16300 matches found
Rockwell Automation FactoryTalk View SE security vulnerabilities
Rockwell Automation FactoryTalk View SE is an industrial automation system view interface from Rockwell Automation. An authentication error vulnerability exists in Rockwell Automation FactoryTalk View SE, which can be exploited by an attacker to send packets to a customer's server from a remote...
Rockwell Automation FactoryTalk View SE security vulnerabilities
Rockwell Automation FactoryTalk View SE is an industrial automation system view interface from Rockwell Automation. An authentication error vulnerability exists in Rockwell Automation FactoryTalk View SE, which can be exploited by an attacker to send packets to a customer's server from a remote...
CVE-2024-37279
A flaw was discovered in Kibana, allowing view-only users of alerting to use the runsoon API making the alerting rule run continuously, potentially affecting the system availability if the alerting rule is running complex queries...
CVE-2024-37279 Kibana Broken Access Control issue
A flaw was discovered in Kibana, allowing view-only users of alerting to use the runsoon API making the alerting rule run continuously, potentially affecting the system availability if the alerting rule is running complex queries...
CVE-2024-37279
Summary (CVE-2024-37279) : Kibana contains a flaw in the alerting run_soon API that allows view-only alerting users to keep an alert rule running, potentially impacting system availability when complex queries run. Affected versions cited across sources include Kibana 8.6.3 through 8.13.4. The vu...
CVE-2024-34107
Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and view minor unauthorised information...
Rockwell Automation FactoryTalk View SE
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.2 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : FactoryTalk View SE Vulnerability : Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a user from a remote...
Rockwell Automation FactoryTalk View SE
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.5 ATTENTION : Low attack complexity Vendor : Rockwell Automation Equipment : FactoryTalk View SE Vulnerability : Incorrect Permission Assignment for Critical Resource 2. RISK EVALUATION Successful exploitation of this vulnerability could allow...
Rockwell Automation FactoryTalk View SE
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.2 ATTENTION : Exploitable remotely/Low attack complexity Vendor : Rockwell Automation Equipment : FactoryTalk View SE Vulnerability : Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an outside attacker...
PT-2024-27442 · Elastic · Kibana
Name of the Vulnerable Software and Affected Versions: Kibana affected versions not specified Description: A flaw was discovered in Kibana, allowing view-only users of alerting to use the "run soon API" making the alerting rule run continuously, potentially affecting the system availability if th...
PT-2024-4370
Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk View SE affected versions not specified Description A privilege escalation issue exists, allowing low-privilege users to edit scripts and bypass Access Control Lists, potentially gaining further access within th...
PT-2024-4254
Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk View SE affected versions not specified Description The issue is related to weaknesses in the authentication procedure of the Rockwell Automation FactoryTalk View SE software. This allows a remote attacker to...
PT-2024-4262
Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk View SE version v12 Description The issue is related to weaknesses in the authentication procedure of the Rockwell Automation FactoryTalk View SE software. This allows a remote attacker to potentially disclose...
Elastic Kibana Security Vulnerability
Elastic Kibana is an application from the Dutch company Elastic. A free and open user interface that enables you to visualize Elasticsearch data and lets you navigate through the Elastic Stack. A security vulnerability exists in Elastic Kibana versions 8.6.3 through 8.13.4, which stems from a...
GHSA-CC55-MVQC-G9MG SummerNote Cross Site Scripting Vulnerability
SummerNote 0.8.18 is vulnerable to Cross Site Scripting XSS via the Code View Function...
SummerNote Cross Site Scripting Vulnerability
SummerNote 0.8.18 is vulnerable to Cross Site Scripting XSS via the Code View Function...
CVE-2024-37629
SummerNote v0.9.1 is vulnerable to Cross Site Scripting XSS via the Code View Function...
CVE-2024-5759
An improper privilege management vulnerability exists in Tenable Security Center where an authenticated, remote attacker could view unauthorized objects and launch scans without having the required privileges...
