Meet unprecedented security challenges by leveraging MXDR services

We know customers of every size face ever-increasing security risks. In just the last 12 months the speed of attackers leveraging breaches is also increasing, as it only takes 72 minutes on average for an attacker to access private data from the time a user falls victim to a phishing email.1 Data...

Mitsubishi Electric GC-ENET-COM 竞争条件问题漏洞

The Mitsubishi Electric GC-ENET-COM is a graphical operations controller from Mitsubishi Electric Japan. A security vulnerability exists in the Mitsubishi Electric GC-ENET-COM that stems from the presence of a competitive condition vulnerability that could allow a remote, unauthenticated attacker...

PT-2023-21618 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 Description: A denial-of-service issue was addressed with improved input validation. A remote user may be able to cause a denial-of-service. Recommendations: For versions prior to 13.3, update to macOS Ventura 13....

CVE-2023-22920

A security misconfiguration vulnerability exists in the Zyxel LTE3316-M604 firmware version V2.00ABMP.6C0 due to a factory default misconfiguration intended for testing purposes. A remote attacker could leverage this vulnerability to access an affected device using Telnet...

SUSE CVE-2007-3744

Heap-based buffer overflow in the UPnP IGD Internet Gateway Device Standardized Device Control Protocol implementation in mDNSResponder on Apple Mac OS X 10.4.10 before 20070731 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet...

SUSE CVE-2022-0104

Heap buffer overflow in ANGLE in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-36023 Remote denial of service in Hyperledger Fabric Gateway

Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. If a gateway client application sends a malformed request to a gateway peer it may crash the peer node. Version 2.4.6 checks for the malformed gateway request and returns...

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules Missing Authentication For Critical Function (CVE-2018-17924)

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller...

Critical Flaws in Philips TASY EMR Could Expose Patient Data

The U.S. Cybersecurity and Infrastructure Security Agency CISA is warning of critical vulnerabilities affecting Philips Tasy electronic medical records EMR system that could be exploited by remote threat actors to extract sensitive personal data from patient databases. "Successful exploitation of...

PT-2023-1263 · Sssd +6 · Sssd +6

Name of the Vulnerable Software and Affected Versions: sssd versions affected versions not specified Description: The issue is related to the libsss certmap package of the sssd service, which is responsible for managing access to remote directories and authentication mechanisms. It is associated...

The vulnerability of the DBI Setup component of the Oracle E-Business Intelligence software, a business automation system within the Oracle E-Business Suite. This component allows attackers to access, modify, add, or delete data, or gain unauthorized access to protected information.

The vulnerability of the DBI Setup component of the Oracle E-Business Intelligence software, a business automation system within the Oracle E-Business Suite, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or...

The vulnerability of the ABB eSOMS software for managing production processes is related to the improper functioning of the authentication mechanism, allowing an intruder to gain unauthorized access to the system.

The vulnerability of the ABB eSOMS production process management software is related to the improper operation of the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the system. This occurs when LDAP is configured f...

Rockwellautomation Micrologix Missing Authentication for Critical Function

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller...

Rockwell Automation RSLinx Classic <= 4.00.01 Multiple Vulnerabilities (ICSA-18-263-02)

Binary data 720266.prm...

Rockwell Automation/Allen-Bradley Multiple Devices Authentication Bypass (ICSA-18-310-02)

Binary data 720141.prm...

Design/Logic Flaw

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller...

CVE-2018-17924

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller...

CVE-2018-17924

CVE-2018-17924 affects Rockwell Automation MicroLogix 1400 Controllers (Series A/B/C) and 1756 ControlLogix EtherNet/IP Communications Modules. The vulnerability allows an unauthenticated remote actor to initiate a CIP connection and push a new IP configuration, potentially disrupting system comm...

CVE-2018-14829

Rockwell Automation RSLinx Classic is affected in versions 4.00.01 and earlier. The CVE-2018-14829 vulnerability arises from handling malformed CIP packets sent to TCP port 44818, which can cause the application to stop responding and crash; there is also potential for a buffer overflow that coul...

CVE-2018-14821

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote, unauthenticated threat actor to intentionally send a malformed CIP packet to Port 44818, causing the RSLinx Classic application to terminate. The user will need to manually restart the software t...