Threats affecting pkg:github/hankjames/Vul-Reports

9 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	EPSS 0.3%	CVE-2024-48539Vul-Reports · Use of Hard-coded Credentials Critical9.8EPSS 0.3%2024-10-24CVE Database V5CVE-2024-48539 Neye3C v4.5.2.0 was discovered to contain a hardcoded encryption key in the firmware update mechanism. EPSS 0.3%Vulnerability CWE-798	CVE Database V5	2024-10-24
High	7.5	EPSS 0.6%	CVE-2024-48788Vul-Reports · Cleartext Transmission High7.5EPSS 0.6%2024-10-11CVE Database V5CVE-2024-48788 An issue in YESCAM (com.yescom.YesCam.zwave) 1.0.2 allows a remote attacker to obtain sensitive information via the firmware update process. EPSS 0.6%Vulnerability CWE-319	CVE Database V5	2024-10-11
Critical	9.1	EPSS 0.5%	CVE-2024-48787Vul-Reports · Incorrect Authorization Critical9.1EPSS 0.5%2024-10-11CVE Database V5CVE-2024-48787 An issue in Revic Optics Revic Ops (us.revic.revicops) 1.12.5 allows a remote attacker to obtain sensitive information via the firmware update process. EPSS 0.5%Vulnerability CWE-863	CVE Database V5	2024-10-11
High	7.5	EPSS 0.4%	CVE-2024-48777Vul-Reports · Missing Authentication High7.5EPSS 0.4%2024-10-11CVE Database V5CVE-2024-48777 LEDVANCE com.ledvance.smartplus.eu 2.1.10 allows a remote attacker to obtain sensitive information via the firmware update process. EPSS 0.4%Vulnerability CWE-306	CVE Database V5	2024-10-11
High	7.5	EPSS 0.4%	CVE-2024-48776Vul-Reports · Missing Authentication High7.5EPSS 0.4%2024-10-11CVE Database V5CVE-2024-48776 An issue in Shelly com.home.shelly 1.0.4 allows a remote attacker to obtain sensitive information via the firmware update process EPSS 0.4%Vulnerability CWE-306	CVE Database V5	2024-10-11
High	7.5	EPSS 0.4%	CVE-2024-48775Vul-Reports · Missing Authentication High7.5EPSS 0.4%2024-10-11CVE Database V5CVE-2024-48775 An issue in Plug n Play Camera com.ezset.delaney 1.2.0 allows a remote attacker to obtain sensitive information via the firmware update process. EPSS 0.4%Vulnerability CWE-306	CVE Database V5	2024-10-11
High	7.5	EPSS 0.4%	CVE-2024-48773Vul-Reports · Missing Authentication High7.5EPSS 0.4%2024-10-11CVE Database V5CVE-2024-48773 An issue in WoFit v.7.2.3 allows a remote attacker to obtain sensitive information via the firmware update process EPSS 0.4%Vulnerability CWE-306	CVE Database V5	2024-10-11
Critical	9.1	EPSS 0.4%	CVE-2024-48772Vul-Reports · Incorrect Authorization Critical9.1EPSS 0.4%2024-10-11CVE Database V5CVE-2024-48772 An issue in C-CHIP (com.cchip.cchipamaota) v.1.2.8 allows a remote attacker to obtain sensitive information via the firmware update process. EPSS 0.4%Vulnerability CWE-863	CVE Database V5	2024-10-11
High	7.5	EPSS 0.5%	CVE-2024-48768Vul-Reports · Missing Authentication High7.5EPSS 0.5%2024-10-11CVE Database V5CVE-2024-48768 An issue in almaodo GmbH appinventor.ai_google.almando_control 2.3.1 allows a remote attacker to obtain sensitive information via the firmware update process EPSS 0.5%Vulnerability CWE-306	CVE Database V5	2024-10-11

Page 1 of 1