Lucene search
+L

132 matches found

Tenable Nessus
Tenable Nessus
added 2023/03/29 12:0 a.m.19 views

Hitachi Energy GMS600, PWC600, and Relion Improper Access Control (CVE-2021-35534)

Insufficient security control vulnerability in internal database access mechanism of Hitachi Energy Relion 670/650/SAM600-IO, Relion 650, GMS600, PWC600 allows attacker who successfully exploited this vulnerability, of which the product does not sufficiently restrict access to an internal databas...

9CVSS7.1AI score0.01666EPSS
SaveExploits0References5
PyPA
PyPA
added 2022/09/05 10:15 a.m.22 views

PYSEC-2022-43070

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue...

7.5CVSS7AI score0.01187EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2022/09/05 12:0 a.m.4 views

PT-2022-37335 · Apache · Apache Iotdb Grafana-Connector

Name of the Vulnerable Software and Affected Versions: Apache IoTDB grafana-connector version 0.13.0 Description: The issue concerns an interface without proper authorization, potentially exposing the internal database structure. Recommendations: For Apache IoTDB grafana-connector version 0.13.0,...

7.5CVSS7.2AI score
SaveExploits0References3
OSV
OSV
added 2022/04/21 7:15 p.m.8 views

CVE-2022-20732

A vulnerability in the configuration file protections of Cisco Virtualized Infrastructure Manager VIM could allow an authenticated, local attacker to access confidential information and elevate privileges on an affected device. This vulnerability is due to improper access permissions for certain...

7.8CVSS7.3AI score0.00201EPSS
SaveExploits0References1
Prion
Prion
added 2022/04/21 7:15 p.m.21 views

Improper access control

A vulnerability in the configuration file protections of Cisco Virtualized Infrastructure Manager VIM could allow an authenticated, local attacker to access confidential information and elevate privileges on an affected device. This vulnerability is due to improper access permissions for certain...

4.6CVSS7.2AI score0.00201EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/04/20 4:0 p.m.6 views

CVE-2022-20732

A vulnerability in the configuration file protections of Cisco Virtualized Infrastructure Manager VIM could allow an authenticated, local attacker to access confidential information and elevate privileges on an affected device. This vulnerability is due to improper access permissions for certain...

7.8CVSS7.3AI score0.00201EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/12/15 12:0 a.m.10 views

SiPass integrated access control vulnerability (CNVD-2021-100378)

SiPass integrated is an access control system. With the SiPass integrated access control vulnerability, the affected application does not adequately restrict access to the internal active synopsis database. A remote attacker could exploit the vulnerability to read, modify, or delete, among other...

9.1CVSS6.8AI score0.0136EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/12/14 12:0 a.m.7 views

Siemens SiPass Integrated和Siveillance Identity 安全漏洞

SiPass integrated is an access control system. With the SiPass integrated access control vulnerability, the affected application does not adequately restrict access to the internal active synopsis database. A remote attacker could exploit the vulnerability to read, modify, or delete, among other...

9.1CVSS5.6AI score0.0136EPSS
SaveExploits0References5
OSV
OSV
added 2021/11/18 5:15 p.m.7 views

CVE-2021-35534

Insufficient security control vulnerability in internal database access mechanism of Hitachi Energy Relion 670/650/SAM600-IO, Relion 650, GMS600, PWC600 allows attacker who successfully exploited this vulnerability, of which the product does not sufficiently restrict access to an internal databas...

7.2CVSS5.8AI score0.01666EPSS
SaveExploits0References3
Prion
Prion
added 2021/11/18 5:15 p.m.21 views

Security feature bypass

Insufficient security control vulnerability in internal database access mechanism of Hitachi Energy Relion 670/650/SAM600-IO, Relion 650, GMS600, PWC600 allows attacker who successfully exploited this vulnerability, of which the product does not sufficiently restrict access to an internal databas...

9CVSS6.8AI score0.01666EPSS
SaveExploits0References3Affected Software5
Cvelist
Cvelist
added 2021/11/18 4:35 p.m.63 views

CVE-2021-35534 Insufficient Security Control Vulnerability

Insufficient security control vulnerability in internal database access mechanism of Hitachi Energy Relion 670/650/SAM600-IO, Relion 650, GMS600, PWC600 allows attacker who successfully exploited this vulnerability, of which the product does not sufficiently restrict access to an internal databas...

7.2CVSS7.1AI score0.01666EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/11/18 12:0 a.m.13 views

PT-2021-20957 · Hitachi Energy · Pwc600 +5

Name of the Vulnerable Software and Affected Versions: Hitachi Energy Relion 670 Series versions 2.0 through 2.2.3.4 Hitachi Energy Relion 670 Series version 2.2.4 Hitachi Energy Relion 670/650 Series versions 2.1 through 2.2.0 Hitachi Energy Relion 670/650 Series version 2.2.4 Hitachi Energy...

9CVSS6.9AI score0.01666EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2021/11/18 12:0 a.m.26 views

Hitachi Energy Relion 访问控制错误漏洞

Hitachi Energy Relion is used by Hitachi Energy Switzerland to protect, control, measure, and monitor power systems. A security vulnerability exists in the internal database access mechanism of the Hitachi Energy Relion 670/650/SAM600-IO, Relion 650, GMS600, PWC600, which arises from the product'...

9CVSS7AI score0.01666EPSS
SaveExploits0References7
CNVD
CNVD
added 2021/01/13 12:0 a.m.10 views

Gigamon GigaVUE-OS Encryption Issue Vulnerability

Gigamon GigaVUE-OS is an operating system for GigaVUE network devices from Gigamon, USA. A security vulnerability exists in GigaVUE-OS GVOS 5.4 - 5.9 that stems from the use of a weak algorithm for hashing stored in an internal database. No details of the vulnerability are available at this time...

2.3CVSS6.8AI score0.00196EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/05 10:15 p.m.6 views

CVE-2020-23250

GigaVUE-OS GVOS 5.4 - 5.9 uses a weak algorithm for a hash stored in internal database...

2.3CVSS5.8AI score0.00196EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/05 10:15 p.m.27 views

CVE-2020-23250

GigaVUE-OS GVOS 5.4 - 5.9 uses a weak algorithm for a hash stored in internal database...

2.3CVSS3.8AI score0.00196EPSS
SaveExploits0References1
Prion
Prion
added 2021/01/05 10:15 p.m.20 views

Code injection

GigaVUE-OS GVOS 5.4 - 5.9 uses a weak algorithm for a hash stored in internal database...

2.1CVSS4.1AI score0.00196EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/01/05 9:47 p.m.26 views

CVE-2020-23250

GigaVUE-OS GVOS 5.4 - 5.9 uses a weak algorithm for a hash stored in internal database...

3.8AI score0.00196EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/01/05 12:0 a.m.14 views

Gigamon GigaVUE-OS 加密问题漏洞

Gigamon GigaVUE-OS is an operating system for GigaVUE network devices from Gigamon, USA. A security vulnerability exists in GigaVUE-OS GVOS 5.4 - 5.9 that stems from the use of a weak algorithm for hashing stored in an internal database. No details of the vulnerability are available at this time...

2.3CVSS5.8AI score0.00196EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/12/03 12:0 a.m.9 views

The vulnerability of the REST API interface of the Cisco IoT Field Network Director software, which allows a hacker to access the internal database of the vulnerable device.

The vulnerability of the REST API interface of the Cisco IoT Field Network Director software management tool is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the internal database of th...

9CVSS6.9AI score0.01584EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder