Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
super vulnerabilities and exploits
(subscribe to this query)
10
CVSSv2
CVE-2021-35978
An issue exists in Digi TransPort DR64, SR44 VC74, and WR. The ZING protocol allows arbitrary remote command execution with SUPER privileges. This allows an attacker (with knowledge of the protocol) to execute arbitrary code on the controller including overwriting firmware, addin...
Digi Transport Dr64 Firmware
Digi Transport Sr44 Firmware
Digi Transport Vc74 Firmware
Digi Transport Wr11 Firmware
Digi Transport Wr11 Xt Firmware
Digi Transport Wr21 Firmware
Digi Transport Wr31 Firmware
Digi Transport Wr41 Firmware
Digi Transport Wr44 Firmware
10
CVSSv2
CVE-2019-14013
While parsing invalid super index table, elements within super index table may exceed total chunk size and invalid data is read into the table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snap...
Qualcomm Apq8009 Firmware -
Qualcomm Apq8017 Firmware -
Qualcomm Apq8053 Firmware -
Qualcomm Apq8064 Firmware -
Qualcomm Apq8096au Firmware -
Qualcomm Apq8098 Firmware -
Qualcomm Mdm9206 Firmware -
Qualcomm Mdm9207c Firmware -
Qualcomm Mdm9607 Firmware -
Qualcomm Msm8905 Firmware -
Qualcomm Msm8909 Firmware -
Qualcomm Msm8909w Firmware -
Qualcomm Msm8917 Firmware -
Qualcomm Msm8920 Firmware -
Qualcomm Msm8937 Firmware -
Qualcomm Msm8939 Firmware -
Qualcomm Msm8940 Firmware -
Qualcomm Msm8953 Firmware -
Qualcomm Msm8996 Firmware -
Qualcomm Msm8996au Firmware -
Qualcomm Nicobar Firmware -
Qualcomm Qcm2150 Firmware -
10
CVSSv2
CVE-2019-10534
Null-pointer dereference can occur while accessing the super index entry when it is not been allocated in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9206, MDM...
Qualcomm Mdm9206 Firmware -
Qualcomm Mdm9607 Firmware -
Qualcomm Msm8909w Firmware -
Qualcomm Msm8996au Firmware -
Qualcomm Qca6574au Firmware -
Qualcomm Qcs405 Firmware -
Qualcomm Qcs605 Firmware -
Qualcomm Qualcomm 215 Firmware -
Qualcomm Sd 210 Firmware -
Qualcomm Sd 212 Firmware -
Qualcomm Sd 205 Firmware -
Qualcomm Sd 425 Firmware -
Qualcomm Sd 427 Firmware -
Qualcomm Sd 430 Firmware -
Qualcomm Sd 435 Firmware -
Qualcomm Sd 439 Firmware -
Qualcomm Sd 429 Firmware -
Qualcomm Sd 450 Firmware -
Qualcomm Sd 600 Firmware -
Qualcomm Sd 625 Firmware -
Qualcomm Sd 632 Firmware -
Qualcomm Sd 636 Firmware -
10
CVSSv2
CVE-2018-11682
Default and unremovable support credentials allow malicious users to gain total super user control of an IoT device through a TELNET session to products using the Stanza Lutron integration protocol Revision M to Revision Y. NOTE: The vendor disputes this id as not being a vulnera...
Lutron Stanza Firmware -
Lutron Radiora 2 Firmware -
Lutron Homeworks Qs Firmware -
10
CVSSv2
CVE-2018-11629
Default and unremovable support credentials (user:lutron password:integration) allow malicious users to gain total super user control of an IoT device through a TELNET session to products using the HomeWorks QS Lutron integration protocol Revision M to Revision Y. NOTE: The vendo...
Lutron Stanza Firmware -
Lutron Radiora 2 Firmware -
Lutron Homeworks Qs Firmware -
10
CVSSv2
CVE-2018-11681
Default and unremovable support credentials (user:nwk password:nwk2) allow malicious users to gain total super user control of an IoT device through a TELNET session to products using the RadioRA 2 Lutron integration protocol Revision M to Revision Y. NOTE: The vendor disputes th...
Lutron Stanza Firmware -
Lutron Radiora 2 Firmware -
Lutron Homeworks Qs Firmware -
10
CVSSv2
CVE-2001-1594
GE Healthcare eNTEGRA P&R has a password of (1) entegra for the entegra user, (2) passme for the super user of the Polestar/Polestar-i Starlink 4 upgrade, (3) 0 for the entegra user of the Codonics printer FTP service, (4) eNTEGRA for the eNTEGRA P&R user account, (5) ins...
Gehealthcare Entegra P&r
1 Github repository
10
CVSSv2
CVE-2012-4681
Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and previous versions allow remote malicious users to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.Cla...
Oracle Jdk 1.7.0
Oracle Jre 1.7.0
Oracle Jdk 1.6.0
Oracle Jre 1.6.0
Redhat Enterprise Linux Desktop 6.0
Redhat Enterprise Linux Server 6.0
Redhat Enterprise Linux Workstation 6.0
Redhat Enterprise Linux Eus 6.3
1 EDB exploit
4 Github repositories
9 Articles
10
CVSSv2
CVE-2012-1182
The RPC code generator in Samba 3.x prior to 3.4.16, 3.5.x prior to 3.5.14, and 3.6.x prior to 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote malicious users to execute arbitrary code v...
Samba Samba 3.0.19
Samba Samba 3.0.23
Samba Samba 3.0.14a
Samba Samba 3.0.27
Samba Samba 3.0.31
Samba Samba
Samba Samba 3.0.3
Samba Samba 3.0.8
Samba Samba 3.2.15
Samba Samba 3.3.3
Samba Samba 3.0.29
Samba Samba 3.0.25
Samba Samba 3.0.25b
Samba Samba 3.2.5
Samba Samba 3.4.2
Samba Samba 3.2.3
Samba Samba 3.3.15
Samba Samba 3.4.11
Samba Samba 3.0.2a
Samba Samba 3.0.36
Samba Samba 3.4.0
Samba Samba 3.0.28
1 EDB exploit
2 Nmap scripts
16 Github repositories
10
CVSSv2
CVE-2007-0910
Unspecified vulnerability in PHP prior to 5.2.1 allows malicious users to "clobber" certain super-global variables via unspecified vectors.
Php Php 4.3.9
Php Php 3.0
Php Php 3.0.5
Php Php 3.0.11
Php Php
Php Php 5.1.5
Php Php 5.1.2
Php Php 4.2.0
Php Php 5.1.1
Php Php 3.0.1
Php Php 3.0.2
Php Php 4.4.4
Php Php 4.1.0
Php Php 5.1.6
Php Php 4.3.4
Php Php 4.0.4
Php Php 4.3.0
Php Php 4.0.5
Php Php 5.0
Php Php 3.0.8
Php Php 5.0.5
Php Php 4.3.6
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
buffer overflow
type confusion
server-side request forgery
CVE-2024-38440
CVE-2024-27801
CVE-2024-5868
CVE-2024-0582
CVE-2024-37643
CVE-2024-3105
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
NEXT »