Lucene search
+L

19035 matches found

Wallarm Lab
Wallarm Lab
added 2024/01/18 9:39 a.m.16 views

Unit Testing Frameworks: A Quick Comparison

Stepping Forward in Understanding Software Unit Evaluation Venturing into the realm of software creation, emphasizing quality takes center stage. This gold standard governs aspects such as operational capabilities, dependability, and the overall performance of your software. Regular assessments, ...

7.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/01/18 12:0 a.m.7 views

PT-2024-1404 · Delta Industrial Automation · Dopsoft

Name of the Vulnerable Software and Affected Versions: Delta Industrial Automation DOPSoft affected versions not specified Description: A stack based buffer overflow exists in Delta Industrial Automation DOPSoft when parsing the wTitleTextLen field of a DPS file. This issue can be exploited by a...

10CVSS7.9AI score0.00986EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/01/18 12:0 a.m.12 views

PT-2024-1437 · Delta Electronics · Dopsoft

Name of the Vulnerable Software and Affected Versions: Delta Industrial Automation DOPSoft affected versions not specified Description: A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesTimeLen field of a DPS file. A remote,...

10CVSS8AI score0.00764EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/01/18 12:0 a.m.8 views

PT-2024-1324 · Delta Electronics · Dopsoft

Name of the Vulnerable Software and Affected Versions: Delta Industrial Automation DOPSoft affected versions not specified Description: A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTTitleLen field of a DPS file. A remote,...

10CVSS7.9AI score0.00986EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/01/18 12:0 a.m.8 views

PT-2024-1438 · Delta Industrial Automation · Dopsoft

Name of the Vulnerable Software and Affected Versions: Delta Industrial Automation DOPSoft affected versions not specified Description: A stack-based buffer overflow exists in Delta Industrial Automation DOPSoft when parsing the wLogTitlesPrevValueLen field of a DPS file. This issue can be...

10CVSS7.9AI score0.00986EPSS
SaveExploits0References6
CISA
CISA
added 2024/01/17 12:0 p.m.78 views

VMware Releases Security Advisory for Aria Automation

VMware released a security advisory to address a vulnerability CVE-2023-34063 in Aria Automation. A cyber threat actor could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review VMware Security Advisory VMSA-2024-0001link is external...

9.9CVSS7AI score0.00949EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2024/01/17 7:18 a.m.55 views

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for December 2023.

Summary Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 21.0.3-IF028 and 23.0.1-IF006. Vulnerability Details CVEID:CVE-2023-45857 DESCRIPTION: Axios is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By...

9.8CVSS10AI score0.99999EPSS
SaveExploits22Affected Software1
The Hacker News
The Hacker News
added 2024/01/17 4:14 a.m.143 views

Citrix, VMware, and Atlassian Hit with Critical Flaws — Patch ASAP!

Citrix is warning of two zero-day security vulnerabilities in NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway that are being actively exploited in the wild. The flaws are listed below - CVE-2023-6548 CVSS score: 5.5 - Authenticated low privileged remote code...

10CVSS8.8AI score0.99999EPSS
SaveExploits65
BDU FSTEC
BDU FSTEC
added 2024/01/17 12:0 a.m.9 views

The vulnerability of the ResponseParser method in Inductive Automation Ignition’s software for industrial automation allows a perpetrator to execute arbitrary code.

The vulnerability of the ResponseParser method in Inductive Automation Ignition software relates to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

10CVSS8.1AI score0.01145EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/17 12:0 a.m.11 views

The vulnerability of VMware Cloud Foundation (previously Aria Automation) and the VMware Aria Automation automation software (previously vRealize Automation) lies in their lack of access control mechanisms. This allows a malicious individual to gain full access to these automation tools.

The vulnerability of the VMware Cloud Foundation virtualization platform previously Aria Automation and the VMware Aria Automation automation software previously vRealize Automation is related to lack of access control. Exploiting this vulnerability can allow a malicious actor to gain full access...

