Lucene search
+L

6082 matches found

OSV
OSV
added 2022/05/18 3:27 p.m.9 views

USN-5430-1 gnome-control-center vulnerability

It was discovered that GNOME Settings incorrectly handled the remote desktop sharing configuration. When turning off desktop sharing, it may be turned on again after rebooting, contrary to expectations...

9.8CVSS7.3AI score0.00738EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/05/17 12:00 a.m.31 views

Hashicorp Vault 安全漏洞

Hashicorp HashiCorp Vault is a private key access management tool from Hashicorp USA. A security vulnerability exists in HashiCorp Vault and Vault Enterprise versions 1.10.0 through 1.10.2, which stems from a misconfiguration and a forced MFA login after a server reboot...

5.3CVSS5.6AI score0.01159EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/05/11 12:00 a.m.12 views

The vulnerability of the HCI component, which operates on the Modbus TCP protocol, and is found in Hitachi Energy RTU500 CMU series programmable logic controllers, allows a attacker to trigger a system reboot.

The vulnerability of the HCI component, which operates on the Modbus TCP protocol and is part of the Hitachi Energy RTU500 CMU series programmable logic controllers, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to trigger a device reboot...

7.8CVSS7.1AI score0.00974EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2022/05/10 12:00 a.m.8 views

Siemens SIMATIC 资源管理错误漏洞

The Siemens SIMATIC CP 44x-1 RNA is a controller for communication processors connected to Ethernet from Siemens, Germany. A denial of service vulnerability exists in the Siemens SIMATIC CP 44x-1 RNA, which can be exploited by an attacker to create a denial of service condition by executing an AR...

6.5CVSS6.5AI score0.00354EPSS
SaveExploits0References5
Prion
Prion
added 2022/05/05 6:15 p.m.18 views

Denial of service

A denial of service vulnerability exists in the libxmav.so DemuxCmdInBuffer functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted set of network packets can lead to a device reboot. An attacker can send packets to trigger this vulnerability...

6.1CVSS6.3AI score0.0071EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/05/05 5:35 p.m.10 views

CVE-2022-26073

A denial of service vulnerability exists in the libxmav.so DemuxCmdInBuffer functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted set of network packets can lead to a device reboot. An attacker can send packets to trigger this vulnerability...

7.4CVSS6.5AI score0.0071EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/05/05 12:00 a.m.24 views

PT-2022-17653 · Anker · Anker Eufy Homebase 2

Name of the Vulnerable Software and Affected Versions: Anker Eufy Homebase 2 version 2.1.8.5h Description: A denial of service issue exists in the libxm av.so DemuxCmdInBuffer functionality. This can be triggered by a specially-crafted set of network packets, leading to a device reboot. An attack...

7.4CVSS6.6AI score0.0071EPSS
SaveExploits1References4
OSV
OSV
added 2022/05/02 7:15 p.m.10 views

CVE-2022-28613

A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is en-abled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500, causing the receiving RTU500 CMU to reboot. The...

7.5CVSS5.8AI score0.00974EPSS
SaveExploits0References2
NVD
NVD
added 2022/05/02 7:15 p.m.38 views

CVE-2022-28613

A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is en-abled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500, causing the receiving RTU500 CMU to reboot. The...

7.8CVSS0.00974EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/05/02 7:01 p.m.47 views

CVE-2022-28613 Specially Crafted Modbus TCP Packet Vulnerability in RTU500 series

A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is en-abled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500, causing the receiving RTU500 CMU to reboot. The...

7.5CVSS7.5AI score0.00974EPSS
SaveExploits0References1
CVE
CVE
added 2022/05/02 7:01 p.m.100 views

CVE-2022-28613

Hitachi Energy RTU500 CMU Firmware versions 12.0.–13.2. are affected by CVE-2022-28613 due to a validation error in the MBAP header length handling in the HCI Modbus TCP function. Exploitation could cause a reboot of the RTU500 CMU when HCI Modbus TCP is enabled, with CVSS v3.1 base score 7.5 (NE...

7.8CVSS7.3AI score0.00974EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
added 2022/05/02 12:00 a.m.27 views

Hitachi Energy RTU500 输入验证错误漏洞

Hitachi Energy RTU500 is a series of industrial control components from Hitachi, Ltd Hitachi, Japan. The Hitachi Energy RTU500 suffers from an input validation error vulnerability that stems from a length information validation error carried in MBAP. An attacker could exploit the vulnerability by...

7.8CVSS7.3AI score0.00974EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/05/02 12:00 a.m.10 views

PT-2022-2442 · Hitachi Energy · Rtu500 Series Cmu Firmware

Name of the Vulnerable Software and Affected Versions: Hitachi Energy RTU500 series CMU Firmware versions 12.0. through 13.2. Description: A vulnerability exists in the HCI Modbus TCP function, which can be exploited by sending a specially crafted message to the RTU500, causing it to reboot. This...

7.8CVSS6.5AI score0.00974EPSS
SaveExploits0References10
OSV
OSV
added 2022/04/27 4:15 p.m.10 views

CVE-2021-34588

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot...

8.6CVSS5.8AI score0.0089EPSS
SaveExploits0References1
NVD
NVD
added 2022/04/27 4:15 p.m.31 views

CVE-2021-34588

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot...

8.6CVSS0.0089EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/04/27 3:15 p.m.33 views

CVE-2021-34588 Bender Charge Controller: Unprotected data export

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot...

8.6CVSS8.6AI score0.0089EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/27 10:00 a.m.6 views

CVE-2021-34588

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot...

8.6CVSS7.2AI score0.0089EPSS
SaveExploits0References2Affected Software4
CNNVD
CNNVD
added 2022/04/27 12:00 a.m.8 views

Bender ebee 充电控制器 安全漏洞

The ebee is a charge controller from Bender. A security vulnerability exists in the Bender ebee Charge Controller that stems from an unprotected data export. The backup export is protected by a random key. The key is set at user login. It is empty after a reboot. An attacker can exploit this...

8.6CVSS8AI score0.0089EPSS
SaveExploits0References2
OSV
OSV
added 2022/04/25 4:16 p.m.14 views

CVE-2022-27374

Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub42E328 at /goform/SysToolReboot...

6.5CVSS5.8AI score0.00448EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/04/25 4:16 p.m.5 views

CVE-2022-27374

Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub42E328 at /goform/SysToolReboot...

7.1CVSS5.9AI score0.00448EPSS
SaveExploits1References2
Rows per page
Query Builder