23002 matches found
CVE-2023-36380
A vulnerability has been identified in CP-8031 MASTER MODULE All versions CPCI85 V05.11 only with activated debug support, CP-8050 MASTER MODULE All versions CPCI85 V05.11 only with activated debug support. The affected devices contain a hard-coded ID in the SSH authorizedkeys configuration file...
CVE-2023-36380
The CVE-2023-36380 issue affects Siemens SICAM A8000 CP-8031 and CP-8050 MASTER MODULEs prior to CPCI85 V05.11 when debug support is activated. A hard-coded credential in the SSH authorized_keys configuration enables login if the attacker knows the corresponding private key. The vulnerability is ...
CVE-2023-36380
A vulnerability has been identified in CP-8031 MASTER MODULE All versions CPCI85 V05.11 only with activated debug support, CP-8050 MASTER MODULE All versions CPCI85 V05.11 only with activated debug support. The affected devices contain a hard-coded ID in the SSH authorizedkeys configuration file...
support-cn.wd.com Cross Site Scripting vulnerability OBB-3738969
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
.NET 7.0 Update - October 24, 2023 (KB5032875)
None None...
October 10, 2023—KB5031419 (Monthly Rollup)
None None...
October 10, 2023—KB5031442 (Monthly Rollup)
None None...
.NET 6.0 Update - October 24, 2023 (KB5032874)
None None...
October 10, 2023—KB5031408 (Monthly Rollup)
None None...
October 10, 2023—KB5031361 (OS Build 17763.4974) - EXPIRED
None None...
.NET 6.0 Update - October 10, 2023 (KB5031900)
None None...
.NET 7.0 Update - October 10, 2023 (KB5031901)
None None...
KB5031466: Servicing stack update for Windows 10: October 10, 2023
None None...
Siemens CPCI85 Firmware of SICAM A8000 Devices
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
Microsoft SQL Server Security Vulnerability
Microsoft SQL Server is a large commercial database system from Microsoft that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker has exploited the vulnerability to cause a denial of service on the system. The following products and versions are...
KB5031469: Servicing stack update for Windows Server 2012: October 10, 2023
KB5031469: Servicing stack update for Windows Server 2012: October 10, 2023 REMINDER Windows Server 2012 reached end of support EOS on October 10, 2023. Extended Security Updates ESUs are available for purchase and will continue for three years, renewable on an annual basis, until the final date ...
CITS Support svg, webp Media and TTF,OTF File Upload < 3.0 - Author+ Stored XSS via SVG
Description The plugin does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads. PoC As an author, upload an SVG with the payload: View the SVG and see the XSS...
CITS Support svg, webp Media and TTF,OTF File Upload < 3.0 - Author+ Stored XSS via SVG
Description The plugin does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads. As an author, upload an SVG with the payload: alert"xss"; View the SVG and see the XSS...
Tinycontrol LAN Controller v3 (LK3) 1.58a - Remote Admin Password Change
!/bin/bash : " Exploit Title: Tinycontrol LAN Controller v3 LK3 1.58a - Remote Admin Password Change Exploit Author: LiquidWorm Vendor: Tinycontrol Product web page: https://www.tinycontrol.pl Affected version: this with a calendar when - then. The device provides a user interface in the form of ...
D-Link DIR-820L Devices Multiple Vulnerabilities (2020 - 2024)
D-Link DIR-820L devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...