Lucene search
K

374 matches found

CNNVD
CNNVD
added 2023/08/03 12:0 a.m.2 views

Omron CX-Programmer Resource Management Error Vulnerability

Omron CX-Programmer is a PLC Programmable Logic Controller programming software from Omron, Japan. A security vulnerability exists in CX-Programmer version 9.79 and earlier, which stems from the presence of a post-release reuse vulnerability. An attacker can exploit this vulnerability to allow a...

7.8CVSS7.1AI score0.00055EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/08/01 12:0 a.m.2 views

PT-2023-5304 · Omron · Cx-Programmer

Name of the Vulnerable Software and Affected Versions: CX-Programmer Included in CX-One CXONE-ALD-V4 versions 9.80 and earlier Description: A heap-based buffer overflow issue exists, which can be exploited by having a user open a specially crafted CXP file. This may lead to information disclosure...

7.8CVSS8AI score0.00187EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2023/08/01 12:0 a.m.1 views

PT-2023-5305 · Omron · Cx-Programmer

Name of the Vulnerable Software and Affected Versions: CX-Programmer Included in CX-One CXONE-ALD-V4 versions 9.80 and earlier Description: An out-of-bounds read issue exists, which may allow information disclosure and/or arbitrary code execution when a user opens a specially crafted CXP file. Th...

7.8CVSS7.7AI score0.00143EPSS
Exploits0References7
OSV
OSV
added 2023/05/10 1:24 p.m.5 views

MAL-2023-873 Malicious code in the-self-taught-programmer-the-definitive-guide-to-programming-professionally-by-cory-althoff-on-kin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8e8766974e7d3b55cae6c994c5db1430a00b75418500b55ce6336492915c633 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/05/10 1:24 p.m.2 views

Malicious code in the-self-taught-programmer-the-definitive-guide-to-programming-professionally-by-cory-althoff-on-kin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8e8766974e7d3b55cae6c994c5db1430a00b75418500b55ce6336492915c633 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
Exploit DB
Exploit DB
added 2023/04/06 12:0 a.m.247 views

Music Gallery Site v1.0 - SQL Injection on page view_music_details.php

Exploit Title: Music Gallery Site v1.0 - SQL Injection on page viewmusicdetails.php Exploit Author: Muhammad Navaid Zafar Ansari Date: 21 February 2023 CVE Assigned: CVE-2023-0961 mitre.org nvd.nist.org Author Name: Muhammad Navaid Zafar Ansari Vendor Homepage: https://www.sourcecodester.com...

9.8CVSS9.7AI score0.0038EPSS
Exploits5
OpenVAS
OpenVAS
added 2023/04/02 12:0 a.m.23 views

Fedora: Security Advisory for rubygem-rails (FEDORA-2023-d6157bb1e2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS7.7AI score0.00406EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2023/03/07 12:0 a.m.26 views

Omron CX-One CXP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CXP...

7.8CVSS4.2AI score0.00288EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/03/07 12:0 a.m.22 views

Omron CX-One CXP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CXP...

7.8CVSS5.2AI score0.00288EPSS
Exploits0References1
NVD
NVD
added 2023/03/01 7:15 p.m.11 views

CVE-2023-25931

Medtronic identified that the Pelvic Health clinician apps, which are installed on the Smart Programmer mobile device, have a password vulnerability that requires a security update to fix. Not updating could potentially result in unauthorized control of the clinician therapy application, which ha...

6.8CVSS6.3AI score0.00131EPSS
Exploits0References1
OSV
OSV
added 2023/03/01 7:15 p.m.0 views

CVE-2023-25931

Medtronic identified that the Pelvic Health clinician apps, which are installed on the Smart Programmer mobile device, have a password vulnerability that requires a security update to fix. Not updating could potentially result in unauthorized control of the clinician therapy application, which ha...

6.8CVSS5.8AI score
Exploits0References1
Prion
Prion
added 2023/03/01 7:15 p.m.11 views

Default credentials

Medtronic identified that the Pelvic Health clinician apps, which are installed on the Smart Programmer mobile device, have a password vulnerability that requires a security update to fix. Not updating could potentially result in unauthorized control of the clinician therapy application, which ha...

4.6CVSS6.5AI score0.00131EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2023/03/01 6:56 p.m.14 views

CVE-2023-25931 Medtronic Micro Clinician & InterStim X Clinician App Password Reset Issue

Medtronic identified that the Pelvic Health clinician apps, which are installed on the Smart Programmer mobile device, have a password vulnerability that requires a security update to fix. Not updating could potentially result in unauthorized control of the clinician therapy application, which ha...

6.4CVSS6.7AI score0.00131EPSS
Exploits0References1
CVE
CVE
added 2023/03/01 6:56 p.m.44 views

CVE-2023-25931

Medtronic Pelvic Health clinician apps (Micro Clinician A51200 and InterStim X Clinician A51300) installed on the Smart Programmer mobile device are affected by a password-related vulnerability (CVE-2023-25931) that could allow unauthorized control of the clinician therapy application. The issue ...

6.8CVSS6.3AI score0.00131EPSS
Exploits0References1Affected Software2
Positive Technologies
Positive Technologies
added 2023/03/01 12:0 a.m.2 views

PT-2023-20366 · Medtronic · Medtronic Pelvic Health Clinician Apps

Name of the Vulnerable Software and Affected Versions: Medtronic Pelvic Health clinician apps affected versions not specified Description: The issue is related to a password vulnerability in the Medtronic Pelvic Health clinician apps installed on the Smart Programmer mobile device. This...

6.8CVSS6.2AI score0.00131EPSS
Exploits0References4
ICS
ICS
added 2022/12/22 12:0 a.m.26 views

Omron CX-Programmer

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Omron Equipment: CX-Programmer Vulnerability: Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of this vulnerability could allow arbitrary code execution or loss of sensitive information if a user opens a...

7.8CVSS8AI score0.00065EPSS
Exploits0References4
OSV
OSV
added 2022/12/07 4:15 a.m.0 views

CVE-2022-43509

Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

7.8CVSS6.3AI score0.00065EPSS
Exploits0References2
OSV
OSV
added 2022/12/07 4:15 a.m.1 views

CVE-2022-43508

Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

7.8CVSS6.3AI score
Exploits0References2
OSV
OSV
added 2022/12/07 4:15 a.m.0 views

CVE-2022-43667

Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

7.8CVSS6.5AI score
Exploits0References2
NVD
NVD
added 2022/12/07 4:15 a.m.11 views

CVE-2022-43667

Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

7.8CVSS0.00092EPSS
Exploits0References2
Rows per page
Query Builder