Lucene search
+L

2945 matches found

ICS
ICS
added 2022/05/24 12:00 a.m.71 views

Rockwell Automation Logix Controllers

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Exploitable remotely Vendor: Rockwell Automation Equipment: Logix Controllers Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an unauthorized user to send malicious messages to...

8.6CVSS7.9AI score0.02076EPSS
SaveExploits0References4
OSV
OSV
added 2022/05/19 6:15 p.m.9 views

CVE-2020-16231

The affected Bachmann Electronic M-Base Controllers of version MSYS v1.06.14 and later use weak cryptography to protect device passwords. Affected controllers that are actively supported include MX207, MX213, MX220, MC206, MC212, MC220, and MH230 hardware controllers, and affected end-of-life...

8.8CVSS5.8AI score
SaveExploits0References1
NVD
NVD
added 2022/05/19 6:15 p.m.41 views

CVE-2020-16231

The affected Bachmann Electronic M-Base Controllers of version MSYS v1.06.14 and later use weak cryptography to protect device passwords. Affected controllers that are actively supported include MX207, MX213, MX220, MC206, MC212, MC220, and MH230 hardware controllers, and affected end-of-life...

8.8CVSS0.00848EPSS
SaveExploits0References1
Prion
Prion
added 2022/05/19 6:15 p.m.24 views

Default credentials

The affected Bachmann Electronic M-Base Controllers of version MSYS v1.06.14 and later use weak cryptography to protect device passwords. Affected controllers that are actively supported include MX207, MX213, MX220, MC206, MC212, MC220, and MH230 hardware controllers, and affected end-of-life...

6.5CVSS8.8AI score0.00848EPSS
SaveExploits0References1Affected Software20
Cvelist
Cvelist
added 2022/05/19 5:21 p.m.41 views

CVE-2020-16231 All Bachmann M1 System Processor Modules - Use of Password Hash with Insufficient Computational Effort

The affected Bachmann Electronic M-Base Controllers of version MSYS v1.06.14 and later use weak cryptography to protect device passwords. Affected controllers that are actively supported include MX207, MX213, MX220, MC206, MC212, MC220, and MH230 hardware controllers, and affected end-of-life...

7.2CVSS8.9AI score0.00848EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/05/19 5:21 p.m.15 views

CVE-2020-16231 All Bachmann M1 System Processor Modules - Use of Password Hash with Insufficient Computational Effort

The affected Bachmann Electronic M-Base Controllers of version MSYS v1.06.14 and later use weak cryptography to protect device passwords. Affected controllers that are actively supported include MX207, MX213, MX220, MC206, MC212, MC220, and MH230 hardware controllers, and affected end-of-life...

7.2CVSS7.6AI score0.00848EPSS
SaveExploits0References1
CVE
CVE
added 2022/05/19 5:21 p.m.95 views

CVE-2020-16231

CVE-2020-16231 affects all Bachmann M-Base Controllers running MSYS v1.06.14 and newer. The vulnerability stems from weak cryptography used to protect device passwords, with Security Level 0 set by default in many models (e.g., MX207, MX213, MX220, MC206, MC212, MC220, MH230 actively supported; o...

8.8CVSS8AI score0.00848EPSS
SaveExploits0References1Affected Software1
Microsoft KB
Microsoft KB
added 2022/05/19 12:00 a.m.10 views

KB5014990: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2008 SP2

KB5014990: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2008 SP2 Summary This update includes improvements for the following issue: Addresses a known issue that might cause authentication failures for some services on a serv...

6.9AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2022/05/19 12:00 a.m.6 views

May 19, 2022—KB5015019 (OS Build 14393.5127) Out-of-band

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2022/05/19 12:00 a.m.13 views

KB5014991: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2012

KB5014991: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2012 Summary This update includes improvements for the following issue: Addresses a known issue that might cause authentication failures for some services on a server o...

6.9AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2022/05/19 12:00 a.m.14 views

May 19, 2022—KB5015013 (OS Build 20348.709) Out-of-band

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2022/05/19 12:00 a.m.10 views

May 19, 2022—KB5015018 (OS Build 17763.2931) Out-of-band

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2022/05/19 12:00 a.m.9 views

KB5014986: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2012 R2

KB5014986: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2012 R2 Summary This update includes improvements for the following issue: Addresses a known issue that might cause authentication failures for some services on a serve...

6.9AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2022/05/19 12:00 a.m.9 views

May 19, 2022—KB5015020 (OS Builds 19042.1708, 19043.1708, and 19044.1708) Out-of-band

None None...

6.1AI score
SaveExploits0
OSV
OSV
added 2022/05/18 11:04 a.m.8 views

OESA-2022-1660 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: Insufficient control flow management for the IntelR 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enable denial of service via local access.CVE-2021-33061 A use after free in the Linux...

7.8CVSS5.2AI score0.00327EPSS
SaveExploits0References3
CNVD
CNVD
added 2022/05/13 12:00 a.m.25 views

ftcms arbitrary file writing vulnerability

ftcms is a content management system from ftcms. ftcms version 2.1 and previous versions have an arbitrary file write vulnerability, which originates from the lack of valid file checksum in admin/controllers/tp.php and can be exploited by attackers to cause arbitrary file writes...

8.8CVSS4.4AI score0.01142EPSS
SaveExploits1References1
CISA
CISA
added 2022/05/13 12:00 a.m.141 views

CISA Temporarily Removes CVE-2022-26925 from Known Exploited Vulnerability Catalog

CISA is temporarily removing CVE-2022-26925 from its Known Exploited Vulnerability Catalog due to a risk of authentication failures when the May 10, 2022 Microsoft rollup update is applied to domain controllers. After installing May 10, 2022 rollup update on domain controllers, organizations migh...

4.3CVSS2.1AI score0.10808EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
added 2022/05/12 7:00 a.m.320 views

May 10, 2022—KB5013952 (OS Build 14393.5125) - EXPIRED

None None...

9.8CVSS6.8AI score0.76531EPSS
SaveExploits3
ATTACKERKB
ATTACKERKB
added 2022/05/11 6:15 p.m.5 views

CVE-2022-30059

Shopwind =v3.4.2 was discovered to contain a Arbitrary File Delete vulnerability via the neirong parameter at \backend\controllers\DbController.php...

6.5CVSS5.9AI score0.01154EPSS
SaveExploits1References2
OSV
OSV
added 2022/05/11 6:15 p.m.8 views

CVE-2022-30060

ftcms =2.1 was discovered to be vulnerable to Arbitrary File Write via admin/controllers/tp.php...

8.8CVSS7.3AI score0.01142EPSS
SaveExploits1References1
Rows per page
Query Builder