CVE-2023-0525

Weak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.49.000 and prior, GT25 model versions 01.49.000 and prior, GT23 model versions 01.49.000 and prior, GT21 model versions 01.49.000 and prior, GOT SIMPLE Series GS25 model versions...

CVE-2023-0525

Summary (CVE-2023-0525) : The vulnerability affects Mitsubishi Electric GOT2000/GOT SIMPLE GT2000-era products and related tools, where the Data Transfer Security function can leak plaintext passwords. Affected: GT2000 series GT21/GT23/GT25/GT27 (versions 01.49.000 and earlier); GOT SIMPLE GS21/G...

A CEO’s Perspective: Data Transfer Is the Silent Killer

...

PT-2023-36414 · Mitsubishi · Gs21 +7

Уязвимость функции Data Transfer Security программного обеспечения создания и управления графическими интерфейсами операторов на промышленных панелях управления GT Designer3, GOT2000 Series, GOT SIMPLE Series, GT SoftGOT2000 связана со слабой криптографией паролей. Эксплуатация уязвимости может...

PT-2023-26776 · Renault · Renault Zoe Ev

Name of the Vulnerable Software and Affected Versions: Renault Zoe EV 2021 automotive infotainment system versions 283C35202R to 283C35519R Description: The issue allows attackers to crash the infotainment system by sending arbitrary USB data via a USB device. Recommendations: For versions...

PT-2023-16331 · Mitsubishi · Got Simple Series Gs25 +7

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Corporation GOT2000 Series GT27 versions 01.49.000 and prior Mitsubishi Electric Corporation GOT2000 Series GT25 versions 01.49.000 and prior Mitsubishi Electric Corporation GOT2000 Series GT23 versions 01.49.000 and prior...

[SECURITY] Fedora 37 Update: curl-7.85.0-10.fc37

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

The vulnerability of the cross-platform software development framework Qt, related to the transmission of protected information in unencrypted form, allows attackers to compromise data integrity.

The vulnerability of the cross-platform software development framework Qt is related to the transfer of protected information in unencrypted form. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

编号撤回

libcurl is a tool for transferring data from or to a server. This CVE number has been withdrawn...

BD Alaris System with Guardrails Suite MX 安全漏洞

The BD Alaris System with Guardrails Suite MX is a medical device from BD Medical BD. A security vulnerability exists in the BD Alaris System with Guardrails Suite MX that stems from an insecure data transfer between the PCU and its modules. A threat participant with physical access could read or...

[SECURITY] Fedora 37 Update: curl-7.85.0-9.fc37

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

[SECURITY] Fedora 38 Update: curl-8.0.1-2.fc38

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

EulerOS Virtualization 2.11.0 : curl (EulerOS-SA-2023-2118)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - When doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when...

DEBIAN-CVE-2023-23598

Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to DataTransfer.setData. This vulnerability affects Firefox 109, Firefox ESR 102.7, and Thunderbird...

CVE-2023-30602

Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator...

CVE-2023-30602

The CVE-2023-30602 issue affects Hitron Technologies CODA-5310: the Telnet function transmits credentials in plaintext, allowing an unauthenticated remote attacker to access normal-user and administrator credentials. CVSSv3.1 base score 7.5 (HIGH) with network access and low complexity. Connected...

CVE-2023-23598 Arbitrary file read from GTK drag and drop on Linux

Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to DataTransfer.setData. This vulnerability affects Firefox 109, Firefox ESR 102.7, and Thunderbird...

CVE-2023-32710

In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and in Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user can perform an unauthorized transfer of data from a search using the ‘copyresults’ command if they know the search ID SID of a search job that has recentl...

Command injection

In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and in Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user can perform an unauthorized transfer of data from a search using the ‘copyresults’ command if they know the search ID SID of a search job that has recentl...

CVE-2023-32710 Information Disclosure via the ‘copyresults’ SPL Command

In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and in Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user can perform an unauthorized transfer of data from a search using the ‘copyresults’ command if they know the search ID SID of a search job that has recentl...