Lucene search
+L

3848 matches found

Cvelist
Cvelist
•added 2020/04/22 6:51 p.m.•40 views

CVE-2020-7488

A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers...

7.4AI score0.00893EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/04/22 6:50 p.m.•50 views

CVE-2020-7487

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers...

9.6AI score0.00692EPSS
SaveExploits0References1
CVE
CVE
•added 2020/04/22 6:50 p.m.•91 views

CVE-2020-7487

The CVE-2020-7487 entry concerns Schneider Electric Modicon M218, M241, M251, and M258 controllers affected by CWE-345: Insufficient Verification of Data Authenticity. The Red Hat/NVD-related and Tenable/NASL data in connected documents corroborate that this is a data-authenticity issue allowing ...

9.8CVSS9.5AI score0.00692EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
•added 2020/04/22 6:14 p.m.•45 views

CVE-2019-6859

A CWE-798: Use of Hardcoded Credentials vulnerability exists in Modicon Controllers All versions of the following CPUs and Communication Module product references listed in the Security Notifications, which could cause the disclosure of FTP hardcoded credentials when using the Web server of the...

7.5AI score0.01179EPSS
SaveExploits0References1
CVE
CVE
•added 2020/04/22 6:14 p.m.•81 views

CVE-2019-6859

The CVE-2019-6859 entry concerns Modicon Controllers with hardcoded FTP credentials exposed via the controller Web server on unsecure networks (CWE-798). Affected scope includes Modicon Controllers across all CPUs and Communication Module references listed in Security Notifications. Root cause is...

7.5CVSS7.5AI score0.01179EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/22 12:00 a.m.•11 views

CVE-2019-6859: Use of Hard-coded Credentials

A CWE-798: Use of Hardcoded Credentials vulnerability exists in Modicon Controllers All versions of the following CPUs and Communication Module product references listed in the Security Notifications, which could cause the disclosure of FTP hardcoded credentials when using the Web server of the...

7.5CVSS7.1AI score0.01179EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2020/04/20 5:15 p.m.•30 views

CVE-2020-5279

In PrestaShop between versions 1.5.0.0 and 1.7.6.5, there are improper access control since the the version 1.5.0.0 for legacy controllers. - admin-dev/index.php/configure/shop/customer-preferences/ - admin-dev/index.php/improve/international/translations/ -...

6.5CVSS6.8AI score
SaveExploits0References2
attackerkb
attackerkb
•added 2020/04/20 5:15 p.m.•13 views

CVE-2020-5279

In PrestaShop between versions 1.5.0.0 and 1.7.6.5, there are improper access control since the the version 1.5.0.0 for legacy controllers. - admin-dev/index.php/configure/shop/customer-preferences/ - admin-dev/index.php/improve/international/translations/ -...

6.5CVSS6.4AI score0.00812EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2020/04/20 5:15 p.m.•29 views

Improper access control

In PrestaShop between versions 1.5.0.0 and 1.7.6.5, there are improper access control since the the version 1.5.0.0 for legacy controllers. - admin-dev/index.php/configure/shop/customer-preferences/ - admin-dev/index.php/improve/international/translations/ -...

6.4CVSS6.5AI score0.00812EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2020/04/20 4:50 p.m.•7 views

CVE-2020-5279

In PrestaShop between versions 1.5.0.0 and 1.7.6.5, there are improper access control since the the version 1.5.0.0 for legacy controllers. - admin-dev/index.php/configure/shop/customer-preferences/ - admin-dev/index.php/improve/international/translations/ -...

6.5CVSS0.00812EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/04/20 4:50 p.m.•42 views

CVE-2020-5279 Improper Access Control for certain legacy controller in PrestaShop

In PrestaShop between versions 1.5.0.0 and 1.7.6.5, there are improper access control since the the version 1.5.0.0 for legacy controllers. - admin-dev/index.php/configure/shop/customer-preferences/ - admin-dev/index.php/improve/international/translations/ -...

4.1CVSS6.4AI score0.00812EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/20 12:00 a.m.•10 views

CVE-2020-5279: Improper Access Control

In PrestaShop between versions 1.5.0.0 and 1.7.6.5, there are improper access control since the the version 1.5.0.0 for legacy controllers. - admin-dev/index.php/configure/shop/customer-preferences/ - admin-dev/index.php/improve/international/translations/ -...

6.5CVSS6.6AI score0.00812EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/04/20 12:00 a.m.•7 views

PT-2020-18369

Name of the Vulnerable Software and Affected Versions PrestaShop versions 1.5.0.0 through 1.7.6.4 Description The issue is related to improper access control in PrestaShop, specifically affecting legacy controllers since version 1.5.0.0. The affected API endpoints include...

6.5CVSS0.00812EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2020/04/14 8:15 p.m.•24 views

CVE-2019-19300

A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, KTK ATE530S, SIDOOR ATD430W, SIDOOR ATE530S COATED, SIDOOR ATE531S, SIMATIC ET 200AL IM 157-1 PN 6ES7157-1AB00-0AB0, SIMATIC ET 200eco PN, ...

7.5CVSS7AI score0.01722EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/04/14 12:00 a.m.•27 views

PT-2020-6298

Name of the Vulnerable Software and Affected Versions Modicon M218, M241, M251, and M258 controllers affected versions not specified Description A Cleartext Transmission of Sensitive Information issue exists, which could leak sensitive information transmitted between the software and the...

7.5CVSS7.1AI score0.00893EPSS
SaveExploits0References7
HackRead
HackRead
•added 2020/04/13 7:07 p.m.•47 views

Gaming controllers manufacturer exposed 1.1M customer records

By Sudais Asif The company, a known manufacturer of gaming controllers and other accessories had left the database exposed to malicious actors without any security authentication. This is a post from HackRead.com Read the original post: Gaming controllers manufacturer exposed 1.1M customer record...

3.5AI score
SaveExploits0
Veracode
Veracode
•added 2020/04/10 12:56 a.m.•41 views

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution. Multiple buffer overflow flaws were found in the Linux kernel's Management Module Support for Message Passing Technology MPT based controllers. A local, unprivileged user could use these flaws to cause a denial of service, an information leak, or...

6.9CVSS5.4AI score0.00371EPSS
SaveExploits1References19Affected Software2
Microsoft KB
Microsoft KB
•added 2020/04/10 12:00 a.m.•19 views

Domain controller freezes when an event subscription manager list is long in Windows 7 and Windows Server 2008 R2

Domain controller freezes when an event subscription manager list is long in Windows 7 and Windows Server 2008 R2 Symptoms Assume that a domain consists of Windows 7 Service Pack 1 SP1 and Windows Server 2008 R2 SP1 servers and clients. Additionally, an event subscription manager list that is...

5.6AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2020/04/09 12:00 a.m.•38 views

Fix restart problems after you install update rollup 2919355 in Windows 8.1 or Windows Server 2012 R2

Fix restart problems after you install update rollup 2919355 in Windows 8.1 or Windows Server 2012 R2 Symptoms After you install Update Rollup 2919355 April 2014 for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2, or after you install any of these systems from media that includes this...

5.7AI score
SaveExploits0
NVD
NVD
•added 2020/04/06 12:15 p.m.•29 views

CVE-2020-10265

Universal Robots Robot Controllers Version CB2 SW Version 1.4 upwards, CB3 SW Version 3.0 and upwards, e-series SW Version 5.0 and upwards expose a service called DashBoard server at port 29999 that allows for control over core robot functions like starting/stopping programs, shutdown, reset safe...

9.4CVSS9.7AI score0.01466EPSS
SaveExploits0References1
Rows per page
Query Builder