Fuji Electric V9 Standard HMI Detection

Binary data 757639.prm...

Fuji Electric V9 Standard HMI Detection

Binary data 757635.prm...

Fuji Electric V9 Standard HMI Detection

Binary data 757633.prm...

Fuji Electric V9 Lite HMI Detection

Binary data 757643.prm...

Security Bulletin: IBM MQ Console has inadequate input validation (CVE-2018-1836)

Summary The IBM MQ console has inadequate input validation in one of its forms that could allow an attacker to inject unintended data into fields. Vulnerability Details CVEID: CVE-2018-1836 DESCRIPTION: IBM MQ Console is vulnerable to cross-site scripting. This vulnerability allows users to embed...

Security Bulletin: Potential denial of service in WebSphere Application Server (CVE-2018-10237)

Summary There is a potential denial of service with the Google Guava library that is used in WebSphere Application Server. Vulnerability Details CVEID: CVE-2018-10237 DESCRIPTION: Google Guava is vulnerable to a denial of service, caused by improper eager allocation checks in the AtomicDoubleArra...

Security Bulletin: IBM MQ is vulnerable to a privilege escalation attack when using multiplexed channels (CVE-2018-1974)

Summary IBM MQ could allow an authenticated attacker to escalate their privileges with channels that have multiplexing enabled. Vulnerability Details CVEID: CVE-2018-1974 DESCRIPTION: IBM MQ could allow an authenticated attacker to escalate their privileges when using multiplexed channels. CVSS...

Security Bulletin: IBM MQ Console could allow an attacker to execute a denial of service attack. (CVE-2018-1883)

Summary A problem within the IBM MQ Console REST API could allow attackers to execute a denial of service attack preventing users from logging into the MQ Console REST API. Vulnerability Details CVEID: CVE-2018-1883 DESCRIPTION: A problem within the IBM MQ Console REST API could allow attackers t...

Security Bulletin: IBM MQ can cause a Denial of Service attack to connecting MQTT clients (CVE-2018-1684)

Summary A problem within the IBM MQ MQTT Service logic could cause a denial of service attack to be executed against MQTT clients attempting to connect to the queue manager. Vulnerability Details CVEID: CVE-2018-1684 DESCRIPTION: IBM WebSphere MQ is vulnerable to a error with MQTT topic string...

CVE-2018-1541

IBM WebSphere Commerce Enterprise V7, V8, and V9 is vulnerable to cross-site scripting, allowing an attacker to embed arbitrary JavaScript in the Web UI and potentially disclose credentials within a trusted session. The vulnerability is tracked as CVE-2018-1541. Metrics indicate a CVSS v3 base sc...

SEIG SCADA System 9 - Remote Code Execution

SEIG SCADA System 9 - Remote Code Execution Title: SEIG SCADA SYSTEM 9 - Remote Code Execution Author: Alejandro Parodi Date: 2018-08-17 Vendor Homepage: https://www.schneider-electric.com Software Link:...

CVE-2018-13862

Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 FW 303 allow unauthorized remote attackers to reset the authentication via the "/xml/system/setAttribute.xml" URL, using the GET request "?id=0&attr=protectAccess&newValue=0" a successful attack will allow attackers to...

Security Bulletin: IBM Security Guardium is affected by Linux kernel privesc: Dirty COW vulnerability (CVE-2016-5195)

Summary Linux Kernel could allow a local attacker to gain elevated privileges on the system, caused by a race condition when handling the copy-on-write COW breakage of private read-only memory mappings by the memory subsystem. IBM Security Guardium has provided a fix for this vulnerability...

Security Bulletin: Publish/Subscribe処理でメモリーリークを起こしてしまう脆弱性が IBM MQ と IBM MQ Appliance に見つかりました。(CVE-2017-1786)

Summary IBM MQ キュー・マネージャーがパブリッシュ/サブスクライブ・メッセージングを処理するとき、特定のアプリケーションのリクエストに対するレスポンスでメモリー・リークを起こし、その結果サービスが失敗する可能性が有ります。 Vulnerability Details 最新の情報については、下記URLの文書（英語）をご参照ください。 Security Bulletin: IBM MQ and IBM MQ Appliance are vulnerable to a memory leak in pubsub CVE-2017-1786 CVEID: CVE-2017-1786...

Security Bulletin: IBM MQ could allow an authenticated user to insert messages with malformed data into the channel, which would cause it to restart. (CVE-2017-1433)

Summary Malformed header data in an MQ message could trigger a server-connection channel process to terminate, which might deny service to other connected clients using the same channel process. Vulnerability Details CVEID: CVE-2017-1433 DESCRIPTION: IBM MQ could allow an authenticated user to...

Security Bulletin: IBM MQ certain file URLs could cause a buffer overwrite (CVE-2017-9502)

Summary A problem within the libcurl library means certain file URLs could cause a buffer overwrite within IBM MQ. Vulnerability Details CVEID: CVE-2017-9502 DESCRIPTION: libcurl is vulnerable to a heap-based buffer overflow, caused by a flaw in the file protocol. By sending a specially-crafted...

Security Bulletin: IBM MQ and IBM WebSphere MQ invalid requests could cause denial of service to MQXR listener (CVE-2016-8986)

Summary Invalid HTTP requests could cause a denial of service to the IBM MQ MQXR listener. Vulnerability Details CVEID: CVE-2016-8986 DESCRIPTION: IBM WebSphere MQ could allow an authenticated user with access to the queue manager to bring down MQ channels using specially crafted HTTP requests...

Authentication flaw

Huawei Honor V9 Play smart phones with the versions before Jimmy-AL00AC00B135 have an authentication bypass vulnerability due to the improper design of a component. An attacker who get a user's smart phone can execute specific operation, and delete the fingerprint of the phone without...

CVE-2017-17145

Huawei Honor V9 Play smart phones with the versions before Jimmy-AL00AC00B135 have an authentication bypass vulnerability due to the improper design of a component. An attacker who get a user's smart phone can execute specific operation, and delete the fingerprint of the phone without...

CVE-2017-17145

Huawei Honor V9 Play smart phones with the versions before Jimmy-AL00AC00B135 have an authentication bypass vulnerability due to the improper design of a component. An attacker who get a user's smart phone can execute specific operation, and delete the fingerprint of the phone without...