31120 matches found
Juniper Networks Junos OS MX 安全漏洞
Juniper Networks Junos OS MX is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS MX has a security vulnerability that originates from improper input validation ...
AlmaLinux 8 : thunderbird (ALSA-2023:4063)
The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2023:4063 advisory. - An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox 115, Firefo...
CVE-2023-30565
An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker...
Design/Logic Flaw
An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker...
CVE-2023-30560
The configuration from the PCU can be modified without authentication using physical connection to the PCU...
Authentication flaw
The configuration from the PCU can be modified without authentication using physical connection to the PCU...
CVE-2023-30565
CVE-2023-30565 describes an insecure (cleartext) connection between BD Alaris System Manager (SM) and CQI Reporter that could expose infusion data. Affected: BD Alaris SM versions 12.3 and prior; CQI Reporter v10.17 and prior; PCU Model 8015 12.1.3 and prior. MITRE/ADP assessment in the connected...
CVE-2023-30560
BD Alaris PCU 8015 (versions 12.1.3 and earlier) exposes a vulnerability (CVE-2023-30560) where the PCU configuration can be modified without authentication by connecting physically to the PCU. The CVSS v3.1 base metrics in public sources indicate AV:P, AC:L, PR:N, UI:N, S:U, with C/H/I/H/A/H, i....
Information Disclosure
apacheairflow is vulnerable to Information Disclosure. A remote authenticated attacker with the ability to update the connection resource is able to gain access to confidential information in theConnection edit view, resulting in disclosure of sensitive information...
From Malvertising to Ransomware: A ThreatDown webinar recap
Our recent webinar From Malvertising to Ransomware highlight the clear connection between malvertising--the practice of embedding malicious code within legitimate online advertisements--and the epidemic of ransomware attacks affecting businesses globally. Presented by Mark Stockley, security...
Mozilla: Use-after-free in WebRTC certificate generation
The Mozilla Foundation Security Advisory describes this flaw as: An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS...
Mozilla: Use-after-free in WebRTC certificate generation
The Mozilla Foundation Security Advisory describes this flaw as: An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS...
Mozilla: Use-after-free in WebRTC certificate generation
The Mozilla Foundation Security Advisory describes this flaw as: An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS...
Mozilla: Use-after-free in WebRTC certificate generation
The Mozilla Foundation Security Advisory describes this flaw as: An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS...
Mozilla: Use-after-free in WebRTC certificate generation
The Mozilla Foundation Security Advisory describes this flaw as: An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS...
BD Alaris System with Guardrails Suite MX 授权问题漏洞
The BD Alaris System with Guardrails Suite MX is a medical device from BD Medical BD. A security vulnerability exists in the BD Alaris System with Guardrails Suite MX, which originates from the ability to modify the configuration of a PCU without having to authenticate using a physical connection...
PT-2023-22788 · Pcu · Pcu
Name of the Vulnerable Software and Affected Versions: PCU affected versions not specified Description: The configuration of the PCU can be modified without authentication by establishing a physical connection to the device. Recommendations: At the moment, there is no information about a newer...
BD Alaris System with Guardrails Suite MX 安全漏洞
The BD Alaris System with Guardrails Suite MX is a medical device from Biddy Medical BD, Inc. A security vulnerability exists in the BD Alaris System with Guardrails Suite MX, which stems from an insecure connection between the Systems Manager and CQI Reporter applications that could expose...
PT-2023-22793 · Unknown · Systems Manager +1
Name of the Vulnerable Software and Affected Versions: Systems Manager affected versions not specified CQI Reporter application affected versions not specified Description: The issue is related to an insecure connection between Systems Manager and the CQI Reporter application, which could...
CVE-2023-21251
In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user's consent due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...