CVE-2022-2788

Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '..\Filename', also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file on the PLC. The file can transfer through the engineering...

CVE-2022-2788

CVE-2022-2788 affects Emerson Proficy Machine Edition 9.80 and earlier. It is a ZipSlip-style path traversal via the upload procedure (..\Filename) that can plant a malicious .BLZ file on a PLC and potentially execute code when transferred to Windows. Mitigations discussed in connected sources in...

SUSE SLES12: kernel-livepatch-4_12_14-150000_150_89-default / etc (SUSE-SU-2022:2750-1)

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2750-1 advisory. This update for the Linux Kernel 4.12.14-122116 fixes several issues. The following security issues were fixed: - CVE-2022-1419: Fixed...

CVE-2022-37024

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution...

CVE-2022-2704

creationtimestamp| type| source ---|---|--- 2022-08-08 16:23:29+00:00| seen| https://t.me/cibsecurity/47718...

CVE-2022-23003

creationtimestamp| type| source ---|---|--- 2022-07-29 22:13:50+00:00| seen| https://t.me/cibsecurity/47284...

CVE-2022-23001

creationtimestamp| type| source ---|---|--- 2022-07-29 22:13:46+00:00| seen| https://t.me/cibsecurity/47283...

CVE-2022-23002

creationtimestamp| type| source ---|---|--- 2022-07-29 22:13:45+00:00| seen| https://t.me/cibsecurity/47282...

CVE-2022-36378

creationtimestamp| type| source ---|---|--- 2022-07-29 22:13:44+00:00| seen| https://t.me/cibsecurity/47281...

CVE-2016-4982

creationtimestamp| type| source ---|---|--- 2022-07-29 20:42:44+00:00| seen| https://t.me/VulnerabilityNews/29267...

CVE-2022-35629

creationtimestamp| type| source ---|---|--- 2022-07-29 20:13:52+00:00| seen| https://t.me/cibsecurity/47275...

CVE-2022-2578

creationtimestamp| type| source ---|---|--- 2022-07-29 20:13:48+00:00| seen| https://t.me/cibsecurity/47272...

CVE-2022-35630

creationtimestamp| type| source ---|---|--- 2022-07-29 20:13:47+00:00| seen| https://t.me/cibsecurity/47271...

rscardwp.px-lab.com Cross Site Scripting vulnerability OBB-2820099

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-34593

creationtimestamp| type| source ---|---|--- 2022-07-29 00:12:45+00:00| seen| https://t.me/cibsecurity/47243...

Mozilla Firefox ESR Security Advisory (MFSA2022-29) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox ESR < 91.12

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 91.12. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-29 advisory. - When combining CSS properties for overflow and transform, the mouse cursor could interact with different...

Mozilla Firefox ESR < 91.12

The version of Firefox ESR installed on the remote Windows host is prior to 91.12. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-29 advisory. - When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinat...

CVE-2022-29963

The Emerson DeltaV Distributed Control System DCS controllers and IO cards through 2022-04-29 misuse passwords. TELNET on port 18550 provides access to a root shell via hardcoded credentials. This affects S-series, P-series, and CIOC/EIOC nodes. NOTE: this is different from CVE-2014-2350...

Emerson OpenBSI 加密问题漏洞

Emerson OpenBSI is a set of web-based communication services designed for technicians, engineers, and operators from Emerson Electric USA that provide access to ControlWave RTUs. A security vulnerability exists in versions of Emerson OpenBSI prior to 2022-04-29 that stems from the use of weak...