The vulnerability of the RTU module’s microprogramming software, Modicon BMXNOR0200H, arises from the presence of embedded authentication data. This allows a hacker to gain access to the FTP service.

The vulnerability of the RTU module’s microprogramming software, Modicon BMXNOR0200H, is related to the presence of embedded authentication data. Exploiting this vulnerability could allow a malicious actor to gain access to the FTP service remotely...

CVE-2019-0304

FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, allows an attacker to inje...

Gemalto Admin Control Center Access Control Error Vulnerability

Gemalto Admin Control Center is a set of Web-based Sentinel user tools from Gemalto. The product is mainly used to query and manage hardware and software Sentinel license keys. A security vulnerability exists in Gemalto Admin Control Center versions prior to 7.92, which stems from the program's u...

ALPINE-CVE-2019-0197

A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server...

UBUNTU-CVE-2019-0197

A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server...

PT-2019-2563 · Abb · Panel Builder 600 +15

Name of the Vulnerable Software and Affected Versions: ABB CP620 versions 1SAP520100R0001 through 1SAP520100R4001 ABB CP620-WEB version 1SAP520200R0001 ABB CP630 version 1SAP530100R0001 ABB CP630-WEB version 1SAP530200R0001 ABB CP635 versions 1SAP535100R0001 through 1SAP535100R5001 ABB CP635-B...

CVE-2019-10977

In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior, an attacker could send crafted TCP packets against the FTP service, forcing the target devices to enter an error mode and cause a denial-of-service condition...

PT-2019-2337 · Bmx · Bmxnor0200H

Name of the Vulnerable Software and Affected Versions: BMX-NOR-0200H versions prior to V1.7 IR 19 Description: A use of hardcoded credentials issue exists, which could cause a confidentiality issue when using the FTP protocol. This allows a remote attacker to gain access to the FTP service...

CVE-2018-13992

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission HTTP of user credentials by default...

The vulnerability of the sub-component “Job Opening” in the PeopleSoft Enterprise HCM Talent Acquisition Manager component of the Oracle PeopleSoft products allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Job Opening sub-component of the PeopleSoft Enterprise HCM Talent Acquisition Manager component of the Oracle PeopleSoft products is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify...

The vulnerability of the BI Publisher Security sub-component of the BI Publisher reporting tool (formerly XML Publisher) allows a malicious individual to gain access to modify, add, or delete data.

The vulnerability of the BI Publisher Security sub-component of the BI Publisher reporting tool formerly XML Publisher is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to gain access to modify, add, or delete data using the HTTP protocol...

The vulnerability of the sub-component Application Server of the PeopleSoft Enterprise PT PeopleTools component of the Oracle PeopleSoft Products allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Application Server sub-component of the PeopleSoft Enterprise PT PeopleTools business application suite from Oracle PeopleSoft Products is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to...

The vulnerability of the User Interface sub-component of the Oracle Trade Management component in the Oracle E-Business Suite, which allows a malicious actor to gain unauthorized access to protected data.

The vulnerability of the User Interface component of the Oracle Trade Management component in the Oracle E-Business Suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using th...

The vulnerability of the BI Publisher Security sub-component of the BI Publisher reporting tool (formerly XML Publisher) allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the BI Publisher Security sub-component of the BI Publisher reporting tool formerly XML Publisher is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information using...

CVE-2019-2725

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-9807

When arbitrary text is sent over an FTP connection and a page reload is initiated, it is possible to create a modal alert message with this text as the content. This could potentially be used for social engineering attacks. This vulnerability affects Firefox 66...

CVE-2019-9806

A vulnerability exists during authorization prompting for FTP transaction where successive modal prompts are displayed and cannot be immediately dismissed. This allows for a denial of service DOS attack. This vulnerability affects Firefox 66...

The vulnerability of the PIA Core Technology sub-component of the PeopleSoft Enterprise PeopleTools component of the Oracle PeopleSoft Products allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the PIA Core Technology sub-component of the PeopleSoft Enterprise PeopleTools business application suite from Oracle PeopleSoft Products is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to modify, add, o...

The vulnerability of the Renewals sub-component of the Oracle Service Contracts component in the Oracle E-Business Suite system allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Renewals sub-component of the Oracle Service Contracts component in the Oracle E-Business Suite system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data...

The vulnerability of the Diagnostics sub-component of the Oracle Application Object Library in the Oracle E-Business Suite system allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Diagnostics sub-component of the Oracle Application Object Library in the Oracle E-Business Suite automation system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or...