CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

29106 matches found

Mend•added 2023/07/12 3:52 p.m.•6 views

CVE-2023-37948

Jenkins Oracle Cloud Infrastructure Compute Plugin 1.0.16 and earlier does not validate SSH host keys when connecting OCI clouds, enabling man-in-the-middle attacks...

6.3CVSS0.00499EPSS

SaveExploits0References3

IBM Security Bulletins•added 2023/07/12 11:11 a.m.•48 views

Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerabilities [CVE-2022-1434, CVE-2022-1343, CVE-2022-1292, CVE-2022-1473]

Summary There are vulnerabilities which affect IBM Engineering Workflow Management EWM. CVE-2022-1434, CVE-2022-1343, CVE-2022-1292, CVE-2022-1473 The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2022-1434 DESCRIPTION: OpenSSL is vulnerable to a man-in-the-middle attack,...

10CVSS7.2AI score0.82612EPSS

SaveExploits5Affected Software1

CNVD•added 2023/07/12 12:00 a.m.•27 views

Siemens RUGGEDCOM ROX Encryption Issue Vulnerability

RUGGEDCOM products offer a degree of robustness and reliability that sets the standard for communication networks deployed in harsh environments. A security vulnerability exists in the Siemens RUGGEDCOM ROX that stems from the affected device's web server supporting the insecure TLS 1.0 protocol...

7.4CVSS6.5AI score0.00292EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2023/07/12 12:00 a.m.•6 views

CVE-2023-37948: Improper Input Validation

Jenkins Oracle Cloud Infrastructure Compute Plugin 1.0.16 and earlier does not validate SSH host keys when connecting OCI clouds, enabling man-in-the-middle attacks...

3.7CVSS5.5AI score0.00499EPSS

SaveExploits0References2

Jenkins Security Advisories•added 2023/07/12 12:00 a.m.•23 views

Missing SSH host key validation in oracle-cloud-infrastructure-compute

oracle-cloud-infrastructure-compute 1.0.16 and earlier does not perform SSH host key validation when connecting to OCI clouds. This lack of validation could be abused using a man-in-the-middle attack to intercept these connections to OCI clouds. oracle-cloud-infrastructure-compute 1.0.17 provides...

4.8CVSS5AI score0.00499EPSS

SaveExploits0Affected Software1

NVD•added 2023/07/11 10:15 a.m.•36 views

CVE-2023-36749

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.16.0, RUGGEDCOM ROX MX5000RE All versions V2.16.0, RUGGEDCOM ROX RX1400 All versions V2.16.0, RUGGEDCOM ROX RX1500 All versions V2.16.0, RUGGEDCOM ROX RX1501 All versions V2.16.0, RUGGEDCOM ROX RX1510 All versions V2.16.0...

7.4CVSS7.3AI score0.00292EPSS

SaveExploits0References1

Prion•added 2023/07/11 10:15 a.m.•35 views

Design/Logic Flaw

4CVSS7.6AI score0.00292EPSS

SaveExploits0References1Affected Software11

NVD•added 2023/07/11 9:15 a.m.•30 views

CVE-2023-31190

DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an Improper Authentication vulnerability during the firmware update procedure. Specifically, the firmware update procedure ignores and does not check the validity of the TLS certificate of the HTTPS endpoint from which t...

8.1CVSS8.3AI score0.00361EPSS

SaveExploits0References2

Prion•added 2023/07/11 9:15 a.m.•36 views

Authentication flaw

5.1CVSS8.2AI score0.00361EPSS

SaveExploits0References2Affected Software1

CVE•added 2023/07/11 9:07 a.m.•80 views

CVE-2023-36749

Siemens RUGGEDCOM ROX family is affected by CVE-2023-36749 due to use of insecure TLS 1.0 in the webserver, enabling potential man-in-the-middle attacks with data confidentiality and integrity impact. Affected devices include ROX MX5000, MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, R...

7.4CVSS7.1AI score0.00292EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2023/07/11 9:07 a.m.•20 views

CVE-2023-36749

7.4CVSS6.9AI score0.00292EPSS

SaveExploits0References1

Cvelist•added 2023/07/11 9:07 a.m.•38 views

CVE-2023-36749

7.4CVSS7.3AI score0.00292EPSS

SaveExploits0References1

CVE•added 2023/07/11 9:07 a.m.•73 views

CVE-2023-36748

CVE-2023-36748 affects Siemens RUGGEDCOM ROX family (MX5000/MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000) with all versions before V2.16.0. The root cause is that these devices are configured to offer weak ciphers by default, enabling an attacker in a man‑in‑th...

6.8CVSS6.2AI score0.00243EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2023/07/11 9:07 a.m.•50 views

CVE-2023-36748

5.9CVSS6.4AI score0.00243EPSS

SaveExploits0References1

Vulnrichment•added 2023/07/11 9:07 a.m.•16 views

CVE-2023-36748

5.9CVSS6.7AI score0.00243EPSS

SaveExploits0References1

CVE•added 2023/07/11 8:43 a.m.•88 views

CVE-2023-31190

DroneScout ds230 firmware update vulnerability (CVE-2023-31190) is caused by the update procedure not validating the HTTPS TLS certificate, enabling MITM to deliver crafted firmware and gain root on vulnerable firmware versions. Affected firmwares: 20211210-1627 through 20230329-1042. Documented ...

8.1CVSS8.3AI score0.00361EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2023/07/11 8:43 a.m.•38 views

CVE-2023-31190 Missing TLS (HTTPS) certificate validation during firmware update in DroneScout ds230 Remote ID receiver from BlueMark Innovations

8.1CVSS8.5AI score0.00361EPSS

SaveExploits0References2

Vulnrichment•added 2023/07/11 8:43 a.m.•17 views

CVE-2023-31190 Missing TLS (HTTPS) certificate validation during firmware update in DroneScout ds230 Remote ID receiver from BlueMark Innovations

8.1CVSS7.6AI score0.00361EPSS

SaveExploits0References2

CNNVD•added 2023/07/11 12:00 a.m.•18 views

Siemens RUGGEDCOM ROX encryption issue vulnerability

7.4CVSS6.6AI score0.00292EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2023/07/11 12:00 a.m.•4 views

CVE-2023-36748: Inadequate Encryption Strength

6.8CVSS6.3AI score0.00243EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by