34 matches found
Mitsubishi Electric MELSEC-Q QJ71E71 series Improper Synchronization (CVE-2016-8368)
An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versions, and QJ71E71-B2, all versions. The affected Ethernet interface module is connected to a MELSEC-Q PLC, which may allow a remote attacker to conne...
CVE-2020-8368
CVE-2020-8368 is rejected/not used per the initial description.
CVE-2019-8368
CVE-2019-8368 affects OpenEMR v5.0.1-6 and is a cross-site scripting (XSS) vulnerability. Red Hat/CNVD/OSV listings corroborate the OpenEMR XSS finding. The core issue is a reflected/stored XSS vector in the OpenEMR 5.0.1-6 codebase (exact component/file not specified in the provided documents). ...
CVE-2017-8368
Sublime Text 3 Build 3126 is reported vulnerable to a user‑assisted DoS (and possibly other impact) via a crafted .mkv file. According to the sources, the issue can be triggered when a user opens a malicious MKV payload and issues commands such as Ctrl‑A, Delete, and Ctrl‑Z, with the exploit requ...
CVE-2016-8368
The CVE-2016-8368 issue affects Mitsubishi Electric MELSEC-Q series Ethernet interface modules QJ71E71-100, QJ71E71-B5, and QJ71E71-B2. It is caused by an Unrestricted Externally Accessible Lock that may allow a remote attacker to connect to the connected MELSEC-Q PLC via Port 5002/TCP and cause ...
Mitsubishi Electric MELSEC-Q Series Ethernet Interface Module Vulnerabilities
OVERVIEW Security researcher Vladimir Dashchenko of Critical Infrastructure Defense Team, Kaspersky Lab has identified vulnerabilities in the Mitsubishi Electric Automation, Inc. Mitsubishi Electric MELSEC-Q series Ethernet interface modules. NCCIC/ICS-CERT and JPCERT have coordinated the reporte...
CVE-2015-8368
ntopng aka ntop before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to admin/passwordreset.lua...
CVE-2015-8368
ntopng aka ntop before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to admin/passwordreset.lua...
UBUNTU-CVE-2015-8368
ntopng aka ntop before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to admin/passwordreset.lua...
CVE-2015-8368
Summary: CVE-2015-8368 affects ntopng (ntop) up to version 2.1.x, where remote authenticated users can escalate privileges by tampering with the login flow. The underlying issue allows changing the login context via the user cookie and the username parameter sent to admin/password_reset.lua, effe...
ntop-ng 2.0.15102 Privilege Escalation
Vulnerability title: ntop-ng = 2.0.151021 - Privilege Escalation Author: Dolev Farhi Contact: dolev at flaresec.com Vulnerable version: 2.0.151021 Fixed version: 2.2 Link: ntop.org Date 27.11.2015 CVE-2015-8368 Product Details: ntopng is the next generation version of the original ntop, a network...
CVE-2014-8368
The CVE-2014-8368 issue affects Aruba Networks AirWave prior to 7.7.14 and 8.x prior to 8.0.5. The vulnerability allows remote authenticated users to gain privileges and execute arbitrary commands via unspecified vectors. The provided documents do not specify the exact vulnerable component, vecto...