Fimer Aurora 授权问题漏洞

Fimer Aurora is a scalable web-based power plant management platform from Fimer Italy. It is used to enable customers to remotely manage solar power plants in a variety of markets. Fimer Aurora suffers from an authorization issue vulnerability that arises from obtaining plant information without...

gnome-session bug fix and enhancement update

The gnome-session package manages the GNOME desktop session. It starts up other core components of GNOME and handles logouts and saving of the sessions. Bug Fixes and Enhancements: gnome-session kiosk-session support still isn't up to muster BZ1959505...

gnome-session bug fix and enhancement update

An update is available for gnome-session. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnome-session package manages the GNOME desktop session. It starts ...

CVE-2021-31535

A missing validation flaw was found in libX11. This flaw allows an attacker to inject X11 protocol commands on X clients, and in some cases, also bypass, authenticate via injection of control characters, or potentially execute arbitrary code with permissions of the application compiled with libX1...

SQL Injection Vulnerability in Zhejiang Shenda Kiosk Management System (CNVD-2020-64875)

Zhejiang Shenda Intelligent Group is a company focusing on providing intelligent tourism whole industry chain product innovation, industrial planning and operation services. A SQL injection vulnerability exists in the Zhejiang Shenda kiosk management system, which can be exploited by attackers to...

CVE-2020-15797

A vulnerability has been identified in DCA Vantage Analyzer All versions V4.5 are affected by CVE-2020-7590. In addition, serial numbers 40000 running software V4.4.0 are also affected by CVE-2020-15797. Improper Access Control could allow an unauthenticated attacker to escape from the restricted...

Improper access control

A vulnerability has been identified in DCA Vantage Analyzer All versions V4.5 are affected by CVE-2020-7590. In addition, serial numbers 40000 running software V4.4.0 are also affected by CVE-2020-15797. Improper Access Control could allow an unauthenticated attacker to escape from the restricted...

CVE-2020-15797

The CVE-2020-15797 entry concerns DCA Vantage Analyzer hardware/software. Affected: all versions < V4.5 are impacted by CVE-2020-7590; serial numbers

CVE-2020-16212

In Patient Information Center iX PICiX Versions B.02, C.02, C.03, the product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource. The application on the surveillance station operates in kiosk mode, which is vulnerable to local...

CVE-2020-16212

In Patient Information Center iX PICiX Versions B.02, C.02, C.03, the product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource. The application on the surveillance station operates in kiosk mode, which is vulnerable to local...

Code injection

In Patient Information Center iX PICiX Versions B.02, C.02, C.03, the product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource. The application on the surveillance station operates in kiosk mode, which is vulnerable to local...

CVE-2020-16212

CVE-2020-16212 corresponds to Philips PICiX (Patient Information Center iX) with versions B.02, C.02, C.03. The issue exposes a resource to the wrong control sphere, enabling unintended access, and the surveillance-station kiosk mode creates a path for local breakout if an attacker has physical a...

CVE-2020-16212 Philips Patient Monitoring Devices Exposure of Resource to Wrong Sphere

In Patient Information Center iX PICiX Versions B.02, C.02, C.03, the product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource. The application on the surveillance station operates in kiosk mode, which is vulnerable to local...

PT-2020-14811 · Philips · Patient Information Center Ix

Name of the Vulnerable Software and Affected Versions: Patient Information Center iX PICiX versions B.02, C.02, C.03 Description: The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource. The application on the surveillance...

Bosch Recording Station Access Control Error Vulnerability

Bosch Recording Station is a surveillance video management solution from Bosch, Germany. An Access Control Error vulnerability exists in the Kiosk Mode feature in Bosch Recording Station, which stems from incorrect access control. A local attacker could use this vulnerability to bypass Kiosk Mode...

CVE-2020-6774

Improper Access Control in the Kiosk Mode functionality of Bosch Recording Station allows a local unauthenticated attacker to escape from the Kiosk Mode and access the underlying operating system...

Improper access control

Improper Access Control in the Kiosk Mode functionality of Bosch Recording Station allows a local unauthenticated attacker to escape from the Kiosk Mode and access the underlying operating system...

CVE-2020-6774 Kiosk Mode Breakout in Bosch Recording Station

Improper Access Control in the Kiosk Mode functionality of Bosch Recording Station allows a local unauthenticated attacker to escape from the Kiosk Mode and access the underlying operating system...

CVE-2020-6774

CVE-2020-6774 concerns an improper access control in the Bosch Recording Station’s Kiosk Mode, enabling a local, unauthenticated attacker to escape Kiosk Mode and gain access to the underlying operating system. The issue stems from incorrect access control within Kiosk Mode. Impact: potential ful...

SQL Injection Vulnerability in Zhejiang Shenda Self-service Machine Management System

Zhejiang Shenda Intelligent Group is a company focusing on providing intelligent tourism whole industry chain product innovation, industrial planning and operation services. A SQL injection vulnerability exists in the Zhejiang Shenda kiosk management system, which can be exploited by attackers to...