Lucene search
K

8 matches found

BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.5 views

The vulnerability of the SimpleOne ITSM automation system lies in its ability to use strictly encrypted user data, which allows a malicious actor to compromise the domain name.

The vulnerability of the SimpleOne ITSM automation system relates to the possibility of using strictly encrypted user data. Exploiting this vulnerability could allow a malicious actor to compromise the domain name...

10CVSS5.5AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/06/07 12:0 a.m.1 views

The vulnerability of the CMS system MinMax CMS, related to the use of strictly encrypted user data, allows a hacker to gain access to a user account and perform login operations.

The vulnerability of the CMS system MinMax CMS is related to the use of strictly encrypted user credentials. Exploiting this vulnerability could allow a malicious actor to gain access to a user account and gain control over the system...

10CVSS5.5AI score0.00233EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/12/19 12:0 a.m.1 views

The vulnerability of the Nagios XI monitoring tool lies in its use of strictly encrypted user data. This allows a malicious actor to gain access to read, modify, or delete data, execute arbitrary code, or trigger a service failure.

The vulnerability of the Nagios XI monitoring tool is related to the use of strictly encrypted user data. Exploiting this vulnerability allows an attacker to gain access to read, modify, or delete data, execute arbitrary code, or trigger a service failure...

3.2CVSS5.8AI score
Exploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/12/13 8:15 p.m.0 views

CVE-2023-50444

By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 ANSSI qualification submission; ZED! for Windows before Q.2021.2 ANSSI qualification submission; ZONECENTRAL for Windows before Q.2021.2 ANSSI qualification submission; ZONECENTRAL for Windows before 2023.5; ZEDMAIL fo...

7.5CVSS7.1AI score0.00352EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/03/23 12:0 a.m.1 views

The vulnerability of the software for programming Mitsubishi Electric GX Works3, related to the possibility of using strictly encrypted user data, allows a intruder to gain access to protected information.

The vulnerability of the software for programming Mitsubishi Electric GX Works3 relates to the possibility of using strictly encrypted user data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...

7.8CVSS7.2AI score0.00223EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/02/22 12:0 a.m.1 views

The vulnerability of the software for programming Mitsubishi Electric GX Works3 lies in the ability to use strictly encrypted user data, which allows a intruder to obtain information about the project files for security modules on the CPU.

The vulnerability of the software for programming Mitsubishi Electric GX Works3 relates to the possibility of using strictly encrypted user data. Exploiting this vulnerability can allow a malicious actor to obtain information about project files for security modules via the MELSEC protocol...

7.8CVSS7.4AI score0.01157EPSS
Exploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/24 8:55 p.m.48 views

Server-Side Request Forgery in charm

We've discovered a vulnerability in which attackers could forge HTTP requests to manipulate the charm data directory to access or delete anything on the server. This has been patched in https://github.com/charmbracelet/charm/commit/3c90668f955c7ce5ef721e4fc9faee7053232fd3 and is available in...

9.8CVSS8.8AI score0.0025EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/04/30 12:0 a.m.2 views

The vulnerability of Microprogrammed Software in Modicon Controllers arises from the existence of rigidly encrypted user data, which allows a intruder to execute any command against the Modicon Controllers.

The vulnerability of Microprogrammed Software in Modicon Controllers stems from the existence of rigidly encoded configuration data used to transmit configuration files to Modicon Controllers. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands on Modicon...

7.8CVSS7.7AI score0.00344EPSS
Exploits0References3
Rows per page
Query Builder