Lucene search
+L

865 matches found

NVD
NVD
added 2023/04/06 5:15 p.m.18 views

CVE-2023-0580

Insecure Storage of Sensitive Information vulnerability in ABB My Control System on-premise allows an attacker who successfully exploited this vulnerability to gain access to the secure application data or take control of the application. Of the services that make up the My Control System...

9.8CVSS6.8AI score0.00459EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/06 5:15 p.m.15 views

Design/Logic Flaw

Insecure Storage of Sensitive Information vulnerability in ABB My Control System on-premise allows an attacker who successfully exploited this vulnerability to gain access to the secure application data or take control of the application. Of the services that make up the My Control System...

7.5CVSS9.5AI score0.00459EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/04/06 4:19 p.m.21 views

CVE-2023-0580 Information Disclosure vulnerability in My Control System (on-premise)

Insecure Storage of Sensitive Information vulnerability in ABB My Control System on-premise allows an attacker who successfully exploited this vulnerability to gain access to the secure application data or take control of the application. Of the services that make up the My Control System...

5.4CVSS9.8AI score0.00459EPSS
SaveExploits0References1
CVE
CVE
added 2023/04/06 4:19 p.m.62 views

CVE-2023-0580

CVE-2023-0580 affects ABB My Control System (on-premise) versions 5.0.0 through 5.13. The issue is insecure storage of sensitive information in the User Interface, System Monitoring1, and Asset Inventory components, enabling an attacker to access secure application data or take control. NVD CVSSv...

9.8CVSS7.8AI score0.00459EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/03/14 12:00 a.m.8 views

Propius MachineSelector 信任管理问题漏洞

Propius MachineSelector is Propius' Web server-client based remote maintenance tool for local setups on-premise or cloud-based in which companies can create, manage and control secure access to their machines. A security vulnerability exists in Propius MachineSelector versions 6.6.0 and 6.6.1,...

9.8CVSS8.3AI score0.00894EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2023/03/07 9:43 a.m.37 views

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.11.30 security update

Red Hat OpenShift Container Platform release 4.11.30 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, whic...

5.3CVSS6.7AI score0.05623EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
added 2023/03/01 10:11 a.m.9 views

Moderate: Red Hat Bug Fix Advisory: OpenShift Container Platform 4.10.53 packages update

Red Hat OpenShift Container Platform release 4.10.53 is now available with updates to packages and images that fix several bugs. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This...

6.5CVSS6.5AI score0.01834EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2023/02/20 6:30 p.m.30 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.4 security update

Red Hat OpenShift Container Platform release 4.12.4 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, whic...

9.1CVSS7.1AI score0.01319EPSS
SaveExploits1References2
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.15 views

SA40971 - Pulse One On-Premise Remote Information Disclosure Vulnerability

Last Modified Date 24.08.2026 00:35:13...

7.5CVSS7.4AI score0.0135EPSS
SaveExploits0
Cvelist
Cvelist
added 2023/01/27 11:14 p.m.42 views

CVE-2023-22737 wire-server vulnerable to unauthorized removal of Bots from Conversations

wire-server provides back end services for Wire, a team communication and collaboration platform. Prior to version 2022-12-09, every member of a Conversation can remove a Bot from a Conversation due to a missing permissions check. Only Conversation admins should be able to remove Bots. Regular...

6.5CVSS6.4AI score0.0073EPSS
SaveExploits0References4
OSV
OSV
added 2023/01/27 11:14 p.m.30 views

CVE-2023-22737 wire-server vulnerable to unauthorized removal of Bots from Conversations

wire-server provides back end services for Wire, a team communication and collaboration platform. Prior to version 2022-12-09, every member of a Conversation can remove a Bot from a Conversation due to a missing permissions check. Only Conversation admins should be able to remove Bots. Regular...

6.5CVSS6.2AI score
SaveExploits0References6
Cvelist
Cvelist
added 2023/01/27 8:43 p.m.60 views

CVE-2022-39380 wire-webapp contains Improper Handling of Exceptional Conditions leading to a DoS via Markdown Rendering

Wire web-app is part of Wire communications. Versions prior to 2022-11-02 are subject to Improper Handling of Exceptional Conditions. In the wire-webapp, certain combinations of Markdown formatting can trigger an unhandled error in the conversion to HTML representation. The error makes it...

5.3CVSS5.2AI score0.00623EPSS
SaveExploits0References1
OSV
OSV
added 2023/01/27 8:43 p.m.37 views

CVE-2022-39380 wire-webapp contains Improper Handling of Exceptional Conditions leading to a DoS via Markdown Rendering

Wire web-app is part of Wire communications. Versions prior to 2022-11-02 are subject to Improper Handling of Exceptional Conditions. In the wire-webapp, certain combinations of Markdown formatting can trigger an unhandled error in the conversion to HTML representation. The error makes it...

5.3CVSS5.2AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/01/27 8:43 p.m.12 views

CVE-2022-39380 wire-webapp contains Improper Handling of Exceptional Conditions leading to a DoS via Markdown Rendering

Wire web-app is part of Wire communications. Versions prior to 2022-11-02 are subject to Improper Handling of Exceptional Conditions. In the wire-webapp, certain combinations of Markdown formatting can trigger an unhandled error in the conversion to HTML representation. The error makes it...

5.3CVSS5.2AI score0.00623EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/01/18 6:15 p.m.287 views

CVE-2022-47966

Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec aka XML Security for Java 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsible for certain...

9.8CVSS8.1AI score0.99753EPSS
SaveIn wildExploits15References17
OSV
OSV
added 2023/01/18 6:15 p.m.5 views

CVE-2022-47966

Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec aka XML Security for Java 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsible for certain...

9.8CVSS6.3AI score0.99753EPSS
SaveExploits15References11
Positive Technologies
Positive Technologies
added 2023/01/13 12:00 a.m.6 views

PT-2023-1059

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ServiceDesk Plus versions prior to 14004 Zoho ManageEngine Access Manager Plus versions prior to 4308 Zoho ManageEngine Active Directory 360 versions prior to 4310 Zoho ManageEngine ADAudit Plus versions prior to 7081 Zoho...

9.8CVSS10AI score0.99753EPSS
SaveExploits15References174
OSV
OSV
added 2023/01/12 3:15 p.m.9 views

CVE-2022-2155

A vulnerability exists in the affected versions of Lumada APM’s User Asset Group feature due to a flaw in access control mechanism implementation on the “Limited Engineer” role, granting it access to the embedded Power BI reports feature. An attacker that manages to exploit the vulnerability on a...

7.1CVSS5.8AI score0.00372EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2022/12/15 9:32 p.m.51 views

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.11.20 security update

Red Hat OpenShift Container Platform release 4.11.20 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, whic...

7.5CVSS7.1AI score0.03931EPSS
SaveExploits0References23
Wired Threat Level
Wired Threat Level
added 2022/10/21 11:00 a.m.20 views

Your Microsoft Exchange Server Is a Security Liability

Endless vulnerabilities. Massive hacking campaigns. Slow and technically tough patching. It's time to say goodbye to on-premise Exchange...

2.4AI score
SaveExploits0
Rows per page
Query Builder