Lucene search
+L

14053 matches found

CNNVD
CNNVD
•added 2021/12/21 12:00 a.m.•12 views

mySCADA myPRO 加密问题漏洞

mySCADA myPRO is an HMI/SCADA system designed primarily for the visualization and control of industrial processes. A security vulnerability exists in mySCADA myPRO that can be exploited by an attacker to crack a previously retrieved password hash...

7.5CVSS5.6AI score0.00651EPSS
SaveExploits0References4
OSV
OSV
•added 2021/12/18 12:00 a.m.•13 views

GHSA-74XW-GWFM-7PV7 bounter Null pointer reference

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

7.5CVSS6.7AI score0.01037EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2021/12/17 9:15 p.m.•7 views

CVE-2021-41497

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

7.5CVSS7.1AI score0.01037EPSS
SaveExploits1References2
OSV
OSV
•added 2021/12/17 9:15 p.m.•12 views

CVE-2021-41497

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

7.5CVSS5.8AI score0.01037EPSS
SaveExploits1References1
PyPA
PyPA
•added 2021/12/17 9:15 p.m.•16 views

PYSEC-2021-880

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

7.5CVSS6.9AI score0.01037EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2021/12/17 9:15 p.m.•12 views

PYSEC-2021-880

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

7.5CVSS7AI score0.01037EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/12/16 8:15 p.m.•8 views

CVE-2021-3179

GGLocker iOS application, contains an insecure data storage of the password hash value which results in an authentication bypass...

5.5CVSS6AI score0.00441EPSS
SaveExploits0References5
NVD
NVD
•added 2021/12/16 8:15 p.m.•23 views

CVE-2021-3179

GGLocker iOS application, contains an insecure data storage of the password hash value which results in an authentication bypass...

5.5CVSS0.00441EPSS
SaveExploits0References3
Prion
Prion
•added 2021/12/16 8:15 p.m.•23 views

Authentication flaw

GGLocker iOS application, contains an insecure data storage of the password hash value which results in an authentication bypass...

2.1CVSS5.5AI score0.00441EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2021/12/16 7:13 p.m.•34 views

CVE-2021-3179

GGLocker iOS application, contains an insecure data storage of the password hash value which results in an authentication bypass...

5.8AI score0.00441EPSS
SaveExploits0References3
CVE
CVE
•added 2021/12/16 7:13 p.m.•66 views

CVE-2021-3179

CVE-2021-3179 concerns the GGLocker iOS app, where an insecure data storage of the password hash enables an authentication bypass. The entry is corroborated by multiple sources in connected documents (NVD, Red Hat, CVE lists). Affected software: GGLocker iOS application. Underlying issue: insecur...

5.5CVSS5.5AI score0.00441EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2021/12/16 5:15 a.m.•16 views

UBUNTU-CVE-2021-45098

An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP md5header option...

7.5CVSS7.1AI score0.01824EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2021/12/16 12:00 a.m.•16 views

Suricata 安全漏洞

Suricata is a suite of network Intrusion Detection Systems IDS, Intrusion Prevention Systems IPS, and network security monitoring engines developed by the Open Information Security Foundation OISF and its supporting vendors, which supports multi-threading, built-in IPv6, and the ability to load...

7.5CVSS7.3AI score0.01824EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•10 views

PT-2021-6785 · Mitsubishi · Melsec Q Series Q03/04/06/13/26Udvcpu +20

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions Mitsubishi Electric MELSEC iQ-R series...

8.1CVSS6.6AI score0.01258EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•17 views

PT-2021-09: Possibility of authorization in Remote Password mechanism using password hash

The vulnerability of the FX5UC CPU and FX5UJ CPU modules of Mitsubishi Electric FA products is associated with the possibility of using a weak password hash. Exploiting the vulnerability may allow an attacker to use the resulting hash value to recover the password value. Advisory status 15.12.202...

8.1CVSS8AI score0.01258EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•24 views

PT-2021-08: Possibility of authorization in Remote Password mechanism using password hash in FX5U(C) CPU and FX5UJ CPU modules

Exploiting the vulnerability of the FX5UC CPU and FX5U CPU modules of Mitsubishi Electric FA products may allow an attacker to perform authorization in Remote Password mechanism using password hash Advisory status 15.12.2021 - Vendor gets vulnerability details 31.03.2022 - Security advisory...

8.1CVSS8.2AI score0.02134EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•23 views

PT-2021-10: Possibility of authorization in the file password mechanism using the password hash value in the FX5U(C) CPU and FX5UJ CPU modules

The vulnerability of the FX5UC CPU and FX5UJ CPU modules of Mitsubishi Electric FA products is associated with the possibility of using a password hash instead of a password for authentication. Exploiting the vulnerability may allow an attacker who knows the hash value of the password to perform...

9.1CVSS9.3AI score0.02382EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•10 views

PT-2021-6790 · Mitsubishi · Melsec Iq-R Series Rj71Gf11-T2 +22

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions Mitsubishi Electric MELSEC iQ-R series...

8.1CVSS6.4AI score0.02134EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•9 views

PT-2021-6786 · Mitsubishi · Melsec Q Series Q03/04/06/13/26Udvcpu +21

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions Mitsubishi Electric MELSEC iQ-R series...

9.1CVSS7.6AI score0.02382EPSS
SaveExploits0References6
GithubExploit
GithubExploit
•added 2021/12/14 10:04 a.m.•103 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4j-finder A Python3 script to scan the filesystem to find...

10CVSS6.9AI score0.99999EPSS
SaveExploits379
Rows per page
Query Builder