Lucene search
+L

1366 matches found

Tenable Nessus
Tenable Nessus
added 2023/12/27 12:00 a.m.29 views

NewStart CGSL MAIN 6.06 : dhcp Vulnerability (NS-SA-2023-0091)

The remote NewStart CGSL host, running version MAIN 6.06, has dhcp packages installed that are affected by a vulnerability: - In ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16, ISC DHCP 4.4.0 - 4.4.2 Other branches of ISC DHCP i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series are...

7.4CVSS7.3AI score0.06118EPSS
SaveExploits1References3
OSV
OSV
added 2023/11/14 11:15 a.m.13 views

CVE-2023-46096

A vulnerability has been identified in SIMATIC PCS neo All versions V4.1. The PUD Manager of affected products does not properly authenticate users in the PUD Manager web service. This could allow an unauthenticated adjacent attacker to generate a privileged token and upload additional documents...

6.5CVSS5.8AI score0.00317EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/13 5:31 p.m.65 views

CVE-2023-6102

CVE-2023-6102 affects Maiwei Safety Production Control Platform 4.1. The issue is an unrestricted file upload in the function handling /Content/Plugins/uploader/FileChoose.html?fileUrl=/Upload/File/Pics/&parent, allowing remote exploitation. Exploit has been disclosed publicly; vendor response no...

9.8CVSS7.5AI score0.00844EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/11/13 12:00 a.m.9 views

Maiwei Safety Production Control Platform Security Breach

Maiwei Safety Production Control Platform is a safety production control platform from Maiwei. A security vulnerability exists in Maiwei Safety Production Control Platform version 4.1, which stems from a failure to limit the number of file uploads...

9.8CVSS7.1AI score0.00844EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/11/13 12:00 a.m.17 views

PT-2023-32516 · Unknown · Maiwei Safety Production Control Platform

Name of the Vulnerable Software and Affected Versions: Maiwei Safety Production Control Platform version 4.1 Description: A problematic issue was found in the Maiwei Safety Production Control Platform, affecting an unknown function of the file...

9.8CVSS5.4AI score0.00844EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/11/13 12:00 a.m.13 views

PT-2023-32515 · Maiwei · Maiwei Safety Production Control Platform

Name of the Vulnerable Software and Affected Versions: Maiwei Safety Production Control Platform version 4.1 Description: A problematic issue has been found in the Intelligent Monitoring component, affecting the processing of the file /TC/V2.7/ha.html. This leads to information disclosure and can...

7.5CVSS5.4AI score0.00893EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/11/13 12:00 a.m.10 views

Maiwei Safety Production Control Platform Security Breach

Maiwei Safety Production Control Platform is a safety production control platform from Maiwei. A security vulnerability exists in Maiwei Safety Production Control Platform version 4.1. The vulnerability can be exploited by an attacker to obtain sensitive information...

5.3CVSS7AI score0.00789EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/11/13 12:00 a.m.13 views

Maiwei Safety Production Control Platform Security Breach

Maiwei Safety Production Control Platform is a safety production control platform from Maiwei. A security vulnerability exists in Maiwei Safety Production Control Platform version 4.1. The vulnerability can be exploited by an attacker to obtain sensitive information...

7.5CVSS7AI score0.00893EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/11/13 12:00 a.m.20 views

PT-2023-32514 · Unknown · Maiwei Safety Production Control Platform

Name of the Vulnerable Software and Affected Versions: Maiwei Safety Production Control Platform version 4.1 Description: A problematic issue was found in the Maiwei Safety Production Control Platform, affecting the /api/DataDictionary/GetItemList API endpoint. This issue leads to information...

5.3CVSS5.4AI score0.00789EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2023/11/09 6:36 p.m.55 views

Security Bulletin: AIX is affected by a denial of service (CVE-2023-45167) and a security restrictions bypass (CVE-2023-40217) due to Python

Summary A vulnerability in Python could allow a non-privileged local user to cause a denial of service CVE-2023-45167 and a remote attacker to cause a security restrictions bypass CVE-2023-40217. Python is used by AIX as part of Ansible node management automation. Vulnerability Details...

6.2CVSS6AI score0.00797EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
added 2023/11/08 6:34 p.m.69 views

Important: Red Hat Security Advisory: ACS 4.1 enhancement update

Updated images are now available for Red Hat Advanced Cluster Security. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

7.5CVSS7.1AI score0.99999EPSS
SaveExploits21References4
Tenable Nessus
Tenable Nessus
added 2023/11/07 12:00 a.m.21 views

Rocky Linux 8 : Rocky Enterprise Software Foundation Ceph Storage 4.1 (RLSA-2020:2231)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2020:2231 advisory. - A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used as default passwords while deploying Ceph services. A...

9CVSS7.7AI score0.01269EPSS
SaveExploits1References164
OpenVAS
OpenVAS
added 2023/11/06 12:00 a.m.9 views

Debian: Security Advisory (DSA-5547-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS8.1AI score0.01121EPSS
SaveExploits0References4
OSV
OSV
added 2023/11/03 6:36 a.m.11 views

GHSA-7H4P-27MH-HMRW Django Denial of service vulnerability in django.utils.encoding.uri_to_iri

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

6.9CVSS5.9AI score0.01284EPSS
SaveExploits0References15
OSV
OSV
added 2023/11/03 5:15 a.m.12 views

PYSEC-2023-225

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS6.8AI score0.01284EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2023/11/03 12:00 a.m.105 views

CVE-2023-41164

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS7.5AI score0.01284EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/11/02 12:00 a.m.11 views

PT-2023-7674 · Django +2 · Django +2

Name of the Vulnerable Software and Affected Versions: Django versions 3.2 before 3.2.23 Django versions 4.1 before 4.1.13 Django versions 4.2 before 4.2.7 Description: The issue is related to the NFKC normalization being slow on Windows, which can lead to a potential denial of service DoS attack...

8.7CVSS6.4AI score0.49774EPSS
SaveExploits0References34
Positive Technologies
Positive Technologies
added 2023/10/23 12:00 a.m.14 views

PT-2023-21973 · Zscaler · Zscaler Client Connector For Windows

Name of the Vulnerable Software and Affected Versions: Zscaler Client Connector for Windows versions prior to 4.1 Description: The issue allows a malicious user to execute code as a privileged user by replacing a folder where the Zscaler Client Connector for Windows writes or deletes a...

7.3CVSS7.3AI score0.00217EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2023/10/13 11:31 a.m.76 views

CVE-2023-39999

Exposure of Sensitive Information to an Unauthorized Actor in WordPress from 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.13, from 6.0 through 6.0.5, from 5.9 through 5.9.7, from 5.8 through 5.8.7, from 5.7 through 5.7.9, from 5.6 through 5.6.11, from 5.5 through 5.5.12, from 5.4...

4.3CVSS6.8AI score0.01045EPSS
SaveExploits1
Prion
Prion
added 2023/10/11 8:15 a.m.22 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Nitin Rathod WP Forms Puzzle Captcha plugin = 4.1 versions...

6.8CVSS8.8AI score0.00208EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder