PT-2023-30413

Name of the Vulnerable Software and Affected Versions Silverpeas Core versions 6.3.1 and below Description The issue is related to Incorrect Access Control, allowing an attacker with low privileges to execute the administrator-only function of putting the application in "Maintenance Mode" due to...

CVE-2023-47320

Silverpeas Core 6.3.1 and earlier are affected by an Incorrect Access Control vulnerability. An attacker with LOW privileges can invoke an administrator-only function to put the application into Maintenance Mode, making it unavailable to all users. Root cause: broken access control as described a...

Removing maintenance mode from hosting connection fails (after certificate thumbprint update)

After the SSL certificate is updated on vCenter, updated the cert SSL thumbprint on for DaaS using remote powershell SDK 2. We put the Hosting Conneciton in maintenance mode to achieve above. 3. Updated the certificates on Trusted People store of Cloud Connectors. 4. This causes all the catalogs...

CVE-2023-47320

Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control. An attacker with low privileges is able to execute the administrator-only function of putting the application in "Maintenance Mode" due to broken access control. This makes the application unavailable to all users. This affects...

Unspecified Vulnerability in Siemens User Management Component (UMC)

Opcenter Quality is a quality management system QMS that enables organizations to safeguard compliance, optimize quality, reduce the cost of defects and rework, and achieve operational excellence by improving process stability. simatic pcs neo is a distributed control system DCS. the SINUMERIK...

The vulnerability of microprogrammed software in Osprey Pump Controller controllers allows a intruder to alter arbitrary data or cause malfunctions during maintenance.

The vulnerability of microprogrammed software in Osprey Pump Controller controllers relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to alter arbitrary data or cause malfunctions in the system...

WordPress Rocket Maintenance Mode & Coming Soon Page Plugin <= 4.3 is vulnerable to Cross Site Scripting (XSS)

Software Rocket Maintenance Mode & Coming Soon Page Type Plugin Vulnerable versions = 4.3 Fixed in 4.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-49842 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a85d00ace7c4 Credits emad Required...

CVE-2023-5915

A vulnerability of Uncontrolled Resource Consumption has been identified in STARDOM provided by Yokogawa Electric Corporation. This vulnerability may allow to a remote attacker to cause a denial-of-service condition to the FCN/FCJ controller by sending a crafted packet. While sending the packet,...

CVE-2023-5915

A vulnerability of Uncontrolled Resource Consumption has been identified in STARDOM provided by Yokogawa Electric Corporation. This vulnerability may allow to a remote attacker to cause a denial-of-service condition to the FCN/FCJ controller by sending a crafted packet. While sending the packet,...

Design/Logic Flaw

A vulnerability of Uncontrolled Resource Consumption has been identified in STARDOM provided by Yokogawa Electric Corporation. This vulnerability may allow to a remote attacker to cause a denial-of-service condition to the FCN/FCJ controller by sending a crafted packet. While sending the packet,...

CVE-2023-5915

A vulnerability of Uncontrolled Resource Consumption has been identified in STARDOM provided by Yokogawa Electric Corporation. This vulnerability may allow to a remote attacker to cause a denial-of-service condition to the FCN/FCJ controller by sending a crafted packet. While sending the packet,...

WordPress Coming soon and Maintenance mode Plugin <= 3.7.3 is vulnerable to Bypass Vulnerability

Software Coming soon and Maintenance mode Type Plugin Vulnerable versions = 3.7.3 Fixed in 3.7.4 OWASP Top 10 A6: Security Misconfiguration Classification Bypass Vulnerability CVE CVE-2023-49741 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID d62ae4e054de Credits Mika...

PT-2023-7279 · Unknown · Stardom Fcn/Fcj

Name of the Vulnerable Software and Affected Versions: STARDOM FCN/FCJ versions R1.01 through R4.31 Description: The issue is related to uncontrolled resource consumption in the STARDOM FCN/FCJ programmable logic controllers. This could allow a remote attacker to cause a denial-of-service conditi...

WP Maintenance < 6.1.4 - IP Restriction Bypass

Description The WP Maintenance plugin for WordPress is vulnerable to IP Address Restriction Bypass in versions up to, and including, 6.1.3. This can be used to bypass settings that may have blocked out an IP address from accessing a page on the site...

MainWP Dashboard < 4.5.1.3 - Authenticated(Administrator+) CSS Injection

Description The MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance plugin for WordPress is vulnerable to CSS Injection via the ‘newColor’ parameter in all versions up to, and including, 4.5.1.2 due to insufficient input sanitization. This makes it possible for authenticated...

CVE-2023-6164

The CVE-2023-6164 entry concerns the MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance plugin for WordPress. It is vulnerable to CSS Injection via the newColor parameter due to insufficient input sanitization in all versions up to and including 4.5.1.2 . The issue affects aut...

CVE-2023-47393

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the maintenance orders of other users and access sensitive user information via unspecified vectors...

CVE-2023-47393

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the maintenance orders of other users and access sensitive user information via unspecified vectors...

CVE-2023-47393

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the maintenance orders of other users and access sensitive user information via unspecified vectors...

Design/Logic Flaw

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the maintenance orders of other users and access sensitive user information via unspecified vectors...