CVE-2024-28122 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, external-secrets-fips, spire-server-fips, minio, mc-fips, boring-registry, boring-registry-fips, falcoctl, mc, minio-fips, spire-server...

GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, external-secrets-fips, spire-server-fips, minio, mc-fips, boring-registry, boring-registry-fips, falcoctl, mc, minio-fips, spire-server...

mc-status.net Improper Access Control vulnerability OBB-3858705

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the mc_luma() function in the h.265 Libde265 video codec implementation allows a attacker to cause a service failure.

The vulnerability of the mcluma function in the h.265 Libde265 video codec implementation is related to the issue where the output operation goes beyond the buffer boundaries when processing the unsigned char data type. Exploiting this vulnerability can allow a remote attacker to cause a service...

mc-again.com Cross Site Scripting vulnerability OBB-3849193

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mc-automation.it Improper Access Control vulnerability OBB-3841527

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-21664 vulnerabilities

Vulnerabilities for packages: mc, spire-server, minio, boring-registry, falcoctl, kubescape, vexctl, tekton-chains, gitsign...

Siemens SINUMERIK

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SIMATIC 资源管理错误漏洞

SINUMERIK MC is a CNC system for customized machine solutions. SINUMERIK ONE is a digital native CNC. A denial of service vulnerability exists in Siemens SINUMERIK ONE and SINUMERIK-MC due to a failure of an affected device to methodically and correctly process specially crafted packets sent to...

mc-medcon.com Improper Access Control vulnerability OBB-3805471

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mc-dortmund.de Cross Site Scripting vulnerability OBB-3790200

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-39054

An information leak in Tokudaya.ekimaemc v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39054

An information leak in Tokudaya.ekimaemc v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

PT-2023-26762 · Unknown · Tokudaya.Ekimae Mc

Name of the Vulnerable Software and Affected Versions: Tokudaya.ekimae mc version 13.6.1 Description: An information leak in the software allows attackers to obtain the channel access token and send crafted messages. Recommendations: For Tokudaya.ekimae mc version 13.6.1, at the moment, there is ...

CVE-2023-46378

Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...

CVE-2023-46378

Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kiam, up, vault-csi-provider, prometheus-blackbox-exporter, kubernetes-csi-livenessprobe, smarter-device-manager-fips, prometheus-stackdriver-exporter, kubeflow-fips, kubeflow, falcoctl-fips, aactl, metrics-server-fips, spark-operator, scorecard,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: aactl, slsa-verifier, k3d, spark-operator, kubevela, kubescape, src, dgraph, terraform-provider-sendgrid, up, scorecard, cortex, kubeflow, buildkitd...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: dex, bom, prometheus-pushgateway-fips, up, flux, pulumi, kubernetes-csi-external-resizer, prometheus-stackdriver-exporter, tekton-chains, aactl, prometheus-statsd-exporter, kubeflow-katib, hey, k8sgpt, metrics-server-fips, frp, atlantis, atlantis-fips,...