Information leakage vulnerability in CSC-830 of Beijing Sifang Relay Automation Company Limited (CNVD-2020-59458)

The CSC830 PLC is a compact controller for small and medium-sized discrete automation systems and stand-alone automation systems from Beijing Sifang Relay Automation Co. The CSC-830 of Beijing Sifang Relay Automation Co., Ltd. suffers from an information disclosure vulnerability that can be...

Unauthorized Access Vulnerability in Crestron Indoor Media Controller at Shanghai Jinqiao Information Co.

Shanghai Jinqiao Information Co., Ltd. was established in August 1994, the company's business scope includes: information systems, security fire prevention engineering, computer information system integration, computer hardware and software products research and development. Shanghai Jinqiao...

Multiple VMware Products Competitive Conditions Issue Vulnerability

VMware ESXi is a server virtualization platform that can be installed directly on physical servers, VMware Workstation is a set of virtual machine software, and VMware Fusion is a set of virtual machine software designed to run Windows applications on Macs. VMware Fusion is a suite of virtual...

GE Mark VIe Controller Trust Management Issue Vulnerability

The GE Mark VIe Controller is an industrial integrated control system from General Electric GE. A trust management issue vulnerability exists in GE Mark VIe Controller, which stems from the program's use of hard-coded credentials. An attacker could exploit this vulnerability to gain root access t...

Arbitrary File Deletion Vulnerability in YCCMS controller directory Pi***.cl***.php

YCCMS is a PHP version of a lightweight CMS builder. YCCMS 3.4 version controller directory Pi.class.php arbitrary file deletion vulnerability, an attacker can use the vulnerability to delete arbitrary files...

ONAP SDNC Operating System Command Injection Vulnerability (CNVD-2020-28056)

The ONAP SDNC is a network-defined network controller from the ONAP program. ONAP SDNC suffers from an operating system command injection vulnerability. An attacker can exploit this vulnerability to execute arbitrary commands with the help of a specially crafted 'filename' parameter...

ONAP SDNC Operating System Command Injection Vulnerability

The ONAP SDNC is a network-defined network controller from the ONAP program. An operating system command injection vulnerability exists in ONAP SDNC versions prior to 4.0.0. The vulnerability can be exploited to execute arbitrary commands with the help of a specially crafted 'module' parameter...

UBUNTU-CVE-2020-1735

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

The vulnerability of the control interface for the routing table of the Application Policy Infrastructure Controller allows a perpetrator to circumvent the established restrictions for certain IP ports and compromise the integrity of the protected information.

The vulnerability of the control interface for the Application Policy Infrastructure Controller exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to circumvent configured restrictions for certain IP ports and compromise the integrity of...

The vulnerability of the Advanced Console identity manager component of Oracle Identity Manager allows a perpetrator to compromise data integrity or expose sensitive information.

The vulnerability of the Advanced Console controller component of Oracle Identity Manager is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to compromise data integrity or disclose sensitive information using the HTTP protocol...

Denial of service vulnerability in schneider M580 (CNVD-2020-04561)

Schneider Electric SA is a global electrical company headquartered in France. A denial of service vulnerability exists in schneider M580, which can be exploited by an attacker to cause a denial of service...

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) relates to reading data beyond the buffer in memory, allowing an intruder to disclose protected information.

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

Intel Baseboard Management Controller Buffer Overflow Vulnerability (CNVD-2020-12697)

The Intel Baseboard Management Controller BMC is a baseboard management controller from Intel Corporation USA. A buffer overflow vulnerability exists in Intel BMC, which originates when a networked system or product performs an operation in memory without properly validating the data boundaries,...

Authentication Bypass Vulnerability in Haiwell PLCs

Xiamen Haiwei Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production, sales and service. An authentication bypass vulnerability exists in Haiwell PLCs, which can be exploited by unauthorized attackers to cause illegal access to the controller...

MITSUBISHI PLC suffers from denial of service vulnerability (CNVD-2019-30336)

MITSUBISHI PLC is a programmable controller product of Mitsubishi Electric Japan. A denial of service vulnerability exists in MITSUBISHI PLC, which can be exploited by an attacker to cause a denial of service...

The vulnerability of the Cisco Elastic Services Controller network management tool, which stems from the use of pre-installed registration data, allows a perpetrator to escalate their privileges.

The vulnerability of the Cisco Elastic Services Controller network management tool is related to the use of pre-installed registration data. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

CVE-2018-19110

The skin-management feature in tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/user/skin/list directly because controller\usercontroller.java maps a /skin/list request to the function skinList, and lacks an authorization chec...

CVE-2018-10633

Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 utilizes hard-coded credentials that may allow an attacker to reset passwords for the controller...

Unspecified vulnerability in Open Build Service API controller

The Open Build Service API is a common system for building and distributing packages from source code in an automated, consistent and repeatable manner. controller is one of the controllers. A security vulnerability exists in the controller in versions of the Open Build Service API prior to 2.4.4...

Intelligent Baseboard Management Controller elevation of privilege vulnerability in multiple Huawei products (CNVD-2018-11505)

Huawei 1288H V5 and others are different models of server equipment from Huawei, China.Intelligent Baseboard Management Controller iBMC is one of the embedded server intelligent management system. A security vulnerability exists in iBMC in several Huawei products, which stems from the program...