4899 matches found
CVE-2023-37504
HCL Compass is vulnerable to failure to invalidate sessions. The application does not invalidate authenticated sessions when the log out functionality is called. If the session identifier can be discovered, it could be replayed to the application and used to impersonate the user...
CVE-2023-37504
HCL Compass is vulnerable to failure to invalidate sessions. The application does not invalidate authenticated sessions when the log out functionality is called. If the session identifier can be discovered, it could be replayed to the application and used to impersonate the user...
CVE-2023-36857
Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a replay vulnerability which could allow an attacker to replay older captured packets of traffic to the device to gain access...
CVE-2023-36857
Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a replay vulnerability which could allow an attacker to replay older captured packets of traffic to the device to gain access...
Code injection
Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a replay vulnerability which could allow an attacker to replay older captured packets of traffic to the device to gain access...
CVE-2023-37504 An insufficient session expiration vulnerability affects HCL Compass
HCL Compass is vulnerable to failure to invalidate sessions. The application does not invalidate authenticated sessions when the log out functionality is called. If the session identifier can be discovered, it could be replayed to the application and used to impersonate the user...
HCL Technologies Compass 代码问题漏洞
HCL Technologies Compass is a low-code change management software from HCL Technologies, USA. Manages the full range of testing activities and integration with developer tools. HCL Technologies Compass suffers from an Access Control Error vulnerability that stems from the application not disablin...
CVE-2023-36857 Baker Hughes Bently Nevada 3500 System Authentication Bypass by Capture-replay
Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a replay vulnerability which could allow an attacker to replay older captured packets of traffic to the device to gain access...
CVE-2023-36857
CVE-2023-36857 affects Baker Hughes Bently Nevada 3500 System TDI Firmware version 5.05. The vulnerability is an authentication bypass by capture-replay: the device can accept out-of-sequence messages from older communications, allowing an attacker to replay captured traffic to gain access. Impac...
CVE-2023-36857 Baker Hughes Bently Nevada 3500 System Authentication Bypass by Capture-replay
Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a replay vulnerability which could allow an attacker to replay older captured packets of traffic to the device to gain access...
SonicWALL SonicOS Buffer Error Vulnerability
SonicWALL SonicOS is a suite of operating systems from SonicWALL, Inc. designed for SonicWall firewall appliances. A security vulnerability exists in SonicWALL SonicOS that stems from a stack-based buffer overflow vulnerability in the getPacketReplayData.json URL endpoint that causes the firewall...
CVE-2023-42138
Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file...
CVE-2023-42138
Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file...
CVE-2023-42138
Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file...
CVE-2023-42138
Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file...
CVE-2023-42138
KV STUDIO and KV REPLAY VIEWER are impacted by CVE-2023-42138 (out-of-bounds read) in versions 11.62 and earlier and 2.62 and earlier. Exploitation requires a user to open a specially crafted file, which may disclose information or allow arbitrary code execution. Concrete affected products/compon...
Out-of-bounds read vulnerability in Keyence KV STUDIO and KV REPLAY VIEWER
Overview KV STUDIO and KV REPLAY VIEWER provided by KEYENCE CORPORATION contain an out-of-bounds read vulnerability CWE-125, CVE-2023-42138. Michael Heinzl reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact If this vulnerability is exploited, information ma...
PT-2023-28281 · Unknown +1 · Kv Replay Viewer +2
Name of the Vulnerable Software and Affected Versions: KV STUDIO versions 11.62 and earlier KV REPLAY VIEWER versions 2.62 and earlier Description: An out-of-bounds read issue exists, potentially allowing information disclosure or arbitrary code execution if a user of KV STUDIO PLAYER opens a...
Keyence KV STUDIO Buffer Error Vulnerability
Keyence KV STUDIO is a PLC programming software from Keyence Corporation. A security vulnerability exists in Keyence KV STUDIO Ver. 11.62 and earlier, KV REPLAY VIEWER Ver. 2.62 and earlier, which originates from a user opening a specially crafted file that may disclose information or execute...
CVE-2023-42820
JumpServer is an open source bastion host. This vulnerability is due to exposing the random number seed to the API, potentially allowing the randomly generated verification codes to be replayed, which could lead to password resets. If MFA is enabled users are not affect. Users not using local...