BL
Vendor
Blaauwproducts
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2019-18872 | RK Remote Kiln Control Blaauwproducts | 7.5 | May 7 | Weak password requirements in Blaauw Remote Kiln Control through v3.00r4 allow a user to set short or guessable passwords (e.g., 1 or 1234) |
| CVE-2019-18871 | RK Remote Kiln Control Blaauwproducts | 8.8 | May 7 | A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to upload arbitrary files, leading to… |
| CVE-2019-18870 | RK Remote Kiln Control Blaauwproducts | 6.5 | May 7 | A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to download arbitrary files from the host… |
| CVE-2019-18869 | RK Remote Kiln Control Blaauwproducts | 9.8 | May 7 | Leftover Debug Code in Blaauw Remote Kiln Control through v3.00r4 allows a user to execute arbitrary php code via /default.php?idx=17 |
| CVE-2019-18866 | RK Remote Kiln Control Blaauwproducts | 7.5 | May 7 | Unauthenticated SQL injection via the username in the login mechanism in Blaauw Remote Kiln Control through v3.00r4 allows a user to extract arbitrary data from the rkc database |
| CVE-2019-18864 | RK Remote Kiln Control Blaauwproducts | 7.5 | May 7 | /server-info and /server-status in Blaauw Remote Kiln Control through v3.00r4 allow an unauthenticated attacker to gain sensitive information about the host machine |
| CVE-2019-18868 | RK Remote Kiln Control Blaauwproducts | 9.8 | May 7 | Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to access MySQL credentials in cleartext in /engine/db.inc, /lang/nl.bak, or /lang/en.bak |
| CVE-2019-18867 | RK Remote Kiln Control Blaauwproducts | 7.5 | May 7 | Browsable directories in Blaauw Remote Kiln Control through v3.00r4 allow an attacker to enumerate sensitive filenames and locations, including source code |
| CVE-2019-18865 | RK Remote Kiln Control Blaauwproducts | 5.3 | May 7 | Information disclosure via error message discrepancies in authentication functions in Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to enumerate… |