941 matches found
PT-2024-2107 · Jetbrains · Jetbrains Youtrack
Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.1.25893 Description: The issue is related to insufficient authorization mechanisms in JetBrains YouTrack, allowing a remote attacker to bypass existing security restrictions. This could enable a user...
The vulnerability of the Vinchin Backup & Recovery software regarding backup and restoration, related to the lack of measures for cleaning input data, allows a perpetrator to execute arbitrary commands.
The vulnerability of the Vinchin Backup & Recovery software regarding backup and restoration involves a lack of measures for cleaning input data. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary commands...
CVE-2024-1039
Gessler GmbH WEB-MASTER has a restoration account that uses weak hard coded credentials and if exploited could allow an attacker control over the web management of the device...
CVE-2024-1039
Gessler GmbH WEB-MASTER has a restoration account that uses weak hard coded credentials and if exploited could allow an attacker control over the web management of the device...
CVE-2024-1040
Gessler GmbH WEB-MASTER user account is stored using a weak hashing algorithm. The attacker can restore the passwords by breaking the hashes stored on the device...
Hardcoded credentials
Gessler GmbH WEB-MASTER has a restoration account that uses weak hard coded credentials and if exploited could allow an attacker control over the web management of the device...
Design/Logic Flaw
Gessler GmbH WEB-MASTER user account is stored using a weak hashing algorithm. The attacker can restore the passwords by breaking the hashes stored on the device...
CVE-2024-1040
CVE-2024-1040 affects Gessler GmbH WEB-MASTER, specifically version 7.9, where user passwords are stored using a weak hashing algorithm. The weakness allows an attacker to restore passwords by breaking the stored hashes (confirmed by multiple sources in connected documents). This vulnerability ha...
CVE-2024-1039
CVE-2024-1039 – Gessler GmbH WEB-MASTER is a vulnerability in the WEB-MASTER emergency lighting management system (affected version: 7.9) caused by a restoration account that uses weak, hard-coded credentials. An attacker could remotely take control of the device’s web management (CVSS v3.1 base ...
CVE-2024-1039 Use of Hard-coded Credentials in Gessler GmbH WEB-MASTER
Gessler GmbH WEB-MASTER has a restoration account that uses weak hard coded credentials and if exploited could allow an attacker control over the web management of the device...
PT-2024-16239 · Gessler Gmbh · Web-Master
Name of the Vulnerable Software and Affected Versions: Gessler GmbH WEB-MASTER affected versions not specified Description: The issue concerns a restoration account in Gessler GmbH WEB-MASTER that utilizes weak, hard-coded credentials. If exploited, this could grant an attacker control over the...
The software for configuring, monitoring, and controlling industrial equipment, Easergy Studio, has a vulnerability related to the restoration of unreliable data in memory. This vulnerability allows an intruder to gain increased privileges.
The vulnerability of the Easergy Studio software for configuring, monitoring, and controlling industrial equipment is related to the restoration of unreliable data in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the RMI software interface for controlling power sources in Voltronic Power View allows a perpetrator to execute arbitrary code.
The vulnerability of the RMI software interface for controlling power sources in Voltronic Power ViewPower is related to the restoration of unreliable data in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code using a specially created...
The vulnerability of the RMI interface in software for controlling power sources in Voltronic Power ViewPower Pro allows a intruder to execute arbitrary code.
The vulnerability of the RMI software interface for controlling power sources in Voltronic Power ViewPower Pro relates to the restoration of unreliable data in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code using a specially created...
The vulnerability of the jackson-databind library, related to the restoration of unreliable data in memory, allows an attacker to execute arbitrary code.
The vulnerability of the jackson-databind library is related to the restoration of unreliable data in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
SUSE CVE-2023-6879
Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1looprestorationdealloc...
CVE-2023-6879
Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1looprestorationdealloc...
DEBIAN-CVE-2023-6879
Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1looprestorationdealloc...
