Lucene search
+L

462 matches found

Positive Technologies
Positive Technologies
•added 2023/08/03 12:00 a.m.•12 views

PT-2023-18422 · Omron · Cx-Programmer

Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is different from CVE-2023-22277 and CVE-2023-22317...

7.8CVSS7.8AI score0.00238EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/03 12:00 a.m.•2 views

CVE-2023-22314: Use After Free

Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is different from CVE-2023-22277 and CVE-2023-22317...

7.8CVSS8AI score0.00238EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/08/01 12:00 a.m.•23 views

PT-2023-5304 · Omron · Cx-Programmer

Name of the Vulnerable Software and Affected Versions: CX-Programmer Included in CX-One CXONE-ALD-V4 versions 9.80 and earlier Description: A heap-based buffer overflow issue exists, which can be exploited by having a user open a specially crafted CXP file. This may lead to information disclosure...

7.8CVSS8AI score0.00241EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2023/08/01 12:00 a.m.•33 views

PT-2023-5305 · Omron · Cx-Programmer

Name of the Vulnerable Software and Affected Versions: CX-Programmer Included in CX-One CXONE-ALD-V4 versions 9.80 and earlier Description: An out-of-bounds read issue exists, which may allow information disclosure and/or arbitrary code execution when a user opens a specially crafted CXP file. Th...

7.8CVSS7.7AI score0.00218EPSS
SaveExploits0References7
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/05/10 1:24 p.m.•10 views

Malicious code in the-self-taught-programmer-the-definitive-guide-to-programming-professionally-by-cory-althoff-on-kin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8e8766974e7d3b55cae6c994c5db1430a00b75418500b55ce6336492915c633 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2023/05/10 1:24 p.m.•22 views

MAL-2023-873 Malicious code in the-self-taught-programmer-the-definitive-guide-to-programming-professionally-by-cory-althoff-on-kin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8e8766974e7d3b55cae6c994c5db1430a00b75418500b55ce6336492915c633 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Exploit DB
Exploit DB
•added 2023/04/06 12:00 a.m.•271 views

Music Gallery Site v1.0 - SQL Injection on page view_music_details.php

Exploit Title: Music Gallery Site v1.0 - SQL Injection on page viewmusicdetails.php Exploit Author: Muhammad Navaid Zafar Ansari Date: 21 February 2023 CVE Assigned: CVE-2023-0961 mitre.org nvd.nist.org Author Name: Muhammad Navaid Zafar Ansari Vendor Homepage: https://www.sourcecodester.com...

9.8CVSS6.8AI score0.01883EPSS
SaveExploits5
OpenVAS
OpenVAS
•added 2023/04/02 12:00 a.m.•46 views

Fedora: Security Advisory for rubygem-rails (FEDORA-2023-d6157bb1e2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS7.7AI score0.00948EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2023/03/07 12:00 a.m.•48 views

Omron CX-One CXP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CXP...

7.8CVSS4.2AI score0.00715EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/03/07 12:00 a.m.•49 views

Omron CX-One CXP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CXP...

7.8CVSS5.2AI score0.00715EPSS
SaveExploits0References1
NVD
NVD
•added 2023/03/01 7:15 p.m.•39 views

CVE-2023-25931

Medtronic identified that the Pelvic Health clinician apps, which are installed on the Smart Programmer mobile device, have a password vulnerability that requires a security update to fix. Not updating could potentially result in unauthorized control of the clinician therapy application, which ha...

6.8CVSS6.3AI score0.00266EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/03/01 7:15 p.m.•17 views

CVE-2023-25931

Medtronic identified that the Pelvic Health clinician apps, which are installed on the Smart Programmer mobile device, have a password vulnerability that requires a security update to fix. Not updating could potentially result in unauthorized control of the clinician therapy application, which ha...

6.8CVSS5.8AI score0.00266EPSS
SaveExploits0References1
Prion
Prion
•added 2023/03/01 7:15 p.m.•29 views

Default credentials

Medtronic identified that the Pelvic Health clinician apps, which are installed on the Smart Programmer mobile device, have a password vulnerability that requires a security update to fix. Not updating could potentially result in unauthorized control of the clinician therapy application, which ha...

4.6CVSS6.5AI score0.00266EPSS
SaveExploits0References1Affected Software2
CVE
CVE
•added 2023/03/01 6:56 p.m.•87 views

CVE-2023-25931

Medtronic Pelvic Health clinician apps (Micro Clinician A51200 and InterStim X Clinician A51300) installed on the Smart Programmer mobile device are affected by a password-related vulnerability (CVE-2023-25931) that could allow unauthorized control of the clinician therapy application. The issue ...

6.8CVSS6.3AI score0.00266EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2023/03/01 6:56 p.m.•53 views

CVE-2023-25931 Medtronic Micro Clinician & InterStim X Clinician App Password Reset Issue

Medtronic identified that the Pelvic Health clinician apps, which are installed on the Smart Programmer mobile device, have a password vulnerability that requires a security update to fix. Not updating could potentially result in unauthorized control of the clinician therapy application, which ha...

6.4CVSS6.7AI score0.00266EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/03/01 12:00 a.m.•20 views

PT-2023-20366 · Medtronic · Medtronic Pelvic Health Clinician Apps

Name of the Vulnerable Software and Affected Versions: Medtronic Pelvic Health clinician apps affected versions not specified Description: The issue is related to a password vulnerability in the Medtronic Pelvic Health clinician apps installed on the Smart Programmer mobile device. This...

6.8CVSS6.2AI score0.00266EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/01 12:00 a.m.•10 views

CVE-2023-25931: Unverified Password Change

Medtronic identified that the Pelvic Health clinician apps, which are installed on the Smart Programmer mobile device, have a password vulnerability that requires a security update to fix. Not updating could potentially result in unauthorized control of the clinician therapy application, which ha...

6.8CVSS5.8AI score0.00266EPSS
SaveExploits0References3
ICS
ICS
•added 2022/12/22 12:00 a.m.•56 views

Omron CX-Programmer

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Omron Equipment: CX-Programmer Vulnerability: Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of this vulnerability could allow arbitrary code execution or loss of sensitive information if a user opens a...

7.8CVSS8AI score0.00252EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2022/12/14 12:00 a.m.•18 views

Omron CX-Programmer Buffer Overflow

The vulnerability of Omron CX-Programmer software for programming logic controllers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information or execute arbitrary code using a...

7.8CVSS8AI score0.00284EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/12/14 12:00 a.m.•17 views

Omron CX-Programmer Buffer Overflow

The vulnerability of Omron CX-Programmer software for programming logic controllers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information or execute arbitrary code using a...

7.8CVSS8AI score0.00252EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder