Lucene search
+L

62 matches found

Cvelist
Cvelist
•added 2024/07/22 7:27 p.m.•56 views

CVE-2024-6122 Incorrect Default Directory Permissions for NI SystemLink Redis Service

An incorrect permission in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may result in information disclosure via local access. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which...

5.5CVSS0.00239EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/07/22 12:00 a.m.•15 views

PT-2024-37398 · National Instruments · Ni Flexlogger +1

Name of the Vulnerable Software and Affected Versions: NI SystemLink Server versions prior to 2024 Q1 NI FlexLogger versions prior to 2023 Q2 Description: An issue with incorrect permissions in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may lead to...

5.5CVSS6.8AI score0.00239EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/22 12:00 a.m.•2 views

CVE-2024-6122: Incorrect Default Permissions

An incorrect permission in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may result in information disclosure via local access. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which...

5.5CVSS5.9AI score0.00239EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/07/22 12:00 a.m.•16 views

NI SystemLink Server 安全漏洞

NI SystemLink Server is an application soft from National Instruments NI Inc. that helps engineers implement cost-effective and locally managed test and measurement standardization, automation, and digitization tools. A security vulnerability exists in NI SystemLink Server version 2024 Q1 and...

7.8CVSS6.7AI score0.00273EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/07/22 12:00 a.m.•21 views

PT-2024-37397 · National Instruments · Ni Flexlogger +1

Name of the Vulnerable Software and Affected Versions: NI SystemLink Server versions 2024 Q1 and prior NI FlexLogger versions 2023 Q2 and prior Description: The issue is related to an out-of-date version of Redis shipped with the affected software, which is susceptible to multiple vulnerabilities...

7.8CVSS7.2AI score0.00273EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/22 12:00 a.m.•0 views

CVE-2024-6121: Dependency on Vulnerable Third-Party Component

An out-of-date version of Redis shipped with NI SystemLink Server is susceptible to multiple vulnerabilities, including CVE-2022-24834. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared service...

7.8CVSS7.3AI score0.00273EPSS
SaveExploits0References1
OSV
OSV
•added 2024/02/20 3:15 p.m.•18 views

CVE-2024-1155

Incorrect permissions in the installation directories for shared SystemLink Elixir based services may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score0.00274EPSS
SaveExploits1References1
NVD
NVD
•added 2024/02/20 3:15 p.m.•52 views

CVE-2024-1155

Incorrect permissions in the installation directories for shared SystemLink Elixir based services may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.8AI score0.00274EPSS
SaveExploits1References1
Prion
Prion
•added 2024/02/20 3:15 p.m.•34 views

Privilege escalation

Incorrect permissions in the installation directories for shared SystemLink Elixir based services may allow an authenticated user to potentially enable escalation of privilege via local access...

4.3CVSS7.4AI score0.00274EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/02/20 2:34 p.m.•33 views

CVE-2024-1155 Incorrect permissions for shared NI SystemLink Elixir based services

Incorrect permissions in the installation directories for shared SystemLink Elixir based services may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7AI score0.00274EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/02/20 2:34 p.m.•69 views

CVE-2024-1155 Incorrect permissions for shared NI SystemLink Elixir based services

Incorrect permissions in the installation directories for shared SystemLink Elixir based services may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS8.1AI score0.00274EPSS
SaveExploits1References1
CVE
CVE
•added 2024/02/20 2:34 p.m.•105 views

CVE-2024-1155

CVE-2024-1155 describes incorrect permissions in the installation directories for shared NI SystemLink Elixir based services, leading to potential privilege escalation via local access by an authenticated user. The root cause is improper permissions on installation paths that allow unauthorized l...

7.8CVSS7.8AI score0.00274EPSS
SaveExploits1References1Affected Software8
CNNVD
CNNVD
•added 2024/02/20 12:00 a.m.•11 views

NI SystemLink Server Security Vulnerability

NI SystemLink Server is an application from NI that helps engineers implement cost-effective and locally managed test and measurement standardization, automation and digitization tools. A security vulnerability exists in NI SystemLink Server 2023 Q3 and prior versions, which stems from a failure ...

7.8CVSS6.2AI score0.00352EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/02/20 12:00 a.m.•16 views

SystemLink Server Security Vulnerability

NI SystemLink Server is an application from NI that helps engineers implement cost-effective and locally managed test and measurement standardization, automation, and digitization tools. A security vulnerability exists in SystemLink Server 2023 Q3 and prior versions, which stems from a failure to...

7.8CVSS6.8AI score0.00274EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/20 12:00 a.m.•0 views

CVE-2024-1155: Incorrect Default Permissions

Incorrect permissions in the installation directories for shared SystemLink Elixir based services may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.9AI score0.00274EPSS
SaveExploits1References3
OSV
OSV
•added 2022/04/21 5:15 a.m.•15 views

CVE-2022-27237

There is a cross-site scripting XSS vulnerability in an NI Web Server component installed with several NI products. Depending on the products in use, remediation guidance includes: install SystemLink version 2021 R3 or later, install FlexLogger 2022 Q2 or later, install LabVIEW 2021 SP1, install ...

6.1CVSS5.7AI score0.00562EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/04/21 5:15 a.m.•6 views

CVE-2022-27237

There is a cross-site scripting XSS vulnerability in an NI Web Server component installed with several NI products. Depending on the products in use, remediation guidance includes: install SystemLink version 2021 R3 or later, install FlexLogger 2022 Q2 or later, install LabVIEW 2021 SP1, install ...

6.1CVSS5.8AI score0.00562EPSS
SaveExploits0References2
NVD
NVD
•added 2022/04/21 5:15 a.m.•27 views

CVE-2022-27237

There is a cross-site scripting XSS vulnerability in an NI Web Server component installed with several NI products. Depending on the products in use, remediation guidance includes: install SystemLink version 2021 R3 or later, install FlexLogger 2022 Q2 or later, install LabVIEW 2021 SP1, install ...

6.1CVSS0.00562EPSS
SaveExploits0References1
Prion
Prion
•added 2022/04/21 5:15 a.m.•22 views

Cross site scripting

There is a cross-site scripting XSS vulnerability in an NI Web Server component installed with several NI products. Depending on the products in use, remediation guidance includes: install SystemLink version 2021 R3 or later, install FlexLogger 2022 Q2 or later, install LabVIEW 2021 SP1, install ...

4.3CVSS6AI score0.00562EPSS
SaveExploits0References1Affected Software5
CVE
CVE
•added 2022/04/21 4:32 a.m.•91 views

CVE-2022-27237

CVE-2022-27237 describes a cross-site scripting (XSS) vulnerability in an NI Web Server component used with several NI products. The advisory indicates the affected surface is the NI Web Server component across multiple NI product deployments, with remediation guidance requiring upgrading to one ...

6.1CVSS6AI score0.00562EPSS
SaveExploits0References1Affected Software5
Rows per page
Query Builder