9.9CVSS8AI score0.00949EPSS
SaveExploits0References5
NCSC
NCSC
added 2024/01/17 12:0 a.m.36 views

Vulnerability fixed in VMware Aria Automation

VMWare has fixed a vulnerability in Aria Automation, formerly known as vRealize Automation. An authenticated malicious party could exploit the vulnerability to gain access gain access to the Aria Automation instance, and possibly to systems of third parties. The malicious party can thus perform...

9.9CVSS6.9AI score0.00949EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2024/01/16 7:45 p.m.84 views

Security Bulletin: Multiple security vulnerabilities affect IBM Robotic Process Automation for Cloud Pak.

Summary Unbound is used by IBM Robotic Process Automation for Cloud Pak as part of antivirus functionality. CVE-2019-25033. ISC BIND is used by IBM Robotic Process Automation for Cloud Pak as part of Watson NLP. CVE-2022-3094. GNU Binutils is used by IBM Robotic Process Automation for Cloud Pak a...

9.8CVSS8.9AI score0.13213EPSS
SaveExploits3Affected Software1
Wallarm Lab
Wallarm Lab
added 2024/01/16 12:43 p.m.27 views

What Is Dynamic DNS

Delving into the Multiple Aspects of the Dynamic Domain Name Protocol DDNS: A Detailed Scrutiny DDNS, standing for Dynamic Domain Name System, is an automatic procedure crafted to maintain the synchronization of the data associated with a DNS server. This system functions uninterruptedly to make...

7.5AI score
SaveExploits0
OSV
OSV
added 2024/01/16 10:15 a.m.7 views

CVE-2023-34063

Aria Automation contains a Missing Access Control vulnerability. An authenticated malicious actor may exploit this vulnerability leading to unauthorized access to remote organizations and workflows...

8.3CVSS5.8AI score0.00949EPSS
SaveExploits0References1
NVD
NVD
added 2024/01/16 10:15 a.m.37 views

CVE-2023-34063

Aria Automation contains a Missing Access Control vulnerability. An authenticated malicious actor may exploit this vulnerability leading to unauthorized access to remote organizations and workflows...

9.9CVSS9.4AI score0.00949EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/16 10:15 a.m.29 views

Improper access control

Aria Automation contains a Missing Access Control vulnerability. An authenticated malicious actor may exploit this vulnerability leading to unauthorized access to remote organizations and workflows...

6.5CVSS7.1AI score0.00949EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2024/01/16 9:10 a.m.45 views

CVE-2023-34063

Aria Automation contains a Missing Access Control vulnerability. An authenticated malicious actor may exploit this vulnerability leading to unauthorized access to remote organizations and workflows...

9.9CVSS9.5AI score0.00949EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/01/16 9:10 a.m.3 views

CVE-2023-34063

Aria Automation contains a Missing Access Control vulnerability. An authenticated malicious actor may exploit this vulnerability leading to unauthorized access to remote organizations and workflows...

9.9CVSS9AI score0.00949EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/16 9:10 a.m.184 views

CVE-2023-34063

VMware Aria Automation (formerly vRealize Automation) is affected by CVE-2023-34063 due to a Missing Access Control flaw. An authenticated attacker could gain unauthorized access to remote organizations and workflows. The vulnerability affects Aria Automation prior to fixed builds; no exploit det...

9.9CVSS8.1AI score0.00949EPSS
SaveExploits0References1Affected Software2
Positive Technologies
Positive Technologies
added 2024/01/16 12:0 a.m.12 views

PT-2024-1101 · Vmware · Vmware Cloud Foundation +1

Name of the Vulnerable Software and Affected Versions: VMware Aria Automation formerly vRealize Automation versions prior to the fixed version VMware Cloud Foundation formerly Aria Automation versions prior to the fixed version Description: The issue is related to a Missing Access Control...

9.9CVSS9AI score0.00949EPSS
SaveExploits0References33
Rows per page
Query Builder