Lucene search
K

331 matches found

CNNVD
CNNVD
added 2023/03/28 12:0 a.m.5 views

SDM600 代码问题漏洞

ABB SDM600 is a system data manager from ABB Switzerland. A security vulnerability exists in SDM600 versions prior to 1.2.23000.291, which stems from the presence of a file permission validation vulnerability that could be exploited by an attacker to cause arbitrary code execution...

9.9CVSS8.6AI score0.00781EPSS
Exploits0References3
F5 Networks
F5 Networks
added 2023/02/21 7:47 p.m.37 views

K15310: Data Manager SQL Injection Remote Code Execution vulnerability CVE-2014-2949

Security Advisory Description F5 Data Manager SQL Injection Remote Code Execution Vulnerability. CVE-2014-2949 Impact An authenticated user may potentially execute code. Security Advisory Status F5 Product Development has assigned ID 461853 Data Manager to this vulnerability, and has evaluated th...

6.5CVSS8.2AI score0.01421EPSS
Exploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/07/22 4:15 a.m.4 views

CVE-2022-2493

Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0...

8.3CVSS7.2AI score0.00883EPSS
Exploits2References3
Prion
Prion
added 2022/07/22 4:15 a.m.15 views

Design/Logic Flaw

Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0...

5.5CVSS8AI score0.00883EPSS
Exploits2References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.14 views

WordPress SLP – Extended Data Manager plugin < 5.9.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress SLP – Extended Data Manager plugin versions 5.9.1. Solution Update the WordPress SLP – Extended Data Manager plugin to the latest available version at least 5.9.1...

3.6AI score
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.10 views

WordPress SLP – Extended Data Manager plugin < 5.9.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress SLP – Extended Data Manager plugin versions 5.9.1. Solution Update the WordPress SLP – Extended Data Manager plugin to the latest available version at least 5.9.1...

2.6AI score
Exploits0References2Affected Software1
CNVD
CNVD
added 2021/09/09 12:0 a.m.28 views

Hitachi ABB Power Grids System Data Manager Encryption Issue Vulnerability

Hitachi ABB Power Grids System Data Manager is a system data manager from Hitachi, Japan. Hitachi ABB Power Grids System Data Manager is vulnerable to an encryption issue that stems from the fact that the application does not encrypt backup files. A local operating system user can modify the back...

7.8CVSS2.5AI score0.0012EPSS
Exploits0References1
OSV
OSV
added 2021/09/08 4:15 p.m.3 views

CVE-2021-35526

Backup file without encryption vulnerability is found in Hitachi ABB Power Grids System Data Manager – SDM600 allows attacker to gain access to sensitive information. This issue affects: Hitachi ABB Power Grids System Data Manager – SDM600 1.2 versions prior to FP2 HF6 Build Nr. 1.2.14002.257...

7.8CVSS5.8AI score
Exploits0References2
Cvelist
Cvelist
added 2021/09/08 3:10 p.m.14 views

CVE-2021-35526 Storage of Sensitive Information Vulnerability in Hitachi ABB Power Grids System Data Manager – SDM600 Product

Backup file without encryption vulnerability is found in Hitachi ABB Power Grids System Data Manager – SDM600 allows attacker to gain access to sensitive information. This issue affects: Hitachi ABB Power Grids System Data Manager – SDM600 1.2 versions prior to FP2 HF6 Build Nr. 1.2.14002.257...

6.3CVSS7.8AI score0.0012EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2021/09/08 12:0 a.m.4 views

PT-2021-20952 · Hitachi Abb Power Grids · Hitachi Abb Power Grids System Data Manager – Sdm600

Name of the Vulnerable Software and Affected Versions: Hitachi ABB Power Grids System Data Manager – SDM600 versions prior to 1.2 FP2 HF6 Build Nr. 1.2.14002.257 Description: A backup file without encryption vulnerability is found in Hitachi ABB Power Grids System Data Manager – SDM600, allowing ...

