Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Rainmachine Component: Rainmachine Web Application Clear all filters
TI-2018-05045 CVE-2018-6909 · GHSA-w9gh-cppp-xrgm

A missing X-Frame-Options header in the Green Electronics RainMachine Mini-8 (2nd…

Priority LOW 31

A missing X-Frame-Options header in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application could be used by a remote attacker for clickjacking, as demonstrated by triggering an API page…

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01064 Published 2018-11-01 No fix listed CWE-1021
TI-2018-05042 CVE-2018-6906 · GHSA-75qh-3jjv-xvr8

A persistent Cross Site Scripting (XSS) vulnerability in the Green Electronics…

Priority LOW 28

A persistent Cross Site Scripting (XSS) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allows an attacker to inject arbitrary JavaScript via the REST API.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00675 Published 2018-11-01 No fix listed CWE-79