PT-2024-31039 · Apple · Macos Sonoma +7

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 17.6 tvOS versions prior to 17.6 visionOS versions prior to 1.3 watchOS versions prior to 10.6 iOS versions prior to 17.6 iPadOS versions prior to 17.6 macOS Sonoma versions prior to 14.6 Description: An issue in the...

PT-2024-31018

Name of the Vulnerable Software and Affected Versions Safari versions prior to 17.6 tvOS versions prior to 17.6 visionOS versions prior to 1.3 watchOS versions prior to 10.6 iOS versions prior to 17.6 iPadOS versions prior to 17.6 macOS Sonoma versions prior to 14.6 Description The issue arises...

PT-2024-29035 · Apple · Visionos +6

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.6 iPadOS versions prior to 17.6 watchOS versions prior to 10.6 tvOS versions prior to 17.6 visionOS versions prior to 1.3 macOS Sonoma versions prior to 14.6 Description: The issue is related to an out-of-bounds acces...

CVE-2024-38435

Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service...

CVE-2024-38435

Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service...

CVE-2024-38434

Unitronics Vision PLC – CWE-676: Use of Potentially Dangerous Function may allow security feature bypass...

CVE-2024-38435 Unitronics Vision PLC - CWE-703: Improper Check or Handling of Exceptional Conditions

Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service...

CVE-2024-38435

CVE-2024-38435 affects Unitronics Vision PLC. The issue is CWE-703: improper check or handling of exceptional conditions leading to denial of service. It is listed as exploitable remotely over the network, with availability impact, and no vendor-provided fix/version details are present in the con...

CVE-2024-38434 Unitronics Vision PLC - CWE-676: Use of Potentially Dangerous Function

Unitronics Vision PLC – CWE-676: Use of Potentially Dangerous Function may allow security feature bypass...

CVE-2024-38434

CVE-2024-38434 corresponds to CWE-676: Use of Potentially Dangerous Function, potentially bypassing security features. The IBM Engineering Systems Design Rhapsody bulletin lists affected products and versions (Rhapsody 9.0.2, 10.0, 10.0.1) with iFix updates (iFix004, iFix002, iFix003) as remediat...

CVE-2024-38434 Unitronics Vision PLC - CWE-676: Use of Potentially Dangerous Function

Unitronics Vision PLC – CWE-676: Use of Potentially Dangerous Function may allow security feature bypass...

CVE-2024-38435: Improper Check or Handling of Exceptional Conditions

Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service...

CVE-2024-38434: Use of Potentially Dangerous Function

Unitronics Vision PLC – CWE-676: Use of Potentially Dangerous Function may allow security feature bypass...

PT-2024-5268 · Unitronics · Unitronics Vision Plc

Name of the Vulnerable Software and Affected Versions: Unitronics Vision PLC affected versions not specified Description: The issue is related to improper check or handling of exceptional conditions, which may allow denial of service. An attacker, acting remotely, can exploit this to cause a...

PT-2024-5269

Name of the Vulnerable Software and Affected Versions Unitronics Vision PLC affected versions not specified Description The issue is related to the use of potentially dangerous functions, which may allow security feature bypass. An attacker, acting remotely, can exploit this issue to bypass...

Hanwha Vision Cameras Uncaught Exception (CVE-2023-5038)

A flaw that allows for a unauthenticated DoS attack exists on Hanwha Vision camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer...

Hanwha Vision Cameras OS Command Injection (CVE-2023-5037)

A flaw that allows for an authenticated command injection exists on Hanwha Vision cameras. An attacker could inject malicious into request packets to execute command. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds...

Hanwha Vision Web Viewer Cross-site Scripting (CVE-2018-11689)

Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi- bin/webviewerloginpage data3 parameter. The same Web Viewer codebase was transitioned from Samsung to Hanwha. This plugin only works with Tenable.ot. Please visit...

Hanwha Vision NVR Remote Code Execution (CVE-2023-6116)

An attacker could inject arbitrary attack code by manipulating http url parameters. However, in order to succeed in the attack, the base address of the stack memory must be obtained. The default address depends on firmware version, configuration option information, and the attack is unlikely to...

Hanwha Vision Multiple Products Command Injection (CVE-2023-31996)

Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special characters for the NAS storage test function. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...