12 matches found
CVE-2025-36360
IBM UCD - IBM UrbanCode Deploy 7.1 through 7.1.2.27, 7.2 through 7.2.3.20, and 7.3 through 7.3.2.15 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.10, and 8.1 through 8.1.2.3 is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefl...
Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Insufficient Session Expiration vulnerability (CVE-2025-36)
Summary IBM DevOps Deploy / IBM UrbanCode Deploy UCD is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefly reused from a new IP address before it is invalidated. This could lead to unauthorized access under certain network...
MAL-2025-36360 Malicious code in test-mlw2-stone-divan (npm)
The package test-mlw2-stone-divan was found to contain malicious code...
CVE-2022-36360
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Affected devices load firmware updates without checking the authenticity. Furthermore the integrity of the unencrypted firmware is only verified by a non-cryptographic method. This could allow an attacker t...
CVE-2024-36360
OS command injection vulnerability exists in awkblog v0.0.1 commit hash:7b761b192d0e0dc3eef0f30630e00ece01c8d552 and earlier. If a remote unauthenticated attacker sends a specially crafted HTTP request, an arbitrary OS command may be executed with the privileges of the affected product on the...
CVE-2024-36360
OS command injection vulnerability exists in awkblog v0.0.1 commit hash:7b761b192d0e0dc3eef0f30630e00ece01c8d552 and earlier. If a remote unauthenticated attacker sends a specially crafted HTTP request, an arbitrary OS command may be executed with the privileges of the affected product on the...
CVE-2024-36360
CVE-2024-36360 affects awkblog v0.0.1 and earlier. A remote unauthenticated attacker can cause arbitrary OS command execution by sending a crafted HTTP request, with the impact described as high for confidentiality, integrity, and availability. The root cause is an OS command injection vulnerabil...
Siemens LOGO! Insufficient Verification of Data Authenticity (CVE-2022-36360)
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Affected devices load firmware updates without checking the authenticity. Furthermore the integrity of the unencrypted firmware is only verified by a non-cryptographic method. This could allow an attacker t...
CVE-2022-36360
creationtimestamp| type| source ---|---|--- 2022-10-11 14:25:45+00:00| seen| https://t.me/cibsecurity/51098...
CVE-2022-36360
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Affected devices load firmware updates without checking the authenticity. Furthermore the integrity of the unencrypted firmware is only verified by a non-cryptographic method. This could allow an attacker t...
CVE-2022-36360
CVE-2022-36360 affects LOGO! 8 BM (incl. SIPLUS variants) prior to version 8.3. The vulnerability arises because firmware updates are loaded without authenticity checks and the unencrypted firmware integrity is verified only by a non-cryptographic method, enabling manipulation of a firmware updat...