Lucene search
K

2705 matches found

Positive Technologies
Positive Technologies
added 2022/08/24 12:0 a.m.3 views

PT-2022-22387 · Abb · Abb Zenon

Name of the Vulnerable Software and Affected Versions: ABB Zenon version 8.20 Description: The issue allows an attacker to add or alter data points and corresponding attributes. Once such engineering data is used, the data visualization will be altered for the end user. Recommendations: For ABB...

8.4CVSS8.3AI score0.0005EPSS
Exploits0References3
OSV
OSV
added 2022/08/23 10:15 a.m.1 views

CVE-2022-1989

All CODESYS Visualization versions before V4.2.0.0 generate a login dialog vulnerable to information exposure allowing a remote, unauthenticated attacker to enumerate valid users...

5.3CVSS5.8AI score0.00235EPSS
Exploits0References1
NVD
NVD
added 2022/08/23 10:15 a.m.10 views

CVE-2022-1989

All CODESYS Visualization versions before V4.2.0.0 generate a login dialog vulnerable to information exposure allowing a remote, unauthenticated attacker to enumerate valid users...

5.3CVSS0.00235EPSS
Exploits0References1
CVE
CVE
added 2022/08/23 9:55 a.m.55 views

CVE-2022-1989

CVE-2022-1989 affects CODESYS Visualization versions prior to V4.2.0.0. Root cause: the login dialog exposes information that enables an unauthenticated, remote attacker to enumerate valid users. Impact is information disclosure (user enumeration) with potential for targeted misuse. Affected prod...

5.3CVSS5.2AI score0.00235EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/08/23 9:55 a.m.10 views

CVE-2022-1989 CODESYS Visualization vulnerable to user enumeration

All CODESYS Visualization versions before V4.2.0.0 generate a login dialog vulnerable to information exposure allowing a remote, unauthenticated attacker to enumerate valid users...

5.3CVSS5.5AI score0.00235EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/08/23 12:0 a.m.3 views

PT-2022-14241 · 3S Smart Software Solutions · Codesys Visualization

Name of the Vulnerable Software and Affected Versions: CODESYS Visualization versions prior to V4.2.0.0 Description: The issue allows a remote, unauthenticated attacker to enumerate valid users due to information exposure in the login dialog. Recommendations: For versions prior to V4.2.0.0, updat...

5.3CVSS5.2AI score0.00235EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/08/23 12:0 a.m.3 views

CODESYS 安全漏洞

CODESYS is a controller development system from 3S-Smart Software Solutions, Germany. A security vulnerability exists in CODESYS Visualization versions prior to V4.2.0.0, which originates from a login dialog box that is susceptible to information disclosure and can be exploited by an attacker to...

5.3CVSS5.6AI score0.00235EPSS
Exploits0References2
Wolfi
Wolfi
added 2022/08/18 7:15 p.m.5 views

CVE-2021-32862 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

7.5CVSS7.1AI score0.00784EPSS
Exploits1
Chainguard
Chainguard
added 2022/08/18 7:15 p.m.5 views

CVE-2021-32862 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

7.5CVSS6.8AI score0.00784EPSS
Exploits1
Wolfi
Wolfi
added 2022/08/10 5:51 p.m.3 views

GHSA-9JMQ-RX5F-8JWQ vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

7.5AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2022/08/01 12:0 a.m.0 views

The vulnerability of the APDFL library used by the 3D JT JT2Go viewer and the Teamcenter Visualization lifecycle management system allows a perpetrator to execute arbitrary code or trigger a service failure.

The vulnerability of the APDFL viewer tool for 3D JT and JT2Go, as well as the Teamcenter Visualization lifecycle management system, relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow attackers to execute arbitrary code or cause service...

7.8CVSS0.00065EPSS
Exploits0References5Affected Software2
OpenVAS
OpenVAS
added 2022/07/31 12:0 a.m.6 views

Fedora: Security Advisory for golang-github-google-pprof (FEDORA-2022-ea8f4e232d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
Fedora
Fedora
added 2022/07/30 2:0 a.m.12 views

[SECURITY] Fedora 36 Update: golang-github-sqshq-sampler-1.1.0-10.fc36

Tool for shell commands execution, visualization and alerting. Configured with a simple YAML file...

7.6AI score
Exploits0
Huntr
Huntr
added 2022/07/28 11:29 p.m.20 views

Reflected XSS on conversion filter function

Description Fava v1.22 have a conversion filter function on income statement dashboard which allow user to perform XSS due to improper validation on filter conversion. Proof of Concept 1 Navigate to Fava demo instance https://fava.pythonanywhere.com/example-beancount-file/incomestatement/. 2 Filt...

5.8CVSS0.6AI score0.00247EPSS
Exploits1
ATTACKERKB
ATTACKERKB
added 2022/07/26 7:54 a.m.1 views

CVE-2022-34838

Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add or alter data points and corresponding attributes. Once such engineering data is used the data visualization will be altered for the end user...

8.4CVSS5.9AI score0.0005EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/07/22 12:0 a.m.3 views

DataEase 安全漏洞

DataEase is an open source data visualization and analysis tool. Used to help users quickly analyze data and insight into business trends , so as to achieve business improvement and optimization . DataEase v1.11.1 There is a security vulnerability , the vulnerability stems from the plug-in...

6.5CVSS6.5AI score0.00146EPSS
Exploits1References2
Fedora
Fedora
added 2022/07/20 1:40 a.m.19 views

[SECURITY] Fedora 35 Update: golang-github-sqshq-sampler-1.1.0-9.fc35

Tool for shell commands execution, visualization and alerting. Configured with a simple YAML file...

9.3CVSS9.1AI score0.00963EPSS
Exploits4
OpenVAS
OpenVAS
added 2022/07/18 12:0 a.m.18 views

Fedora: Security Advisory for golang-github-google-pprof (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.00963EPSS
Exploits4References2
Fedora
Fedora
added 2022/07/17 1:15 a.m.18 views

[SECURITY] Fedora 35 Update: golang-github-google-pprof-0-16.20210802gitc50bf4f.fc35

Pprof is a tool for visualization and analysis of profiling data. Pprof reads a collection of profiling samples in profile.proto format and generates reports to visualize and help analyze the data. It can generate both text and graphical reports through the use of the dot visualization package...

9.3CVSS8.8AI score0.00963EPSS
Exploits4
CNVD
CNVD
added 2022/07/15 12:0 a.m.14 views

Siemens Teamcenter Visualization and JT2Go缓冲区溢出漏洞

JT2Go is a 3D JT viewing tool that allows users to view JT, PDF, Solid Edge, PLM XML, and available JT, VFZ, CGM, and TIF data. teamcenter Visualization enables companies to enhance their product lifecycle management PLM environments with a comprehensive family of visualization solutions. The...

7.8CVSS4.1AI score0.00065EPSS
Exploits0References1
Rows per page
Query Builder