
|
There is Memory corruption in the web interface of Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different vulnerability than CVE-2018-11425.
|
CWE-787
Out-of-bounds Write
|
CVE-2018-11424
|
2024-11-21 12:43 |
2019-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250122
|
7.5 |
HIGH
Network
|
moxa
|
oncell_g3150-hspa_firmware oncell_g3150-hspa-t_firmware
|
There is Memory corruption in the web interface Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior, different vulnerability than CVE-2018-11420.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-11423
|
2024-11-21 12:43 |
2019-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250123
|
9.8 |
CRITICAL
Network
|
moxa
|
oncell_g3150-hspa_firmware oncell_g3150-hspa-t_firmware
|
Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary configuration protocol that does not provide confidentiality, integrity, and authenticity security controls. All i…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2018-11422
|
2024-11-21 12:43 |
2019-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250124
|
9.8 |
CRITICAL
Network
|
moxa
|
oncell_g3150-hspa_firmware oncell_g3150-hspa-t_firmware
|
Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary monitoring protocol that does not provide confidentiality, integrity, and authenticity security controls. All info…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2018-11421
|
2024-11-21 12:43 |
2019-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250125
|
9.8 |
CRITICAL
Network
|
moxa
|
oncell_g3150-hspa_firmware oncell_g3150-hspa-t_firmware
|
There is Memory corruption in the web interface of Moxa OnCell G3100-HSPA Series version 1.5 Build 17042015 and prio,r a different vulnerability than CVE-2018-11423.
|
CWE-787
Out-of-bounds Write
|
CVE-2018-11420
|
2024-11-21 12:43 |
2019-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250126
|
6.1 |
MEDIUM
Network
|
intelliants
|
subrion
|
Subrion CMS before 4.1.4 has XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2018-11317
|
2024-11-21 12:43 |
2019-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250127
|
8.8 |
HIGH
Network
|
moxa
|
oncell_g3150-hspa_firmware oncell_g3150-hspa-t_firmware
|
CSRF tokens are not used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior, which makes it possible to perform CSRF attacks on the device administrator.
|
CWE-352
Origin Validation Error
|
CVE-2018-11427
|
2024-11-21 12:43 |
2019-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250128
|
9.8 |
CRITICAL
Network
|
moxa
|
oncell_g3150-hspa_firmware oncell_g3150-hspa-t_firmware
|
A weak Cookie parameter is used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker can brute force parameters required to bypass authentication …
|
CWE-287
Improper Authentication
|
CVE-2018-11426
|
2024-11-21 12:43 |
2019-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250129
|
9.8 |
CRITICAL
Network
|
qualcomm
|
mdm9206_firmware mdm9607_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware qcs605_firmware qm215_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd…
|
Improper authentication can happen on Remote command handling due to inappropriate handling of events in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdra…
|
CWE-287
Improper Authentication
|
CVE-2018-11271
|
2024-11-21 12:43 |
2019-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250130
|
9.8 |
CRITICAL
Network
|
emerson
|
ve6046_firmware
|
Emerson DeltaV Smart Switch Command Center application, available in versions 11.3.x and 12.3.1, was unable to change the DeltaV Smart Switches’ management password upon commissioning. Emerson releas…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2018-11691
|
2024-11-21 12:43 |
2019-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|