Vulnerabilities (CVE)

Filtered by CWE-707
Total 62 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-3918 1 Samsung 2 Sth-eth-250, Sth-eth-250 Firmware 2023-05-16 6.4 MEDIUM 7.5 HIGH
An exploitable vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The hubCore process listens on port 39500 and relays any unauthenticated messages to SmartThings' remote servers, which incorrectly handle camera IDs for the 'sync' operation, leading to arbitrary deletion of cameras. An attacker can send an HTTP request to trigger this vulnerability.
CVE-2019-10052 1 Suricata-ids 1 Suricata 2019-09-04 5.0 MEDIUM 7.5 HIGH
An issue was discovered in Suricata 4.1.3. If the network packet does not have the right length, the parser tries to access a part of a DHCP packet. At this point, the Rust environment runs into a panic in parse_clientid_option in the dhcp/parser.rs file.