7.8CVSS7.6AI score0.0012EPSS
Exploits0References6
CNNVD
CNNVD
added 2021/09/07 12:0 a.m.3 views

Hitachi ABB Power Grids System Data Manager 加密问题漏洞

Hitachi ABB Power Grids System Data Manager is a system data manager from Hitachi, Japan. Hitachi ABB Power Grids System Data Manager is vulnerable to an encryption issue that stems from the fact that the application does not encrypt backup files. A local operating system user can modify the back...

7.8CVSS5.7AI score0.0012EPSS
Exploits0References5
ICS
ICS
added 2021/09/07 12:0 a.m.53 views

Hitachi ABB Power Grids System Data Manager

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION: Low attack complexity Vendor: Hitachi ABB Power Grids Equipment: System Data Manager Vulnerability: Cleartext Storage of Sensitive Information 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker access to sensitive...

7.8CVSS7.1AI score0.0012EPSS
Exploits0References5
CNVD
CNVD
added 2020/07/07 12:0 a.m.2 views

Dell PowerProtect Data Manager and PowerProtect X400 Licensing Issues Vulnerability

Dell PowerProtect Data Manager PPDM and PowerProtect X400 are both products from Dell, U.S.A. Dell PowerProtect Data Manager is a data protection solution. It supports data backup, virtual machine backup and database protection.PowerProtect X400 is a data management appliance. An authorization...

7.7CVSS6.8AI score0.01273EPSS
Exploits0References1
OSV
OSV
added 2020/07/06 6:15 p.m.3 views

CVE-2020-5356

Dell PowerProtect Data Manager PPDM versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines...

6.5CVSS6.7AI score
Exploits0References1
Prion
Prion
added 2020/07/06 6:15 p.m.17 views

Authorization

Dell PowerProtect Data Manager PPDM versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines...

4CVSS6.3AI score0.01273EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2020/07/06 5:45 p.m.14 views

CVE-2020-5356

Dell PowerProtect Data Manager PPDM versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines...

7.7CVSS7.3AI score0.01273EPSS
Exploits0References1
CVE
CVE
added 2020/07/06 5:45 p.m.39 views

CVE-2020-5356

Dell PowerProtect Data Manager (PPDM) and PowerProtect X400 are affected by CVE-2020-5356 for versions prior to PPDM 19.4 and X400 3.2, where an improper authorization flaw allows a remote authenticated user to download any file from affected virtual machines. The issue is confirmed by multiple s...

7.7CVSS6.2AI score0.01273EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2020/06/10 5:15 p.m.6 views

CVE-2020-7585

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3, SIMATIC PDM All versions V9.2, SIMATIC STEP 7 V5.X All versions V5.6 SP2 HF3, SINAMICS STARTER containing STEP 7 OEM version All versions V5.4 HF2. A DLL Hijacking...

7.8CVSS7.2AI score0.00433EPSS
Exploits0References3
CNVD
CNVD
added 2018/05/22 12:0 a.m.3 views

ASUSTOR AS6202T ADM Insecure Direct Object Reference Vulnerability

ADM ASUSTOR Data Manager is the operating system and user interface for ASUSTOR NAS. An insecure direct object reference vulnerability exists in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3. An attacker could use this vulnerability to reference the "downloadsyssettings" action to arbitrarily...

4.3CVSS5AI score0.01275EPSS
Exploits1References1
CNVD
CNVD
added 2018/05/22 12:0 a.m.3 views

ASUSTOR AS6202T ADM Directory Traversal Vulnerability

ADM ASUSTOR Data Manager is the operating system and user interface for ASUSTOR NAS. A directory traversal vulnerability exists in importuser.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3. An attacker can exploit this vulnerability to navigate the file system via the filename parameter...

7.2CVSS7AI score0.02172EPSS
Exploits1References1
Rows per page
Query Builder