1094 matches found
Authentication flaw
CAMS for HIS CENTUM CS 3000 includes CENTUM CS 3000 Small R3.08.10 to R3.09.50, CENTUM VP includes CENTUM VP Small, Basic R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to bypass authentication and send altered...
CVE-2020-5608
CAMS for HIS CENTUM CS 3000 includes CENTUM CS 3000 Small R3.08.10 to R3.09.50, CENTUM VP includes CENTUM VP Small, Basic R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to bypass authentication and send altered...
CVE-2020-5608
CVE-2020-5608 affects Yokogawa CAMS for HIS CENTUM CS 3000 (including CENTUM CS 3000 Small) R3.08.10–R3.09.50, CENTUM VP (including CENTUM VP Small/Basic) R4.01.00–R6.07.00, B/M9000CS R5.04.01–R5.05.01, and B/M9000 VP R6.01.01–R8.03.01. The vulnerability is an improper authentication (CWE-287) ri...
CVE-2020-5609
Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 includes CENTUM CS 3000 Small R3.08.10 to R3.09.50, CENTUM VP includes CENTUM VP Small, Basic R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to crea...
csmonitor.com Cross Site Scripting vulnerability OBB-1227634
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Product update: Virtuozzo Hybrid Server 7.0 Update 14 Hotfix 1 (7.0.14-257)
The Hotfix 1 for Virtuozzo Hybrid Server 7.0 Update 14 provides stability and usability bug fixes. Vulnerability id: PSBM-105022 Unable to live-migrate VMs with dirty bitmaps on Virtuozzo Storage. Vulnerability id: PSBM-104631, PSBM-104632 CS journals to be placed on SSDs are now properly handled...
CS Money: [cs.money] Open Redirect Leads to Account Takeover
Summary: I found an open redirect on https://cs.money domain, using this payload https://cs.money///google.com we can redirect into any domain that we want, you can see the request and response from this image below : ███ Steps To Reproduce: The final payload is having an account takeover as the...
CVE-2020-2912
Vulnerability CVE-2020-2912 affects Oracle PeopleSoft Enterprise CS Campus Community, specifically the Self-Service component in PeopleSoft 9.2. The issue allows a low-privilege attacker with network access over HTTP to read confidential data from the Self-Service area, with the vulnerability des...
CVE-2019-10553
Multiple Read overflows due to improper length checks while decoding authentication in Cs domain/RAU Reject and TC cmd in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...
ABD - Course Materials For Advanced Binary Deobfuscation
Advanced Binary Deobfuscation This repository contains the course materials of Advanced Binary Deobfuscation at the Global Cybersecurity Camp GCC Tokyo in 2020. Course Abstract Reverse engineering is not easy, especially if a binary code is obfuscated. Once obfuscation performed, the binary would...
CVE-2015-5626
CVE-2015-5626 describes a stack-based buffer overflow affecting Yokogawa CENTUM CS 1000/3000, CENTUM VP, ProSafe-RS, Exaopc/Exaquantum/Batch, Exapilot, Exaplog, Exasmoc, Exarqe, Field Wireless OPC Server, PRM, STARDOM VDS/OPC Server for Windows, FAST/TOOLS, B/M9000CS/VP, and FieldMate. A crafted ...
CVE-2015-5627
CVE-2015-5627 is a stack-based buffer overflow affecting Yokogawa CENTUM CS 1000/3000, CENTUM VP, ProSafe-RS, Exaopc/Exaquantum/Batch, Exapilot/Exaplog/Exasmoc/Exarqe, Field Wireless OPC Server, PRM, STARDOM VDS/OPC Server, FAST/TOOLS, B/M9000CS/VP, and FieldMate (various older revisions). The ro...
CVE-2019-20379
ganglia-web aka Ganglia Web Frontend through 3.7.5 allows XSS via the header.php cs parameter...
Cross site scripting
ganglia-web aka Ganglia Web Frontend through 3.7.5 allows XSS via the header.php cs parameter...
UBUNTU-CVE-2014-8178
Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for attackers to poison the image cache via a crafted image in pull or push commands...
CVE-2014-8178
Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for attackers to poison the image cache via a crafted image in pull or push commands...
CVE-2019-18825
Barco ClickShare Huddle CS-100 devices before 1.9.0 and CSE-200 devices before 1.9.0 are affected by CVE-2019-18825 due to incorrect Credentials Management. The ClickShare Base Unit uses encryption-at-rest keys that are shared across all Base Units of models CS-100 & CSE-200, enabling potential i...
CVE-2019-18825
Barco ClickShare Huddle CS-100 devices before 1.9.0 and CSE-200 devices before 1.9.0 have incorrect Credentials Management. The ClickShare Base Unit implements encryption at rest using encryption keys which are shared across all ClickShare Base Units of models CS-100 & CSE-200...
Debian: Security Advisory (DSA-4585-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...