Lucene search
+L

180 matches found

Positive Technologies
Positive Technologies
•added 2022/11/09 12:00 a.m.•16 views

PT-2022-25078 · Unknown · Devicemanagement

Name of the Vulnerable Software and Affected Versions: DeviceManagement versions prior to SMR Nov-2022 Release 1 Description: The issue is related to an improper access control vulnerability in the BootCompletedReceiver CMCC component of DeviceManagement. This vulnerability allows a local attacke...

5.9CVSS3.6AI score0.00082EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/07/26 12:00 a.m.•24 views

The vulnerability in the web interface for managing device information on the Cisco Common Services Platform Collector allows a attacker to carry out cross-site scripting attacks.

The vulnerability in the web interface for collecting device information on the Cisco Common Services Platform Collector exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a...

6.4CVSS6.5AI score0.00738EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2022/05/20 1:15 p.m.•17 views

CVE-2022-29879

A vulnerability has been identified in SICAM T All versions V3.0. The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information...

4.3CVSS5.7AI score0.00861EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/05/12 12:00 a.m.•22 views

Siemens SICAM T 访问控制错误漏洞

The SICAM P850 Multifunctional Measurement Device is used to collect, visualize, evaluate and transmit electrical measurement variables such as AC current, AC voltage, frequency, power, harmonics, etc. The SICAM P855 Multifunctional Device is used to collect, display and transmit measured...

6.5CVSS7.3AI score0.00861EPSS
SaveExploits0References7
OSV
OSV
•added 2022/03/17 1:15 p.m.•16 views

CVE-2021-44262

A vulnerability is in the 'MNUtop.htm' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information for the device...

7.5CVSS5.8AI score0.0219EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2022/02/22 12:00 a.m.•54 views

RHEL 8 : kpatch-patch (RHSA-2022:0590)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0590 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

7.8CVSS6.7AI score0.00867EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2022/02/22 12:00 a.m.•72 views

RHEL 7 : kpatch-patch (RHSA-2022:0592)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0592 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

7.8CVSS7AI score0.02558EPSS
SaveExploits3References12
Cvelist
Cvelist
•added 2021/12/28 7:18 p.m.•39 views

CVE-2020-22061

SUPERAntispyware v8.0.0.1050 was discovered to contain an issue in the component saskutil64.sys. This issue allows attackers to arbitrarily write data to the device via IOCTL 0x9C402140...

7.7AI score0.00318EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/08 12:00 a.m.•5 views

CVE-2021-25513: Improper Privilege Management

An improper privilege management vulnerability in Apps Edge application prior to SMR Dec-2021 Release 1 allows unauthorized access to some device data on the lockscreen...

2.4CVSS5.8AI score0.00109EPSS
SaveExploits0References3
ICS
ICS
•added 2021/11/18 12:00 a.m.•48 views

Philips IntelliBridge EC 40 and EC 80 Hub

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Low attack complexity Vendor: Philips Equipment: IntelliBridge EC 40 and EC 80 Hub Vulnerabilities: Use of Hard-coded Credentials, Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION Successful exploitation of these...

8.8CVSS9.2AI score0.00453EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/11/09 12:00 a.m.•14 views

PT-2025-40761

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s MHI host component where the values read from the CHDBOFF and ERDBOFF registers are not properly validated. If these values fall outside the acceptabl...

8.4CVSS6.2AI score0.00249EPSS
SaveExploits0References457
CNNVD
CNNVD
•added 2021/11/02 12:00 a.m.•20 views

Fortinet FortiWLC SQL注入漏洞

Fortinet FortiWLC is a wireless LAN controller from Fortinet. A security vulnerability in Fortinet FortiWLC version 8.6.1 and below can be exploited by an attacker to disclose device, user, and database information via a crafted HTTP request...

8.8CVSS5.5AI score0.00999EPSS
SaveExploits0References3
CNVD
CNVD
•added 2021/10/22 12:00 a.m.•57 views

DIALink Sensitive Information Explicit Transfer Vulnerability

DIALink is an equipment networking platform from Delta Electronics that effectively manages CNC machines and PLC-controlled machines, collects on-site equipment data and connects it to the upper management platform through a unified interface, and at the same time provides visual information...

8.8CVSS6AI score0.00569EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/10/22 12:00 a.m.•46 views

DIALink cross-site scripting vulnerability (CNVD-2021-84841)

DIALink is an equipment networking platform from Delta Electronics that effectively manages CNC machines and PLC-controlled machines, collects on-site equipment data and connects it to the upper management platform through a unified interface, and at the same time provides visual information...

5.5CVSS5AI score0.11431EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/10/22 12:00 a.m.•54 views

DIALink cross-site scripting vulnerability (CNVD-2021-84839)

DIALink is an equipment networking platform from Delta Electronics that effectively manages CNC machines and PLC-controlled machines, collects on-site equipment data and connects it to the upper management platform through a unified interface, and at the same time provides visual information...

5.5CVSS5AI score0.00643EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/08/13 12:00 a.m.•15 views

MAC1100 PLC 信息泄露漏洞

The MAC1100 PLC is an industrial control product PLC. An information disclosure vulnerability exists in the EPA protocol of the MAC1100 PLC, which could allow an attacker to read a specific storage area and collect relevant device information in the PLC via an unauthorized EPA read operation, whi...

7.5CVSS7.4AI score0.00814EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/08/05 8:05 p.m.•54 views

CVE-2021-21792

An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O request packet IRP can lead to privileged reads in the context of a driver which can result in sensitive information...

6.5CVSS5.3AI score0.0034EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/07/13 12:00 a.m.•31 views

PT-2024-11307 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a Use After Free UAF bug in the fza probe function. The fp variable, which is netdev private data, cannot be used after the free netdev call. Using fp after fre...

7.8CVSS6.4AI score0.00231EPSS
SaveExploits0References18
attackerkb
attackerkb
•added 2021/07/08 2:15 p.m.•13 views

CVE-2021-25427

SQL injection vulnerability in Bluetooth prior to SMR July-2021 Release 1 allows unauthorized access to paired device information...

6.5CVSS6.7AI score0.00206EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/07/08 12:00 a.m.•21 views

Bluetooth SQL注入漏洞

Bluetooth is a short-range wireless technology standard from the Bluetooth Special Interest Group SIG standards organization for exchanging data between fixed and mobile devices over short distances using UHF radio waves in the ISM band from 2.402 GHz to 2.48 GHz, and for building Personal Area...

6.5CVSS5.8AI score0.00206EPSS
SaveExploits0References2
Rows per page
Query Builder