Design/Logic Flaw

A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C All versions, CP-8000 MASTER MODULE WITH I/O -40/+70°C All versions, CP-8021 MASTER MODULE All versions, CP-8022 MASTER MODULE WITH GPRS All versions. The component allows to activate a web server module which provide...

CVE-2021-46304

A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C All versions, CP-8000 MASTER MODULE WITH I/O -40/+70°C All versions, CP-8021 MASTER MODULE All versions, CP-8022 MASTER MODULE WITH GPRS All versions. The component allows to activate a web server module which provide...

CVE-2021-46304

CVE-2021-46304 affects Siemens SICAM A8000/Web Server Module products (CP-8000 series and CP-8021/CP-8022). The issue is improper access control: the web server module can be activated to provide unauthenticated access to its web pages, enabling retrieval of debug information (e.g., internal netw...

Siemens SICAM A8000 CP-8000 安全漏洞

The SICAM A8000 RTU Remote Terminal Unit series is a modular device family for remote control and automation applications in all energy supply areas.An authentication bypass vulnerability exists in the Siemens SICAM A8000 Web Server Module, which is caused by the component allowing the activation...

Siemens SICAM A8000 Web Server Module Authentication Bypass Vulnerability

The SICAM A8000 RTU Remote Terminal Unit series is a modular device family for remote control and automation applications in all energy supply areas.An authentication bypass vulnerability exists in the Siemens SICAM A8000 Web Server Module, which is caused by the component allowing the activation...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2022-9691)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9691 advisory. 5.4.17-2136.309.5.1 - netsched: clsroute: remove from list when handle is 0 Thadeu Lima de Souza Cascardo Orabug: 34460937 CVE-2022-2588 Tenable has extract...

PT-2022-4104 · Unknown · Cp-8000 Master Module With I/O -40/+70°C +3

Name of the Vulnerable Software and Affected Versions: CP-8000 MASTER MODULE WITH I/O -25/+70°C All versions CP-8000 MASTER MODULE WITH I/O -40/+70°C All versions CP-8021 MASTER MODULE All versions CP-8022 MASTER MODULE WITH GPRS All versions Description: A vulnerability has been identified in th...

Oracle Linux 8 : Unbreakable Enterprise kernel-container (ELSA-2022-9690)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9690 advisory. - netsched: clsroute: remove from list when handle is 0 Thadeu Lima de Souza Cascardo Orabug: 34460936 CVE-2022-2588 - lockdown: Fix kexec lockdown bypass with...

HackerOne: Ability to escape database transaction through SQL injection, leading to arbitrary code execution

HackerOne has an internal backend interface that gives debugging capabilities to its engineers. One of the features is the ability to run EXPLAIN ANALYZE queries against a connected database. This feature is accessible by a handful of engineers. The feature is vulnerable to a SQL injection that...

CVE-2022-31186

NextAuth.js is a complete open source authentication solution for Next.js applications. An information disclosure vulnerability in next-auth before v4.10.2 and v3.29.9 allows an attacker with log access privilege to obtain excessive information such as an identity provider's secret in the log whi...

Information disclosure

NextAuth.js is a complete open source authentication solution for Next.js applications. An information disclosure vulnerability in next-auth before v4.10.2 and v3.29.9 allows an attacker with log access privilege to obtain excessive information such as an identity provider's secret in the log whi...

CVE-2022-31186 Leakage of excessive information into log in next-auth

NextAuth.js is a complete open source authentication solution for Next.js applications. An information disclosure vulnerability in next-auth before v4.10.2 and v3.29.9 allows an attacker with log access privilege to obtain excessive information such as an identity provider's secret in the log whi...

CVE-2022-31186 Leakage of excessive information into log in next-auth

NextAuth.js is a complete open source authentication solution for Next.js applications. An information disclosure vulnerability in next-auth before v4.10.2 and v3.29.9 allows an attacker with log access privilege to obtain excessive information such as an identity provider's secret in the log whi...

PT-2022-20596 · Next-Auth · Next-Auth

Name of the Vulnerable Software and Affected Versions: next-auth versions prior to v4.10.2 next-auth versions prior to v3.29.9 Description: An information disclosure issue allows an attacker with log access privilege to obtain excessive information, such as an identity provider's secret in the lo...

[SECURITY] Fedora 36 Update: golang-x-debug-0-0.15.20210123gitc934e1b.fc36

This repository holds utilities and libraries for debugging Go programs...

Fedora: Security Advisory for golang-github-google-dap (FEDORA-2022-ea8f4e232d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-github-google-dap-0.6.0-6.fc36

Go implementation of the Debug Adapter Protocol...

CVE-2022-1799

Incorrect signature trust exists within Google Play services SDK play-services-basement. A debug version of Google Play services is trusted by the SDK for devices that are non-GMS. We recommend upgrading the SDK past the 2022-05-03 release...

Information disclosure

Incorrect signature trust exists within Google Play services SDK play-services-basement. A debug version of Google Play services is trusted by the SDK for devices that are non-GMS. We recommend upgrading the SDK past the 2022-05-03 release...

CVE-2022-1799 Incorrect signature verification on Google play-services-basement in Google Play SDK

Incorrect signature trust exists within Google Play services SDK play-services-basement. A debug version of Google Play services is trusted by the SDK for devices that are non-GMS. We recommend upgrading the SDK past the 2022-05-03 release...