1912 matches found
CVE-2022-31805
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected...
CVE-2022-31805
The CVE-2022-31805 issue affects the CODESYS Development System (multiple components across several versions) where passwords used to authenticate between clients and servers are transmitted in plaintext. Public details in the NVD entry show network-based exploitation with partial confidentiality...
CVE-2022-31805 Insecure transmission of credentials
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected...
PT-2022-20945 · 3S Smart Software Solutions · Codesys Development System
Name of the Vulnerable Software and Affected Versions: CODESYS Development System affected versions not specified Description: The issue concerns the transmission of passwords for communication between clients and servers in an unprotected manner. This affects multiple components across various...
CODESYS Development System 安全漏洞
3s-smart Software Solutions CODESYS Development System is a suite of programming tools for the field of industrial controllers and automation technology from the German company 3s-smart Software Solutions. A security vulnerability exists in several components of several versions of the CODESYS...
CVE-2022-31805
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected...
The vulnerability of the Dynamic Voltage and Frequency Scaling (DVFS) technology implemented in AMD’s microprogramming system allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Dynamic Voltage and Frequency Scaling DVFS technology implemented in AMD’s microprogramming system lies in improper protection of physical peripheral channels. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protecte...
PT-2022-22048 · Jenkins · Jenkins Embeddable Build Status Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Embeddable Build Status Plugin versions 2.0.3 and earlier Description: The issue concerns the incorrect performance of the ViewStatus permission check in the HTTP endpoint provided for "unprotected" status badge access. This allows...
CVE-2022-33953
IBM Robotic Process Automation 21.0.1 and 21.0.2 could allow a user with psychical access to the system to obtain sensitive information due to insufficiently protected access tokens. IBM X-Force ID: 229198...
The vulnerability of the Windows Graphics component of the Windows operating system allows attackers to disclose protected information.
The vulnerability of the Windows Graphics component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of Skype for Business Server in corporate communication servers lies in the lack of protection for service data, which allows attackers to carry out spoofing attacks.
The vulnerability of Skype for Business Server’s corporate communication servers is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...
The vulnerability of the scsi_ioctl function in the Linux operating system’s kernel allows a hacker to disclose protected information.
The vulnerability of the scsiioctl function drivers/scsi/scsiioctl.c in the Linux operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...
PT-2022-18882 · Sap · Sap Netweaver
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver EP Web Page Composer affected versions not specified Description: The issue arises from insufficient validation of an XML document accepted from an untrusted source. This allows an adversary to exploit unprotected XML parking at...
CVE-2022-30748
Unprotected dynamic receiver in Samsung Members prior to version 4.2.005 allows attacker to launch arbitrary activity...
CVE-2022-30748
Unprotected dynamic receiver in Samsung Members prior to version 4.2.005 allows attacker to launch arbitrary activity...
CVE-2022-30748
Unprotected dynamic receiver in Samsung Members prior to version 4.2.005 allows attacker to launch arbitrary activity...
Code injection
Unprotected dynamic receiver in Samsung Members prior to version 4.2.005 allows attacker to launch arbitrary activity...
CVE-2022-30748
Samsung Members app contains an unprotected dynamic receiver prior to version 4.2.005, enabling an attacker with local access to launch arbitrary activities. Root cause: dynamic receivers not properly protected. Affected: Samsung Members on Android (versions before 4.2.005). Impact: arbitrary act...