Jenkins dbCharts 插件安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. Jenkins dbCharts Plugin is vulnerable to an information disclosure...

Beckhoff TwinCAT Denial of Service (CVE-2019-5637)

When Beckhoff TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending a malformed UDP packet to the device. This issue affects TwinCAT 2 version 2304 and prior and TwinCAT 3.1 version 4204.0 and prior. This plugin only works with...

Microsoft Windows Storage Spaces Controller缓冲区错误漏洞

Microsoft Windows Storage Spaces Controller is an essential driver for providing storage space functionality from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows Storage Spaces Controller. The following products and editions are affected:Windows Server 2019...

Information disclosure

Storage Spaces Controller Information Disclosure Vulnerability...

Design/Logic Flaw

The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software...

CVE-2021-40489

Storage Spaces Controller Elevation of Privilege Vulnerability...

CVE-2021-26441

Storage Spaces Controller Elevation of Privilege Vulnerability...

CVE-2021-40488

Storage Spaces Controller Elevation of Privilege Vulnerability...

Ecoa Bas controller 授权问题漏洞

ECOA BAS controller is a smart lighting control solution. ECOA BAS controller is vulnerable to authentication bypass, which can be exploited by attackers to remotely bypass authentication and disclose sensitive information via cookie poisoning...

The vulnerability of microprogrammed programmable logic controllers like Modicon and PacDrive lies in the lack of authentication for a critical function. This allows attackers to alter the device’s IP configuration.

The vulnerability of the microprogrammed logic controllers Modicon and PacDrive lies in the absence of authentication for the critical function. Exploiting this vulnerability allows an attacker to remotely alter the device’s IP configuration...

Cisco Application Policy Infrastructure Controller 安全漏洞

Cisco Application Policy Infrastructure Controller APIC is an automated infrastructure deployment and governance solution from Cisco. A security vulnerability exists in Cisco Application Policy Infrastructure Controller that stems from a lack of effective privilege controls in the product API. Th...

CVE-2021-34510

Storage Spaces Controller Elevation of Privilege Vulnerability...

CVE-2021-33218

An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are Hard-coded System Passwords that provide shell access...

Intel Thunderbolt controller 安全漏洞

The Intel Thunderbolt controller is a connector standard published by Intel, a U.S.-based company that supports both copper and fiber-optic media and is intended to be used as a common bus between computers and other devices. A security vulnerability exists in the IntelR ThunderboltTM controller...

PT-2021-7435 · Nginx · Nginx Controller

Name of the Vulnerable Software and Affected Versions: NGINX Controller versions 2.0.0 through 2.9.0 NGINX Controller versions 3.x before 3.15.0 Description: The issue is related to insufficient protection of registration data, which may allow an attacker to disclose protected information...

CVE-2021-26880

Storage Spaces Controller Elevation of Privilege Vulnerability...

DEBIAN-CVE-2021-27927

In Zabbix from 4.0.x before 4.0.28rc1, 5.0.0alpha1 before 5.0.10rc1, 5.2.x before 5.2.6rc1, and 5.4.0alpha1 before 5.4.0beta2, the CControllerAuthenticationUpdate controller lacks a CSRF protection mechanism. The code inside this controller calls diableSIDValidation inside the init method. An...

Information Disclosure

jenkins-2-plugins is vulnerable to information disclosure. The vulnerability exists as low-privilege users can access Jenkins controller environment variables...

Industrial Control Device Vulnerability in Mitsubishi Q06UDEHCPU

Q06UDEHCPU series PLC is Mitsubishi's medium and large PLC series products, Q series PLC adopts a modular structure, the composition of the series of products and the size of the flexible and variable. Mitsubishi Q06UDEHCPU has an industrial control device vulnerability that can be exploited by...

Information leakage vulnerability in CSC-830 of Beijing Sifang Relay Automation Company Limited (CNVD-2020-59458)

The CSC830 PLC is a compact controller for small and medium-sized discrete automation systems and stand-alone automation systems from Beijing Sifang Relay Automation Co. The CSC-830 of Beijing Sifang Relay Automation Co., Ltd. suffers from an information disclosure vulnerability that can be...