Design/Logic Flaw

A vulnerability has been identified in SCALANCE X302-7 EEC 230V, SCALANCE X302-7 EEC 230V, coated, SCALANCE X302-7 EEC 24V, SCALANCE X302-7 EEC 24V, coated, SCALANCE X302-7 EEC 2x 230V, SCALANCE X302-7 EEC 2x 230V, coated, SCALANCE X302-7 EEC 2x 24V, SCALANCE X302-7 EEC 2x 24V, coated, SCALANCE...

CVE-2022-25754

CVE-2022-25754 affects Siemens SCALANCE X-300 switches and related models (web server on affected devices). The issue arises from the integrated web server, which could allow remote attackers to perform actions with the permissions of a victim user if the victim has an active session and is lured...

CVE-2022-25754

A vulnerability has been identified in SCALANCE X302-7 EEC 230V, SCALANCE X302-7 EEC 230V, coated, SCALANCE X302-7 EEC 24V, SCALANCE X302-7 EEC 24V, coated, SCALANCE X302-7 EEC 2x 230V, SCALANCE X302-7 EEC 2x 230V, coated, SCALANCE X302-7 EEC 2x 24V, SCALANCE X302-7 EEC 2x 24V, coated, SCALANCE...

CVE-2021-42029

A vulnerability has been identified in SIMATIC STEP 7 TIA Portal V15 All versions, SIMATIC STEP 7 TIA Portal V16 All versions V16 Update 5, SIMATIC STEP 7 TIA Portal V17 All versions V17 Update 2. An attacker could achieve privilege escalation on the web server of certain devices due to improper...

CVE-2021-42029

CVE-2021-42029 affects SIMATIC STEP 7 (TIA Portal) V15 (all versions), V16 (all versions before V16 Update 5), and V17 (all versions before V17 Update 2). Root cause: improper access control in the engineering system software that can allow privilege escalation on the web server of affected devic...

express-fileupload 代码问题漏洞

express-fileupload is a file upload middleware by Richard Girges, an individual developer in the United States. A security vulnerability exists in express-fileupload v1.3.1, which allows an attacker to upload multiple files with the same name, resulting in the overwriting of files in the web...

CVE-2021-42029: Improper Access Control

A vulnerability has been identified in SIMATIC STEP 7 TIA Portal V15 All versions, SIMATIC STEP 7 TIA Portal V16 All versions V16 Update 5, SIMATIC STEP 7 TIA Portal V17 All versions V17 Update 2. An attacker could achieve privilege escalation on the web server of certain devices due to improper...

PT-2022-3539

Name of the Vulnerable Software and Affected Versions SCALANCE X302-7 EEC 230V SCALANCE X302-7 EEC 230V, coated SCALANCE X302-7 EEC 24V SCALANCE X302-7 EEC 24V, coated SCALANCE X302-7 EEC 2x 230V SCALANCE X302-7 EEC 2x 230V, coated SCALANCE X302-7 EEC 2x 24V SCALANCE X302-7 EEC 2x 24V, coated...

Siemens SIMATIC STEP 7 (TIA Portal)

1. EXECUTIVE SUMMARY CVSS v3 6.4 Vendor: Siemens Equipment: STEP 7 TIA Portal Vulnerability: Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to achieve privilege escalation on the web server of certain devices configured by SIMATIC...

PT-2022-3541

Name of the Vulnerable Software and Affected Versions SCALANCE X302-7 versions 230V, 230V, coated, 24V, 24V, coated, 2x 230V, 2x 230V, coated, 2x 24V, 2x 24V, coated SCALANCE X304-2FE SCALANCE X306-1LD FE SCALANCE X307-2 versions 230V, 230V, coated, 24V, 24V, coated, 2x 230V, 2x 230V, coated, 2x...

Nginx LDAP Auth Code Execution

The vulnerability of the LDAP-auth HTTP-server implementation based on Nginx is related to errors in the code. Exploiting this vulnerability allows a remote attacker to execute any arbitrary code on the vulnerable system...

Fortinet FortiClient for Linux信息泄露漏洞

Fortinet FortiClient is a fabric agent from Fortinet USA, Inc. It is used to provide protection, compliance, and secure access in a single modular lightweight client.An information disclosure vulnerability exists in Fortinet FortiClient for Linux. An unauthenticated attacker could exploit the...

CVE-2022-27016

There is a stack overflow vulnerability in the SetStaticRouteCfg function in the httpd service of Tenda AC9 15.03.2.21cn...

Authentication Bypass

ReadyMedia is vulnerable to authentication bypass. The vulnerability exists due to a rebinding issue which allows an attacker to exfiltrate media files of a remote web server...

Red Hat Undertow 资源管理错误漏洞

Red Hat Undertow is a Java-based embedded web server from Red Hat and is the default web server for Wildfly Java Application Server. Red Hat Undertow suffers from a security vulnerability that stems from a potential security issue in HTTP/2 flow control could lead to DOS...

Web Site Accepts Credit Card Data

The remote web server contains at least one HTML form field that has an input of type 'cc-number' or similar. While this does not represent a risk to this web server per se, it does mean that the website may be accepting payment information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2022-1166

The JobMonster Theme was vulnerable to Directory Listing in the /wp-content/uploads/jobmonster/ folder, as it did not include a default PHP file, or .htaccess file. This could expose personal data such as people's resumes. Although Directory Listing can be prevented by securely configuring the we...

Design/Logic Flaw

The JobMonster Theme was vulnerable to Directory Listing in the /wp-content/uploads/jobmonster/ folder, as it did not include a default PHP file, or .htaccess file. This could expose personal data such as people's resumes. Although Directory Listing can be prevented by securely configuring the we...

CVE-2022-1166

The CVE-2022-1166 issue affects the WordPress JobMonster Theme. The root cause is directory listing in the /wp-content/uploads/jobmonster/ folder due to absence of a default PHP file or .htaccess, which could expose personal data such as resumes. Public details in connected sources confirm the vu...

CVE-2022-1166 JobMonster < 4.6.6.1 - Directory Listing in Upload Folder

The JobMonster Theme was vulnerable to Directory Listing in the /wp-content/uploads/jobmonster/ folder, as it did not include a default PHP file, or .htaccess file. This could expose personal data such as people's resumes. Although Directory Listing can be prevented by securely configuring the we...