Lucene search
K

195 matches found

NVD
NVD
added 2023/02/14 4:15 a.m.6 views

CVE-2023-0019

In SAP GRC Process Control - versions GRCFNDA V1200, GRCFNDA V8100, GRCPINW V1100700, GRCPINW V1100731, GRCPINW V1200750, remote-enabled function module in the proprietary SAP solution enables an authenticated attacker with minimal privileges to access all the confidential data stored in the...

6.5CVSS6.3AI score0.00246EPSS
Exploits0References2
OSV
OSV
added 2023/02/14 4:15 a.m.2 views

CVE-2023-0019

In SAP GRC Process Control - versions GRCFNDA V1200, GRCFNDA V8100, GRCPINW V1100700, GRCPINW V1100731, GRCPINW V1200750, remote-enabled function module in the proprietary SAP solution enables an authenticated attacker with minimal privileges to access all the confidential data stored in the...

6.5CVSS6.7AI score
Exploits0References2
CVE
CVE
added 2023/02/14 3:6 a.m.53 views

CVE-2023-0019

CVE-2023-0019 affects SAP GRC (Process Control) versions GRCFND_A V1200 and V8100, and GRCPINW V1100_700, V1100_731, V1200_750. A remote-enabled function module allows an authenticated attacker with minimal privileges to access confidential data in client-specific tables, exposing user credential...

6.5CVSS6.2AI score0.00246EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2022/10/25 5:15 p.m.2 views

CVE-2022-33938

A format string injection vulnerability exists in the ghomeprocesscontrolpacket functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted XCMD can lead to memory corruption, information disclosure and denial of service. An attacker can send a malicious X...

9.8CVSS5.8AI score0.0021EPSS
Exploits1References1
NVD
NVD
added 2022/10/14 4:15 p.m.13 views

CVE-2022-38980

The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of this vulnerability may allow attackers to obtain process control permissions...

9.8CVSS0.00224EPSS
Exploits0References1
OSV
OSV
added 2022/10/14 4:15 p.m.1 views

CVE-2022-38980

The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of this vulnerability may allow attackers to obtain process control permissions...

9.8CVSS5.8AI score0.00224EPSS
Exploits0References1
Prion
Prion
added 2022/10/14 4:15 p.m.15 views

Heap overflow

The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of this vulnerability may allow attackers to obtain process control permissions...

7.5CVSS9.3AI score0.00224EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/10/14 12:0 a.m.54 views

CVE-2022-38980

CVE-2022-38980 describes a heap overflow in the Huawei HarmonyOS HwAirlink module when processing data packets of its proprietary protocol. The vulnerability could allow an attacker to obtain process control permissions, as indicated by the provided descriptions. The available connected documents...

9.8CVSS9.4AI score0.00224EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/14 12:0 a.m.10 views

CVE-2022-38980

The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of this vulnerability may allow attackers to obtain process control permissions...

9.6AI score0.00224EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/10/14 12:0 a.m.3 views

PT-2022-24636 · Hwairlink · Hwairlink

Name of the Vulnerable Software and Affected Versions: HwAirlink module affected versions not specified Description: The issue is related to a heap overflow vulnerability in the HwAirlink module when processing data packets of a proprietary protocol. This vulnerability may allow attackers to obta...

9.8CVSS9.2AI score0.00224EPSS
Exploits0References3
Cvelist
Cvelist
added 2022/10/14 12:0 a.m.17 views

CVE-2022-38980

The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of this vulnerability may allow attackers to obtain process control permissions...

9.6AI score0.00224EPSS
Exploits0References1
CNVD
CNVD
added 2022/10/11 12:0 a.m.19 views

Huawei HarmonyOS HwAirlink Module Buffer Overflow Vulnerability

Huawei HarmonyOS is an operating system from Huawei China Inc. Huawei HarmonyOS version 2.0, 2.1 is vulnerable to a buffer overflow vulnerability that stems from a boundary error in the handling of untrusted input by the HwAirlink module. An attacker could exploit the vulnerability to gain proces...

9.8CVSS4.3AI score0.00224EPSS
Exploits0References1
ICS
ICS
added 2022/09/27 12:0 a.m.55 views

Hitachi Energy AFS660/AFS665

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: AFS660/AFS665 Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to overflow an internal buffer...

9.8CVSS9.7AI score0.00078EPSS
Exploits0References4
ICS
ICS
added 2022/09/13 12:0 a.m.41 views

Hitachi Energy TXpert Hub CoreTec 4 Sudo Vulnerability

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Hitachi Energy Equipment: TXpert Hub CoreTec 4 Vulnerability: Off-by-one Error 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to take control of the system node and its information...

7.8CVSS9AI score0.92579EPSS
Exploits81References5
ICS
ICS
added 2022/08/30 12:0 a.m.45 views

Hitachi Energy MSM Product

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: MSM Product Vulnerability: Reliance on Uncontrolled Component 2. RISK EVALUATION Successful exploitation of this vulnerability could disrupt the functionality of the MSM web...

9.1CVSS8.8AI score0.01778EPSS
Exploits3References5
ICS
ICS
added 2022/08/30 12:0 a.m.34 views

Hitachi Energy RTU500 series

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: RTU500 series Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could cause an internal buffer overflow, which can...

7.8CVSS7.9AI score0.00296EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2022/08/12 12:0 a.m.1 views

The vulnerability of Siemens SIMATIC process control system’s API interface allows a hacker to obtain the password hash.

The vulnerability of Siemens SIMATIC process control system APIs is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to obtain the password hash...

6.3CVSS7.7AI score0.00264EPSS
Exploits0References2
CNVD
CNVD
added 2022/07/15 12:0 a.m.19 views

Siemens SIMATIC eaSie Input Validation Error Vulnerability

SIMATIC eaSie, the digital assistant for automation and process control technology in the Siemens Automation Concept "Total Integrated Automation", is vulnerable to an input validation error that could be exploited by remote attackers to trigger a denial of service on the affected system...

7.5CVSS5.8AI score0.00539EPSS
Exploits0References1
CNVD
CNVD
added 2022/07/15 12:0 a.m.12 views

Siemens SIMATIC eaSie Authentication Error Vulnerability

SIMATIC eaSie, the digital assistant for automation and process control technology in the Siemens Automation Concept "Total Integrated Automation", is vulnerable to an authentication error that could be exploited by a remote, unauthenticated attacker to send arbitrary messages to the service,...

9.1CVSS3.6AI score0.00414EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/06/22 12:0 a.m.3 views

Jenkins Plugin xUnit 安全漏洞

Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project. A security vulnerability exists in Jenkins Plugin xUnit 3.0.8 and earlier versions, which can be exploited by an attacker...

9.1CVSS7.1AI score0.0054EPSS
Exploits0References4
Rows per page
Query Builder