95 matches found
CVE-2023-2827 Missing Authentication in SAP Plant Connectivity and Production Connector for SAP Digital
SAP Plant Connectivity - version 15.5 PCo or the Production Connector for SAP Digital Manufacturing - version 1.0, do not validate the signature of the JSON Web Token JWT in the HTTP request sent from SAP Digital Manufacturing. Therefore, unauthorized callers from the internal network could send...
CVE-2023-2827
CVE-2023-2827 concerns SAP Plant Connectivity (PCo) v15.5 and Production Connector for SAP Digital Manufacturing v1.0, where the JSON Web Token (JWT) in HTTP requests is not validated. Root cause: lack of JWT signature validation enabling unauthorized callers from the internal network to issue se...
Additional Supply Chain Vulnerabilities Uncovered in AMI MegaRAC BMC Software
Two more supply chain security flaws have been disclosed in AMI MegaRAC Baseboard Management Controller BMC software, nearly two months after three security vulnerabilities were brought to light in the same product. Firmware security firm Eclypsium said the two shortcomings were held back until n...
CVE-2022-2827
creationtimestamp| type| source ---|---|--- 2022-12-06 11:54:10+00:00| seen| https://t.me/truesecator/3789 2023-07-21 15:30:05+00:00| seen| https://t.me/truesecator/4644 2025-03-19 10:01:34+00:00| seen| https://t.me/itsecnews/5534 2025-04-23 15:04:41+00:00| seen|...
CVE-2022-2827
AMI MegaRAC User Enumeration Vulnerability...
CVE-2022-2827
CVE-2022-2827 is an AMI MegaRAC Baseboard Management Controller [BMC] vulnerability described as a User Enumeration vulnerability via the API. Connected sources confirm the issue affects AMI MegaRAC BMCs and that patches/updates have been released by OEMs; for example, NVIDIA’s DGX Station A100 l...
CVE-2022-2827 AMI MegaRAC User Enumeration Vulnerability
AMI MegaRAC User Enumeration Vulnerability...
CVE-2022-2827 AMI MegaRAC User Enumeration Vulnerability
AMI MegaRAC User Enumeration Vulnerability...
Mozilla Firefox Security Advisory (MFSA2016-85) - Linux
This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
SUSE SLES15: libopenssl-1_0_0-devel / libopenssl10 / libopenssl1_0_0 / etc (SUSE-SU-2021:2827-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2827-1 advisory. - CVE-2021-3712: a bug in the code for printing certificate details could lead to a buffer overrun that a malicious actor could exploit to...
CentOS 8 : kernel (CESA-2019:2827)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:2827 advisory. - kernel: vhost-net: guest to host kernel escape during migration CVE-2019-14835 Note that Nessus has not tested for this issue but has instead relied only on t...
CentOS 7 : firefox (RHSA-2020:2827)
The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2827 advisory. - Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially...
Oracle Linux 7 : firefox (ELSA-2020-2827)
The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-2827 advisory. 68.10.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs....
RHEL 7 : firefox (RHSA-2020:2827)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2827 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
CVE-2020-2827
CVE-2020-2827 affects Oracle E-Business Suite’s One-to-One Fulfillment (Print Server) for versions 12.1.1–12.1.3. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the component, with human interaction required for exploitation. Impact includes potent...
CVE-2020-2827
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Print Server. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One...
Oracle Linux 8 : kernel (ELSA-2019-2827)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2827 advisory. - 4.18.0-80.11.20.OL8 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
RHEL 8 : kernel (RHSA-2019:2827)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2827 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: A buffer overflow flaw was found in the way Lin...
CVE-2019-2827
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...
CVE-2019-2827
CVE-2019-2827 affects Oracle WebLogic Server (WLS Core Components) with affected versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0. The issue is a directory traversal flaw exploitable over HTTP by a high-privilege attacker, potentially leading to unauthorized data access and unauthorized data modificat...