PT-2024-27502 · Rockwell Automation · Rockwell Automation Factorytalk View Machine Edition

Name of the Vulnerable Software and Affected Versions: Rockwell Automation FactoryTalk View Machine Edition V14 Description: A remote code execution vulnerability exists in the affected product. The vulnerability allows users to save projects within the public directory, allowing anyone with loca...

PT-2024-16655 · Rockwell Automation · Rockwell Automation

Name of the Vulnerable Software and Affected Versions: Rockwell Automation products affected versions not specified Description: A Remote Code Execution issue exists due to improper input validation, allowing the possibility of a malicious Updated Agent being deployed. This issue requires a high...

PT-2024-16656 · Rockwell Automation · Rockwell Automation

Name of the Vulnerable Software and Affected Versions: Rockwell Automation products affected versions not specified Description: A Local Privilege Escalation issue exists in the affected product, requiring a local, low-privileged threat actor to replace certain files during an update. This issue...

Security Bulletin: IBM WebSphere Application Server traditional shipped with IBM Tivoli System Automation Application Manager is vulnerable to an XML External Entity Injection (XXE) vulnerability

Summary A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager CVE-2024-45086 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affect...

CVE-2024-10946

A vulnerability classified as critical has been found in Guangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System up to 2.0.1. This affects an unknown part of the file...

CVE-2024-10947

A vulnerability classified as critical was found in Guangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System up to 2.0.1. This vulnerability affects unknown code of the file /interlib/order/BatchOrder?cmdACT=adminorder&xsl=adminOrderOrderList.xsl. The...

CVE-2024-10946

A vulnerability classified as critical has been found in Guangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System up to 2.0.1. This affects an unknown part of the file...

CVE-2024-10947

A vulnerability classified as critical was found in Guangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System up to 2.0.1. This vulnerability affects unknown code of the file /interlib/order/BatchOrder?cmdACT=adminorder&xsl=adminOrderOrderList.xsl. The...

CVE-2024-10947 Guangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System BatchOrder sql injection

A vulnerability classified as critical was found in Guangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System up to 2.0.1. This vulnerability affects unknown code of the file /interlib/order/BatchOrder?cmdACT=adminorder&xsl=adminOrderOrderList.xsl. The...

CVE-2024-10947 Guangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System BatchOrder sql injection

A vulnerability classified as critical was found in Guangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System up to 2.0.1. This vulnerability affects unknown code of the file /interlib/order/BatchOrder?cmdACT=adminorder&xsl=adminOrderOrderList.xsl. The...

CVE-2024-10946 Guangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System SysLib sql injection

A vulnerability classified as critical has been found in Guangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System up to 2.0.1. This affects an unknown part of the file...

Interlib Library Cluster Automation Management System 注入漏洞

Interlib Library Cluster Automation Management System is a library cluster automation management system from Interlib. An injection vulnerability exists in Interlib Library Cluster Automation Management System version 2.0.1 and earlier, which stems from an SQL injection in the parameter bookrecno...

PT-2024-33294 · Logpoint · Logpoint

Name of the Vulnerable Software and Affected Versions: Logpoint versions prior to 7.5.0 Description: An issue was discovered in Logpoint where SOAR uses a static JWT secret key to generate tokens, allowing access to SOAR API endpoints without authentication. This enables attackers to create custo...

Interlib Library Cluster Automation Management System 注入漏洞

Interlib Library Cluster Automation Management System is a library cluster automation management system from Interlib. An injection vulnerability exists in Interlib Library Cluster Automation Management System 2.0.1 and earlier versions, which is caused by SQL injection in the parameter sql...

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Container Release Update

An update is now available for Red Hat Ansible Automation Platform Execution Environments Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to...

Security Bulletin: AIX is affected by multiple vulnerabilities due to Python

Summary There are multiple vulnerabilities in Python used by AIX CVE-2024-45491, CVE-2024-45490, CVE-2024-45492, CVE-2024-7592, CVE-2024-8088, CVE-2024-6923. Python is used by AIX as part of Ansible node management automation. Vulnerability Details CVEID:CVE-2024-45491 DESCRIPTION: libexpat could...

AIX is affected by multiple vulnerabilities due to Python

IBM SECURITY ADVISORY First Issued: Tue Nov 5 15:21:42 CST 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/pythonadvisory13.asc Security Bulletin: AIX is affected by multiple vulnerabilities due to Python...

ABB Cylon Aspect 3.08.00 Off-By-One

ABB Cylon Aspect 3.08.00 logMix/YumLookup.php Off-by-One Error in Log Parsing Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.00 Summary: ASPECT is an award-winning scalable building energy...

Attackers Abuse DocuSign API to Send Authentic-Looking Invoices At Scale

In a concerning trend, cybercriminals are leveraging DocuSign's APIs to send fake invoices that appear strikingly authentic. Unlike traditional phishing scams that rely on deceptively crafted emails and malicious links, these incidents use genuine DocuSign accounts and templates to impersonate...

Oracle Linux 8 : Oracle / Linux / Automation / Manager / 2.2 / (MODERATE) (ELSA-2024-12803)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12803 advisory. Oracle Linux Automation Manager 2.2 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...