Authentication flaw

F-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack...

CVE-2022-47524

F-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack...

F-Secure SAFE 安全漏洞

F-Secure SAFE is a suite of antivirus software from Finnish company Fen Secure F-Secure. A security vulnerability exists in F-Secure SAFE Browser 19.1 for Android prior to version 19.2, which stems from vulnerability to IDN synonym attacks...

CVE-2022-47524

F-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack...

PT-2022-28071 · F Secure · F-Secure Safe Browser

Name of the Vulnerable Software and Affected Versions: F-Secure SAFE Browser versions 19.1 through 19.1 Description: The issue allows an IDN homograph attack. This type of attack involves using similar-looking characters from different alphabets to create fake domain names that appear legitimate,...

CVE-2022-47524

CVE-2022-47524 affects F-Secure SAFE Browser on Android (version 19.1 prior to 19.2). The issue is an IDN homograph attack that could enable spoofing of legitimate domains. Root cause is the handling of Internationalized Domain Names allowing homogeneous-looking characters to pass validation, ena...

Mitsubishi Electric FA Engineering Software (Update C)

1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: GX Works3, MX OPC UA Module Configurator-R Vulnerabilities: Cleartext Storage of Sensitive Information, Use of Hard-coded Password, Insufficiently Protected Credentials,...

CVE-2022-43442

Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow an attacker to obtain the login password of +F FS040U and log in to the management console...

Design/Logic Flaw

Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow an attacker to obtain the login password of +F FS040U and log in to the management console...

CVE-2022-43442

Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow an attacker to obtain the login password of +F FS040U and log in to the management console...

CVE-2022-43442

Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow an attacker to obtain the login password of +F FS040U and log in to the management console...

CVE-2022-43470

CVE-2022-43470 describes a Cross-Site Request Forgery (CSRF) vulnerability in FUJI SOFT +F FS040U, +F FS020W, +F FS030W, and +F FS040W devices. An adjacent attacker could hijack administrator authentication and perform unintended operations such as rebooting the product or resetting the configura...

CVE-2022-43442

CVE-2022-43442 affects FUJISOFT +F FS040U (and related devices in the same family) with plaintext password storage in software versions v2.3.4 and earlier. 根本原因: passwords stored in clear text, enabling an attacker to obtain the login password and log in to the management console. Impact stated: ...

CVE-2022-38166

In F-Secure Endpoint Protection for Windows and macOS before channel with Capricorn database 2022-11-2207, the aerdl.dll unpacker handler crashes. This can lead to a scanning engine crash, triggerable remotely by an attacker for denial of service...

Denial of service

In F-Secure Endpoint Protection for Windows and macOS before channel with Capricorn database 2022-11-2207, the aerdl.dll unpacker handler crashes. This can lead to a scanning engine crash, triggerable remotely by an attacker for denial of service...

Mitsubishi Electric GX Works3 信任管理问题漏洞

Mitsubishi Electric GX Works3 is the latest generation of programming and maintenance software from Mitsubishi Electric Corporation Mitsubishi Electric, Japan, designed specifically for the MELSEC iQ-R and MELSEC iQ-F series control systems. Mitsubishi Electric GX Works3 suffers from a trust...

CVE-2022-38166

CVE-2022-38166 affects F-Secure Endpoint Protection for Windows and macOS prior to channel Capricorn 2022-11-22_07. The vulnerability involves the aerdl.dll unpacker handler, which can crash the scanning engine, enabling remote denial-of-service through network-triggered conditions. Connected sou...

CVE-2022-38166

In F-Secure Endpoint Protection for Windows and macOS before channel with Capricorn database 2022-11-2207, the aerdl.dll unpacker handler crashes. This can lead to a scanning engine crash, triggerable remotely by an attacker for denial of service...

Mitsubishi Electric GX Works3 信任管理问题漏洞

Mitsubishi Electric GX Works3 is the latest generation of programming and maintenance software from Mitsubishi Electric Corporation Mitsubishi Electric, Japan, designed specifically for the MELSEC iQ-R and MELSEC iQ-F series control systems. Mitsubishi Electric GX Works3 is vulnerable to a trust...

CVE-2022-38166

In F-Secure Endpoint Protection for Windows and macOS before channel with Capricorn database 2022-11-2207, the aerdl.dll unpacker handler crashes. This can lead to a scanning engine crash, triggerable remotely by an attacker for denial of service...