PT-2022-24394 · Mentor Graphics +1 · Nucleus Net For Nucleus Plus V1 +17

Name of the Vulnerable Software and Affected Versions: APOGEE MBC PPC BACnet versions All APOGEE MBC PPC P2 Ethernet versions All APOGEE MEC PPC BACnet versions All APOGEE MEC PPC P2 Ethernet versions All APOGEE PXC Compact BACnet versions prior to V3.5.7 APOGEE PXC Compact P2 Ethernet versions...

CVE-2021-37770

Nucleus CMS v3.71 is affected by a file upload vulnerability. In this vulnerability, we can use upload to change the upload path to the path without the Htaccess file. Upload an Htaccess file and write it to AddType application / x-httpd-php.jpg. In this way, an attacker can upload a picture with...

CVE-2021-37770

Nucleus CMS v3.71 is affected by a file upload vulnerability. In this vulnerability, we can use upload to change the upload path to the path without the Htaccess file. Upload an Htaccess file and write it to AddType application / x-httpd-php.jpg. In this way, an attacker can upload a picture with...

Privilege escalation

Nucleus CMS v3.71 is affected by a file upload vulnerability. In this vulnerability, we can use upload to change the upload path to the path without the Htaccess file. Upload an Htaccess file and write it to AddType application / x-httpd-php.jpg. In this way, an attacker can upload a picture with...

CVE-2021-37770

CVE-2021-37770 affects Nucleus CMS v3.71. The issue is a file upload vulnerability that bypasses the intended upload controls by enabling an Htaccess file to be written to an AddType mapping (application/x-httpd-php.jpg), allowing the uploaded image to be treated as PHP and execute commands. This...

CVE-2021-37770

Nucleus CMS v3.71 is affected by a file upload vulnerability. In this vulnerability, we can use upload to change the upload path to the path without the Htaccess file. Upload an Htaccess file and write it to AddType application / x-httpd-php.jpg. In this way, an attacker can upload a picture with...

Nucleus CMS 代码问题漏洞

Nucleus CMS is a website builder. A security vulnerability exists in Nucleus CMS version v3.71, which stems from the presence of a file upload vulnerability. An attacker can exploit this vulnerability to obtain sensitive information from a website...

Malicious Package

Overview nucleus-wallet is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

Malicious code in nucleus-integration-js-dessert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db6ff408b3af3849d782ccc9111df41c330380f7bc45681e171110a6ac0224ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4970 Malicious code in nucleus-integration-js-dessert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db6ff408b3af3849d782ccc9111df41c330380f7bc45681e171110a6ac0224ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nucleus-integration-banana (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dd895cf5eee8e2bae891ee2d9f49bb17de1049fdd89fb3610b5c1e4c0d4051a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4969 Malicious code in nucleus-integration-banana (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dd895cf5eee8e2bae891ee2d9f49bb17de1049fdd89fb3610b5c1e4c0d4051a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4971 Malicious code in nucleus-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2899c8885b4acca70f37e4611f3d4b1d1dec6c798f39b940216a866a974475d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nucleus-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2899c8885b4acca70f37e4611f3d4b1d1dec6c798f39b940216a866a974475d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-28198

NVIDIA Omniverse Nucleus and Cache contain a vulnerability in its configuration of OpenSSL, where an attacker with physical access to the system can cause arbitrary code execution which can impact confidentiality, integrity, and availability...

CVE-2022-28198

NVIDIA Omniverse Nucleus and Cache contain a vulnerability in its configuration of OpenSSL, where an attacker with physical access to the system can cause arbitrary code execution which can impact confidentiality, integrity, and availability...

CVE-2022-28198

NVIDIA Omniverse Nucleus and Cache contain a vulnerability in its configuration of OpenSSL, where an attacker with physical access to the system can cause arbitrary code execution which can impact confidentiality, integrity, and availability...

Design/Logic Flaw

NVIDIA Omniverse Nucleus and Cache contain a vulnerability in its configuration of OpenSSL, where an attacker with physical access to the system can cause arbitrary code execution which can impact confidentiality, integrity, and availability...

CVE-2022-28198

NVIDIA Omniverse Nucleus and Cache contain a vulnerability in its configuration of OpenSSL, where an attacker with physical access to the system can cause arbitrary code execution which can impact confidentiality, integrity, and availability...

CVE-2022-28198

Summary: CVE-2022-28198 affects NVIDIA Omniverse Nucleus and Omniverse Cache due to a misconfiguration in OpenSSL. The issue allows arbitrary code execution when an attacker has physical access to the system, impacting confidentiality, integrity, and availability. The NVIDIA Security Bulletin rec...