Lucene search
+L

5773 matches found

BDU FSTEC
BDU FSTEC
added 2020/03/13 12:0 a.m.7 views

The vulnerability of the Simple Mail Transfer Protocol (SMTP) software of RSLogix 500, as well as the programmable logic controllers MicroLogix 1100 and MicroLogix 1400, allows a intruder to gain unauthorized access to confidential information.

The vulnerability of the Simple Mail Transfer Protocol SMTP software from RSLogix 500, as well as the programmable logic controllers MicroLogix 1100 and MicroLogix 1400, is related to the unencrypted storage of critical information. Exploiting this vulnerability allows an attacker to gain access ...

4CVSS5.5AI score0.00415EPSS
SaveExploits0References3Affected Software2
ThreatPost
ThreatPost
added 2020/03/11 1:56 p.m.36 views

More Than Half of IoT Devices Vulnerable to Severe Attacks

More than half of all internet of things IoT devices are vulnerable to medium- or high-severity attacks, meaning that enterprises are sitting on a “ticking IoT time bomb,” according to Palo Alto Networks Unit 42 research team. In new research released Tuesday, researchers said that several...

7.2AI score
SaveExploits0References5
ThreatPost
ThreatPost
added 2020/03/11 1:56 p.m.63 views

More Than Half of IoT Devices Vulnerable to Severe Attacks

More than half of all internet of things IoT devices are vulnerable to medium- or high-severity attacks, meaning that enterprises are sitting on a “ticking IoT time bomb,” according to Palo Alto Networks Unit 42 research team. In new research released Tuesday, researchers said that several...

7.2AI score
SaveExploits0References5
NVD
NVD
added 2020/03/10 9:15 p.m.20 views

CVE-2020-6198

SAP Solution Manager Diagnostics Agent, version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check...

9.8CVSS9.6AI score0.01383EPSS
SaveExploits0References2
OSV
OSV
added 2020/03/10 9:15 p.m.7 views

CVE-2020-6198

SAP Solution Manager Diagnostics Agent, version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check...

9.8CVSS7.4AI score0.01383EPSS
SaveExploits0References2
Prion
Prion
added 2020/03/10 9:15 p.m.21 views

Authentication flaw

SAP Solution Manager Diagnostics Agent, version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check...

7.5CVSS9.4AI score0.01383EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2020/03/10 8:18 p.m.90 views

CVE-2020-6198

CVE-2020-6198 affects SAP Solution Manager (Diagnostics Agent), Version 720. Root cause: Missing authentication allows unencrypted connections from unauthenticated sources, enabling an attacker to remotely control all agent functions. Documents cite high/critical impact (CVSS v3.1 base score 9.8)...

9.8CVSS9.4AI score0.01383EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/03/10 8:18 p.m.26 views

CVE-2020-6198

SAP Solution Manager Diagnostics Agent, version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check...

9.8CVSS9.6AI score0.01383EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/03/09 12:0 a.m.7 views

Unspecified Vulnerability in CloudBees Jenkins Eagle Tester Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A security vulnerability exis...

6.5CVSS6.8AI score0.00852EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/03/09 12:0 a.m.6 views

CloudBees Jenkins ECX Copy Data Management Plugin Information Disclosure Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A security vulnerability exis...

4.3CVSS6.8AI score0.00691EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/03/09 12:0 a.m.9 views

CloudBees Jenkins BMC Release Package and Deployment Plugin Code Execution Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A security vulnerability exis...

4.3CVSS6.8AI score0.00691EPSS
SaveExploits0References1
OSV
OSV
added 2020/03/04 7:15 p.m.7 views

CVE-2020-9550

Rubetek SmartHome 2020 devices use unencrypted 433 MHz communication between controllers and beacons, allowing an attacker to sniff and spoof beacon requests remotely...

9.8CVSS7.3AI score0.00745EPSS
SaveExploits0References2
NVD
NVD
added 2020/03/04 7:15 p.m.17 views

CVE-2020-9550

Rubetek SmartHome 2020 devices use unencrypted 433 MHz communication between controllers and beacons, allowing an attacker to sniff and spoof beacon requests remotely...

9.8CVSS9.4AI score0.00745EPSS
SaveExploits0References2
Prion
Prion
added 2020/03/04 7:15 p.m.19 views

Design/Logic Flaw

Rubetek SmartHome 2020 devices use unencrypted 433 MHz communication between controllers and beacons, allowing an attacker to sniff and spoof beacon requests remotely...

7.5CVSS9.3AI score0.00745EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2020/03/04 6:19 p.m.73 views

CVE-2020-9550

Rubetek SmartHome 2020 devices expose a vulnerability (CVE-2020-9550) due to unencrypted 433 MHz communication between controllers and beacons. This design allows an attacker to sniff beacon traffic and remotely spoof beacon requests. The vulnerability is reported across multiple feeds (NVD entry...

9.8CVSS9.2AI score0.00745EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/03/04 6:19 p.m.28 views

CVE-2020-9550

Rubetek SmartHome 2020 devices use unencrypted 433 MHz communication between controllers and beacons, allowing an attacker to sniff and spoof beacon requests remotely...

9.4AI score0.00745EPSS
SaveExploits0References2
OSV
OSV
added 2020/03/04 8:53 a.m.17 views

UBUNTU-CVE-2020-1749

A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data...

7.5CVSS6.6AI score0.0124EPSS
SaveExploits0References8
NVD
NVD
added 2020/03/02 5:15 a.m.13 views

CVE-2020-6794

If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Thunderbird 60. The new master...

6.5CVSS7AI score0.01016EPSS
SaveExploits1References5
OSV
OSV
added 2020/03/02 5:15 a.m.4 views

DEBIAN-CVE-2020-6794

If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Thunderbird 60. The new master...

6.5CVSS6.8AI score0.01016EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2020/03/02 5:15 a.m.36 views

CVE-2020-6794

If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Thunderbird 60. The new master...

6.5CVSS6.8AI score0.01016EPSS
SaveExploits1References4
Rows per page
Query Builder