Lucene search
K

191 matches found

Cvelist
Cvelist
added 2021/10/12 9:49 a.m.15 views

CVE-2021-33729

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. An authenticated attacker that is able to import firmware containers to an affected system could execute arbitrary commands in the local database...

8.9AI score0.008EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/10/12 12:0 a.m.1 views

Siemens SINEC NMS SQL注入漏洞

SINEC NMS is a network management system used by Siemens to monitor and manage industrial networks.A SQL injection vulnerability exists in versions prior to SINEC NMS 1.0 SP2 Update 1, which stems from a lack of validation and escaping of SQL parameter statements. An attacker could use this...

7.2CVSS6.3AI score0.00755EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/10/12 12:0 a.m.3 views

Siemens SINEC NMS SQL注入漏洞

SINEC NMS is a network management system used by Siemens to monitor and manage industrial networks.A SQL injection vulnerability exists in versions prior to SINEC NMS 1.0 SP2 Update 1, which stems from the lack of validation and escaping of SQL parameter statements. An attacker could use this...

7.2CVSS6.3AI score0.00755EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/10/12 12:0 a.m.1 views

Siemens SINEC NMS SQL注入漏洞

SINEC NMS is a network management system from Siemens for monitoring and managing industrial networks.A SQL injection vulnerability exists in versions prior to SINEC NMS 1.0 SP2 Update 1, which stems from the lack of validation and escaping of SQL parameter statements in the software. An attacker...

7.2CVSS6.3AI score0.00643EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/10/12 12:0 a.m.1 views

Siemens SINEC NMS SQL注入漏洞

SINEC NMS is a network management system from Siemens for monitoring and managing industrial networks.A SQL injection vulnerability exists in versions prior to SINEC NMS 1.0 SP2 Update 1, which stems from the lack of validation and escaping of SQL parameter statements in the software. An attacker...

7.2CVSS6.3AI score0.00755EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/10/12 12:0 a.m.1 views

Siemens SINEC NMS SQL注入漏洞

SINEC NMS is a network management system from Siemens for monitoring and managing industrial networks.A SQL injection vulnerability exists in versions prior to SINEC NMS 1.0 SP2 Update 1, which could be exploited by an authenticated attacker to import firmware containers into the affected system...

8.8CVSS6.3AI score0.008EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/10/12 12:0 a.m.1 views

Siemens SINEC NMS SQL注入漏洞

SINEC NMS is a network management system used by Siemens to monitor and manage industrial networks.A SQL injection vulnerability exists in versions prior to SINEC NMS 1.0 SP2 Update 1, which stems from a lack of validation and escaping of SQL parameter statements. An attacker could use this...

7.2CVSS6.3AI score0.00755EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/10/12 12:0 a.m.1 views

Siemens SINEC NMS SQL注入漏洞

SINEC NMS is a network management system used by Siemens to monitor and manage industrial networks.A SQL injection vulnerability exists in versions prior to SINEC NMS 1.0 SP2 Update 1, which stems from the lack of validation and escaping of SQL parameter statements. An attacker could use this...

7.2CVSS6.3AI score0.00755EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/10/12 12:0 a.m.1 views

Siemens SINEC NMS SQL注入漏洞

SINEC NMS is a network management system from Siemens for monitoring and managing industrial networks.A SQL injection vulnerability exists in versions prior to SINEC NMS 1.0 SP2 Update 1, which could be exploited by an attacker with privileged credentials to execute arbitrary commands in the loca...

7.2CVSS6.3AI score0.00643EPSS
Exploits0References5
CNVD
CNVD
added 2021/07/21 12:0 a.m.18 views

DELL EMC Repository Manager has an unspecified vulnerability

DELL EMC Repository Manager is an application within the Dell OpenManage product portfolio from Dell USA that allows IT administrators to easily manage system updates.Dell Repository Manager provides a searchable interface for creating custom software collections that are A security vulnerability...

8.8CVSS2.7AI score0.00042EPSS
Exploits0References1
OSV
OSV
added 2021/07/19 10:15 p.m.1 views

CVE-2020-5315

Dell EMC Repository Manager DRM version 3.2 contains a plain-text password storage vulnerability. Proxy server user password is stored in a plain text in a local database. A local authenticated malicious user with access to the local file system may use the exposed password to access the with...

8.8CVSS5.8AI score0.00042EPSS
Exploits0References1
Prion
Prion
added 2021/07/19 10:15 p.m.13 views

Default credentials

Dell EMC Repository Manager DRM version 3.2 contains a plain-text password storage vulnerability. Proxy server user password is stored in a plain text in a local database. A local authenticated malicious user with access to the local file system may use the exposed password to access the with...

2.1CVSS8.4AI score0.00042EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2021/07/19 12:0 a.m.2 views

DELL EMC Repository Manager 安全漏洞

DELL EMC Repository Manager is an application within the Dell OpenManage product portfolio from Dell USA that allows IT administrators to easily manage system updates.Dell Repository Manager provides a searchable interface for creating custom software collections that are A security vulnerability...

8.8CVSS5.6AI score0.00042EPSS
Exploits0References1
Fedora
Fedora
added 2021/04/09 3:41 p.m.62 views

[SECURITY] Fedora 32 Update: libldb-2.1.5-1.fc32

An extensible library that implements an LDAP like API to access remote LDAP servers, or use local tdb databases...

7.5CVSS3.8AI score0.10219EPSS
Exploits0
CNVD
CNVD
added 2020/12/22 12:0 a.m.4 views

SolarWinds N-Central Authorization Issues Vulnerability

SolarWinds N-Central is an IT device management platform from SolarWinds Singapore. The platform provides proactive monitoring of everything on a customer's network, not just servers and workstations, and rapid troubleshooting using features such as MFA, antivirus, integrated endpoint detection a...

8.4CVSS6.8AI score0.00212EPSS
Exploits0References1
NVD
NVD
added 2020/12/16 3:15 p.m.12 views

CVE-2020-25621

An issue was discovered in SolarWinds N-Central 12.3.0.670. The local database does not require authentication: security is only based on ability to access a network interface. The database has keys and passwords...

8.4CVSS8.2AI score0.00212EPSS
Exploits0References3
OSV
OSV
added 2020/12/16 3:15 p.m.2 views

CVE-2020-25621

An issue was discovered in SolarWinds N-Central 12.3.0.670. The local database does not require authentication: security is only based on ability to access a network interface. The database has keys and passwords...

8.4CVSS5.8AI score0.00212EPSS
Exploits0References3
Prion
Prion
added 2020/12/16 3:15 p.m.12 views

Authentication flaw

An issue was discovered in SolarWinds N-Central 12.3.0.670. The local database does not require authentication: security is only based on ability to access a network interface. The database has keys and passwords...

2.1CVSS8.1AI score0.00212EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2020/12/16 2:7 p.m.12 views

CVE-2020-25621

An issue was discovered in SolarWinds N-Central 12.3.0.670. The local database does not require authentication: security is only based on ability to access a network interface. The database has keys and passwords...

8.2AI score0.00212EPSS
Exploits0References3
CNNVD
CNNVD
added 2020/12/16 12:0 a.m.2 views

SolarWinds N-Central 授权问题漏洞

SolarWinds N-Central is an IT device management platform from SolarWinds Singapore. The platform provides proactive monitoring of everything on a customer's network, not just servers and workstations, and rapid troubleshooting using features such as MFA, antivirus, integrated endpoint detection a...

8.4CVSS7.3AI score0.00212EPSS
Exploits0References4
Rows per page
Query Builder