2948 matches found
SOUND4 IMPACT/FIRST/PULSE/Eco 2.x upload.cgi Code Execution
!/usr/bin/env python SOUND4 IMPACT/FIRST/PULSE/Eco =2.x upload.cgi Unauthenticated Remote Code Execution Vendor: SOUND4 Ltd. Product web page: https://www.sound4.com | https://www.sound4.biz Affected version: FM/HD Radio Processing: Impact/Pulse/First Version 2: 1.1/2.15 Impact/Pulse/First Versio...
Siemens SCALANCE X-200RNA Switch Devices has an unspecified vulnerability
The SCALANCE X-204RNA Industrial Ethernet Access Point enables non-PRP endpoint devices to connect to a separate parallel network as needed.A security vulnerability exists in Siemens SCALANCE X-200RNA Switch Devices due to the web server of the affected device calculating session IDs and random...
CVE-2022-43723
A vulnerability has been identified in SICAM PAS/PQS All versions = 7.0 V8.06. Affected software does not properly validate the input for a certain parameter in the s7ontcp.dll. This could allow an unauthenticated remote attacker to send messages and create a denial of service condition as the...
CVE-2022-43724
A vulnerability has been identified in SICAM PAS/PQS All versions V7.0. Affected software transmits the database credentials for the inbuilt SQL server in cleartext. In combination with the by default enabled xpcmdshell feature unauthenticated remote attackers could execute custom OS commands. At...
Citrix ADC and Citrix Gateway Security Bulletin for CVE-2022-27518
A vulnerability has been discovered in Citrix Gateway and Citrix ADC, listed below, that, if exploited, could allow an unauthenticated remote attacker to perform arbitrary code execution on the appliance. CVE-ID| Description| CWE| Affected Products| Pre-conditions ---|---|---|---|---...
EUVD-2022-32019
Unauthenticated remote arbitrary code execution...
CVE-2022-43724
A vulnerability has been identified in SICAM PAS/PQS All versions V7.0. Affected software transmits the database credentials for the inbuilt SQL server in cleartext. In combination with the by default enabled xpcmdshell feature unauthenticated remote attackers could execute custom OS commands. At...
Siemens SICAM PAS/PQS 安全漏洞
Siemens SICAM PAS/PQS is a software from Siemens with an operating system for energy automation and power quality. A security vulnerability exists in Siemens SICAM PAS/PQS versions prior to V7.0 due to the affected software transmitting database credentials for the built-in SQL server in clear...
CVE-2022-43724
CVE-2022-43724 affects Siemens SICAM PAS/PQS prior to V7.0. The vulnerability arises because the software transmits database credentials for the built-in SQL server in cleartext, and with default-enabled xp_cmdshell, an unauthenticated remote attacker could execute arbitrary OS commands. The issu...
CVE-2022-3485 Weak Password Recovery in ifm moneo appliance
In IFM Moneo Appliance with version up to 1.9.3 an unauthenticated remote attacker can reset the administrator password by only supplying the serial number and thus gain full control of the device...
Vulnerability fixed in FortiOS SSL-VPN
Fortinet has fixed a vulnerability in FortiOS SSL-VPN. A unauthenticated remote malicious party can exploit the vulnerability exploit it to execute arbitrary code. This requires malicious network traffic must be sent to the vulnerable interface sent. Fortinet says it is aware of an incident in...
PT-2022-21728
Name of the Vulnerable Software and Affected Versions Brocade Fabric OS software versions prior to v9.1.1 Description A vulnerability in Brocade Fabric OS software could allow a remote unauthenticated attacker to execute commands on a Brocade Fabric OS switch, capable of modifying zoning, disabli...
BEApps Mobile PC Keyboard 访问控制错误漏洞
BEApps Mobile PC Keyboard is an application from BEApps Mobile. Type what you want on your phone and it will automatically type it on your computer. A security vulnerability exists in versions prior to BEApps Mobile PC Keyboard v30, which stems from a vulnerability that allows an unauthenticated...
thisAAY Lazy Mouse 访问控制错误漏洞
thisAAY Lazy Mouse is a mouse application from thisAAY. A security vulnerability exists in versions prior to thisAAY Lazy Mouse 2.0.1, which stems from a default configuration that does not require a password and allows an unauthenticated remote user to execute arbitrary code without prior...
CVE-2022-46414
CVE-2022-46414 affects Veritas NetBackup Flex Scale up to 3.0 and NetBackup Access Appliance up to 8.0.100, permitting unauthenticated remote command execution via the management portal. CVSS v3.1 base score 9.8 (CRITICAL). Remediation: upgrade Veritas NetBackup Flex Scale to a version later than...
thisAAY Lazy Mouse 安全漏洞
thisAAY Lazy Mouse is a mouse application from thisAAY. A security vulnerability exists in thisAAY Lazy Mouse, which stems from its server enforcing a weak password requirement and not implementing rate limiting, which allows an unauthenticated remote user to force a PIN and execute arbitrary...
3 New Vulnerabilities Affect OT Products from German Companies Festo and CODESYS
Researchers have disclosed details of three new security vulnerabilities affecting operational technology OT products from CODESYS and Festo that could lead to source code tampering and denial-of-service DoS. The vulnerabilities, reported by Forescout Vedere Labs, are the latest in a long list of...
Mitsubishi Electric MELSEC iQ-R series 输入验证错误漏洞
The MELSEC iQ-R series is a programmable logic controller developed by Mitsubishi Electric Corporation. An input validation error vulnerability exists in the MELSEC iQ-R Series network component firmware version 65 and earlier versions, which can be exploited by an unauthenticated, remote attacke...
qs vulnerable to Prototype Pollution
qs before 6.10.3 allows attackers to cause a Node process hang because an proto key can be used. In many typical web framework use cases, an unauthenticated remote attacker can place the attack payload in the query string of the URL that is used to visit the application, such as...