Lucene search
+L

1252 matches found

ICS
ICS
added 2023/11/30 7:00 a.m.32 views

Mitsubishi Electric FA Engineering Software Products

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Mitsubishi Electric Equipment : FA Engineering Software Products Vulnerability : External Control of File Name or Path 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a malicious...

7.8CVSS7.9AI score0.00261EPSS
SaveExploits0References10
OSV
OSV
added 2023/11/16 8:15 a.m.10 views

CVE-2023-44296

Dell ELab-Navigator, version 3.1.9 contains a hard-coded credential vulnerability. A local attacker could potentially exploit this vulnerability, leading to unauthorized access to sensitive data. Successful exploitation may result in the compromise of confidential user information...

5.5CVSS5.8AI score0.00192EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/16 8:15 a.m.30 views

CVE-2023-44296

Dell ELab-Navigator, version 3.1.9 contains a hard-coded credential vulnerability. A local attacker could potentially exploit this vulnerability, leading to unauthorized access to sensitive data. Successful exploitation may result in the compromise of confidential user information...

8.4CVSS0.00192EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/16 8:15 a.m.26 views

Hardcoded credentials

Dell ELab-Navigator, version 3.1.9 contains a hard-coded credential vulnerability. A local attacker could potentially exploit this vulnerability, leading to unauthorized access to sensitive data. Successful exploitation may result in the compromise of confidential user information...

1.7CVSS6.7AI score0.00192EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/11/16 7:46 a.m.72 views

CVE-2023-44296

Dell ELab-Navigator 3.1.9 is affected by a hard-coded credential vulnerability that could allow a local attacker to access confidential user data. The root cause is the presence of hard-coded credentials within version 3.1.9. Impact is elevated confidentiality exposure (high). Public details indi...

8.4CVSS5.3AI score0.00192EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/16 7:46 a.m.14 views

CVE-2023-44296

Dell ELab-Navigator, version 3.1.9 contains a hard-coded credential vulnerability. A local attacker could potentially exploit this vulnerability, leading to unauthorized access to sensitive data. Successful exploitation may result in the compromise of confidential user information...

8.4CVSS6.5AI score0.00192EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/11/16 7:46 a.m.32 views

CVE-2023-44296

Dell ELab-Navigator, version 3.1.9 contains a hard-coded credential vulnerability. A local attacker could potentially exploit this vulnerability, leading to unauthorized access to sensitive data. Successful exploitation may result in the compromise of confidential user information...

8.4CVSS8.2AI score0.00192EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/11/16 12:00 a.m.9 views

Dell ELab Trust Management Issues Vulnerabilities

Dell ELab is the interoperability testing lab of Dell Inc. A security vulnerability exists in Dell ELab-Navigator version 3.1.9, which originated when the system contained hard-coded credentials that led to the disclosure of confidential user information, which could be exploited by an attacker t...

8.4CVSS6.6AI score0.00192EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/11/16 12:00 a.m.10 views

PT-2023-29195 · Dell · Dell Elab-Navigator

Name of the Vulnerable Software and Affected Versions: Dell ELab-Navigator version 3.1.9 Description: The issue concerns a hard-coded credential vulnerability. A local attacker could potentially exploit this vulnerability, leading to unauthorized access to sensitive data. Successful exploitation...

8.4CVSS6.5AI score0.00192EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/11/10 12:00 a.m.14 views

The vulnerability of the graphical interface of the IBM Navigator operating system, IBM i, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the IBM Navigator graphical interface of the IBM i operating system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

4.3CVSS5.6AI score0.00579EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2023/11/03 3:15 a.m.30 views

CVE-2023-35896

IBM Content Navigator 3.0.13 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 259247...

5.4CVSS5.3AI score0.00289EPSS
SaveExploits0References2
OSV
OSV
added 2023/11/03 3:15 a.m.10 views

CVE-2023-35896

IBM Content Navigator 3.0.13 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 259247...

5.4CVSS5.5AI score0.00289EPSS
SaveExploits0References2
Prion
Prion
added 2023/11/03 3:15 a.m.21 views

Server side request forgery (ssrf)

IBM Content Navigator 3.0.13 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 259247...

5.5CVSS5.2AI score0.00289EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/03 2:14 a.m.15 views

CVE-2023-35896 IBM Content Navigator server-side request forgery

IBM Content Navigator 3.0.13 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 259247...

5.4CVSS6.3AI score0.00289EPSS
SaveExploits0References2
CVE
CVE
added 2023/11/03 2:14 a.m.88 views

CVE-2023-35896

IBM Content Navigator is affected by CVE-2023-35896 via SSRF in versions 3.0.11, 3.0.13, and 3.0.14 due to Oracle Outside In Technology in the viewer. The root cause is a server-side request forgery that can allow an authenticated attacker to issue unauthorized requests from the system, potential...

5.4CVSS5.3AI score0.00289EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/11/03 2:14 a.m.39 views

CVE-2023-35896 IBM Content Navigator server-side request forgery

IBM Content Navigator 3.0.13 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 259247...

5.4CVSS5.5AI score0.00289EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/11/03 12:00 a.m.11 views

IBM Content Navigator Security Vulnerability

IBM Content Navigator is a Web client from International Business Machines IBM. The product supports searching and processing documents stored in content servers from a Web browser. A security vulnerability exists in IBM Content Navigator version 3.0.13. An attacker exploited the vulnerability to...

5.4CVSS6.4AI score0.00289EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/11/02 12:00 a.m.13 views

PT-2023-25368 · Ibm · Ibm Content Navigator

Name of the Vulnerable Software and Affected Versions: IBM Content Navigator version 3.0.13 Description: The issue allows an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. This is due to a server-side...

5.4CVSS5.3AI score0.00289EPSS
SaveExploits0References6
OSV
OSV
added 2023/10/29 2:15 a.m.9 views

CVE-2023-40685

Management Central as part of IBM i 7.2, 7.3, 7.4, and 7.5 Navigator contains a local privilege escalation vulnerability. A malicious actor with command line access to the operating system can exploit this vulnerability to elevate privileges to gain root access to the operating system. IBM X-Forc...

7.8CVSS5.8AI score0.0015EPSS
SaveExploits0References2
OSV
OSV
added 2023/10/29 1:15 a.m.13 views

CVE-2023-40686

Management Central as part of IBM i 7.2, 7.3, 7.4, and 7.5 Navigator contains a local privilege escalation vulnerability. A malicious actor with command line access to the operating system can exploit this vulnerability to elevate privileges to gain component access to the operating system. IBM...

7.8CVSS5.8AI score0.00145EPSS
SaveExploits0References2
Rows per page
Query Builder