Lucene search
+L

1752 matches found

Vulnrichment
Vulnrichment
added 2022/10/11 12:0 a.m.7 views

CVE-2022-36361

A vulnerability has been identified in LOGO! 12/24RCE 6ED1052-1MD08-0BA1 All versions, LOGO! 12/24RCEo 6ED1052-2MD08-0BA1 All versions, LOGO! 230RCE 6ED1052-1FB08-0BA1 All versions, LOGO! 230RCEo 6ED1052-2FB08-0BA1 All versions, LOGO! 24CE 6ED1052-1CC08-0BA1 All versions, LOGO! 24CEo...

9.8CVSS7AI score0.0096EPSS
SaveExploits0References2
ICS
ICS
added 2022/10/11 12:0 a.m.39 views

Siemens LOGO! 8 BM Devices

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment : LOGO! 8 BM Devices Vulnerabilities: Buffer Copy without Checking Size of Input; Improper Input Validation; Improper Validation of Specified Index, Position, or Offset in Input. 2...

9.8CVSS7.9AI score0.0096EPSS
SaveExploits0References10
ICS
ICS
added 2022/10/11 12:0 a.m.24 views

Siemens LOGO!

1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Low attack complexity Vendor: Siemens Equipment: LOGO! Vulnerability: Insufficient Verification of Data Authenticity 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to manipulate a firmware update and flash the...

7.5CVSS7.3AI score0.00267EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2022/10/11 12:0 a.m.7 views

Siemens LOGO! 8 BM 安全漏洞

Siemens LOGO! 8 BM is a programming software for industrial environments for the Windows platform from Siemens Germany. Siemens LOGO! 8 BM suffers from a buffer overflow vulnerability that stems from an inability to properly validate the structure of a TCP packet through a variety of methods. An...

9.8CVSS7.3AI score0.0096EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/10/11 12:0 a.m.8 views

Siemens LOGO! 8 BM 输入验证错误漏洞

A security vulnerability exists in Siemens LOGO! 8 BM, a programming software for the Windows platform used in industrial environments from Siemens, Germany. The vulnerability stems from the inability to properly validate offset values defined in TCP packets when calling methods. An attacker coul...

5.3CVSS6.7AI score0.00405EPSS
SaveExploits0References4
NCSC
NCSC
added 2022/10/11 12:0 a.m.14 views

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in RUGGEDCOM, among others, SCALANCE, SIMATIC, and Logo! products. The vulnerabilities allow a malicious party potentially able to launch attacks that lead to the following categories of damage: Cross-Site Scripting XSS. Denial-of-Service DoS. Circumvention of...

9.8CVSS7.8AI score0.70561EPSS
SaveExploits2
HackRead
HackRead
added 2022/10/01 6:29 p.m.20 views

Chinese Hackers Hiding Malware in Windows Logo

By Waqas Going by the name of Witchetty; the hacker group is targeting countries in Africa and the Middle East. This is a post from HackRead.com Read the original post: Chinese Hackers Hiding Malware in Windows Logo...

3.7AI score
SaveExploits0
OSV
OSV
added 2022/08/15 11:21 a.m.9 views

CVE-2022-2381

The E Unlocked - Student Result WordPress plugin through 1.0.4 is lacking CSRF and validation when uploading the School logo, which could allow attackers to make a logged in admin upload arbitrary files, such as PHP via a CSRF attack...

8.8CVSS5.9AI score0.00527EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2022/08/15 11:21 a.m.6 views

CVE-2022-2381

The E Unlocked - Student Result WordPress plugin through 1.0.4 is lacking CSRF and validation when uploading the School logo, which could allow attackers to make a logged in admin upload arbitrary files, such as PHP via a CSRF attack...

8.8CVSS6AI score0.00527EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2022/08/15 12:0 a.m.10 views

WordPress plugin E Unlocked - Student Result 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS7.8AI score0.00527EPSS
SaveExploits2References2
OSV
OSV
added 2022/07/31 2:15 p.m.13 views

GSD-2022-1004510 scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted

scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.49 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/07/07 1:15 p.m.9 views

CVE-2022-31854

Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel...

7.2CVSS5.9AI score0.32233EPSS
SaveExploits4References4
Prion
Prion
added 2022/07/07 1:15 p.m.43 views

Privilege escalation

Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel...

6.5CVSS7AI score0.32233EPSS
SaveExploits4References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/07/07 1:15 p.m.4 views

CVE-2022-31854

Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel...

7.2CVSS5.5AI score0.32233EPSS
SaveExploits4References6
Cvelist
Cvelist
added 2022/07/07 12:54 p.m.66 views

CVE-2022-31854

Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel...

7.3AI score0.32233EPSS
SaveExploits4References4
CVE
CVE
added 2022/07/07 12:54 p.m.158 views

CVE-2022-31854

Codoforum v5.1 contains an arbitrary file upload vulnerability exploitable via the logo-change option in the admin panel. The underlying flaw allows uploading files that can be executed on the server, potentially enabling remote code execution after authentication. Public exploit materials and re...

7.2CVSS7AI score0.32233EPSS
SaveExploits4References4Affected Software1
CNNVD
CNNVD
added 2022/07/07 12:0 a.m.9 views

Codoforum 代码问题漏洞

Codoforum is a PHP and MySQL based forum software. A security vulnerability exists in Codoforum v5.1, which originates from an arbitrary file upload vulnerability discovered via the logo change option in the admin panel...

7.2CVSS7.2AI score0.32233EPSS
SaveExploits4References8
CNVD
CNVD
added 2022/06/27 12:0 a.m.47 views

OneBlog Logo Parameter Server-Side Request Forgery Vulnerability

OneBlog is a beautiful and powerful Java blog. OneBlog v2.3.4 version exists server-side request forgery vulnerability, the vulnerability stems from the Link module under the Logo parameter fails to correctly validate the user input, an attacker can use the vulnerability to probe the server...

4.3CVSS4.6AI score0.0054EPSS
SaveExploits1References1
OSV
OSV
added 2022/06/23 5:15 p.m.5 views

CVE-2022-34013

OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the Logo parameter under the Link module...

4.3CVSS5.8AI score0.0054EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/23 5:15 p.m.4 views

CVE-2022-34013

OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the Logo parameter under the Link module...

4.3CVSS5.9AI score0.0054EPSS
SaveExploits1References2
Rows per page
Query Builder