|
246631
|
8.8 |
HIGH
Network
|
mystrom
|
wifi_switch_firmware wifi_button_plus_firmware wifi_button_firmware wifi_switch_eu_firmware wifi_bulb_firmware wifi_led_strip_firmware
|
An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip before 3.80, WiFi Button before 2.73, and …
|
NVD-CWE-noinfo
|
CVE-2018-15480
|
2024-11-21 12:50 |
2018-08-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246632
|
9.8 |
CRITICAL
Network
|
mystrom
|
wifi_switch_firmware
|
myStrom WiFi Switch V1 devices before 2.66 did not sanitize a parameter received from the cloud that was used in an OS command. Malicious servers were able to run operating system commands on the dev…
|
CWE-78
OS Command
|
CVE-2018-15477
|
2024-11-21 12:50 |
2018-08-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246633
|
7.5 |
HIGH
Network
|
epson
|
wf-2750_firmware
|
EPSON WF-2750 printers with firmware JP02I2 do not properly validate files before running updates, which allows remote attackers to cause a printer malfunction or send malicious data to the printer.
|
CWE-346
Origin Validation Error
|
CVE-2018-14903
|
2024-11-21 12:50 |
2018-08-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246634
|
7.5 |
HIGH
Network
|
epson
|
iprint
|
The ContentProvider in the EPSON iPrint application 6.6.3 for Android does not properly restrict data access. This allows an attacker's application to read scanned documents.
|
CWE-200
Information Exposure
|
CVE-2018-14902
|
2024-11-21 12:50 |
2018-08-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246635
|
6.5 |
MEDIUM
Network
|
mystrom
|
wifi_switch_firmware wifi_button_plus_firmware wifi_button_firmware wifi_switch_eu_firmware wifi_bulb_firmware wifi_led_strip_firmware
|
An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip before 3.80, WiFi Button before 2.73, and …
|
CWE-287
Improper Authentication
|
CVE-2018-15479
|
2024-11-21 12:50 |
2018-08-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246636
|
8.1 |
HIGH
Network
|
mystrom
|
wifi_switch_firmware wifi_button_plus_firmware wifi_button_firmware wifi_switch_eu_firmware wifi_bulb_firmware wifi_led_strip_firmware
|
An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip before 3.80, WiFi Button before 2.73, and …
|
CWE-287
Improper Authentication
|
CVE-2018-15478
|
2024-11-21 12:50 |
2018-08-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246637
|
8.1 |
HIGH
Network
|
mystrom
|
wifi_switch_firmware wifi_button_plus_firmware wifi_button_firmware wifi_switch_eu_firmware wifi_bulb_firmware wifi_led_strip_firmware
|
An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip before 3.80, WiFi Button before 2.73, and …
|
CWE-295
Improper Certificate Validation
|
CVE-2018-15476
|
2024-11-21 12:50 |
2018-08-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246638
|
7.5 |
HIGH
Network
|
epson
|
iprint
|
The EPSON iPrint application 6.6.3 for Android contains hard-coded API and Secret keys for the Dropbox, Box, Evernote and OneDrive services.
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2018-14901
|
2024-11-21 12:50 |
2018-08-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246639
|
7.5 |
HIGH
Network
|
epson
|
wf-2750_firmware
|
On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs. Remote attackers can send print jobs directly to the printer via TCP port 9100.
|
CWE-417
Channel and Path Errors
|
CVE-2018-14900
|
2024-11-21 12:50 |
2018-08-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246640
|
6.1 |
MEDIUM
Network
|
epson
|
wf-2750_firmware
|
On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is vulnerable to HTML Injection that can redirect users to malicious sites.
|
CWE-79
Cross-site Scripting
|
CVE-2018-14899
|
2024-11-21 12:50 |
2018-08-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|