Lucene search
+L

504 matches found

RedhatCVE
RedhatCVE
•added 2025/04/06 2:30 a.m.•48 views

CVE-2025-25061

Unintended proxy or intermediary 'Confused Deputy' issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to use the product as an intermediary for FTP bounce attack...

5.8CVSS7.1AI score0.00455EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/06 2:29 a.m.•40 views

CVE-2025-24317

Allocation of resources without limits or throttling issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to cause a denial-of-service DoS condition...

5.3CVSS7AI score0.0061EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/04 2:15 a.m.•26 views

CVE-2025-25061

Unintended proxy or intermediary 'Confused Deputy' issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to use the product as an intermediary for FTP bounce attack...

5.8CVSS0.00455EPSS
SaveExploits0References3
CVE
CVE
•added 2025/04/04 2:10 a.m.•75 views

CVE-2025-25061

CVE-2025-25061 affects JTEKT/HMI ViewJet C-more and HMI GC-A2 series. Description: an unintended proxy/intermediary (Confused Deputy) vulnerability could allow a remote unauthenticated attacker to use the product as an intermediary for an FTP bounce attack. Impact: attacker may misuse the product...

5.8CVSS7.3AI score0.00455EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/04/04 2:10 a.m.•41 views

CVE-2025-25061

Unintended proxy or intermediary 'Confused Deputy' issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to use the product as an intermediary for FTP bounce attack...

5.8CVSS0.00455EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/04/04 2:10 a.m.•18 views

CVE-2025-25061

Unintended proxy or intermediary 'Confused Deputy' issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to use the product as an intermediary for FTP bounce attack...

5.8CVSS7.3AI score0.00455EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/04/04 2:09 a.m.•42 views

CVE-2025-24317

Allocation of resources without limits or throttling issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to cause a denial-of-service DoS condition...

5.3CVSS0.0061EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/04/04 2:09 a.m.•15 views

CVE-2025-24317

Allocation of resources without limits or throttling issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to cause a denial-of-service DoS condition...

5.3CVSS7.2AI score0.0061EPSS
SaveExploits0References3
CVE
CVE
•added 2025/04/04 2:09 a.m.•73 views

CVE-2025-24317

CVE-2025-24317 affects JTEKT ELECTRONICS ViewJet C-more series and HMI GC-A2 series. The root cause is an Allocation of Resources Without Limits or Throttling (CWE-770). The vulnerability could allow a remote unauthenticated attacker to trigger a DoS condition, as described in multiple sources (N...

5.3CVSS7.2AI score0.0061EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/04/04 12:00 a.m.•25 views

ViewJet C-more Series Sensor Panels Resource Exhaustion DoS

The vulnerability of the microprogrammed software in the ViewJet C-more Series and GC-A2 Series sensor panels is related to unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

5.3CVSS6.2AI score0.0061EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/04/04 12:00 a.m.•22 views

ViewJet C-more Series Access Control Bypass

The vulnerability of the microprogrammed software in the ViewJet C-more Series and GC-A2 Series sensor panels lies in their ability to bypass access control mechanisms. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

5.8CVSS6.4AI score0.00455EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/04 12:00 a.m.•11 views

CVE-2025-24317: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to cause a denial-of-service DoS condition...

5.3CVSS6.4AI score0.0061EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/04 12:00 a.m.•15 views

CVE-2025-25061: Unintended Proxy or Intermediary

Unintended proxy or intermediary 'Confused Deputy' issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to use the product as an intermediary for FTP bounce attack...

5.8CVSS6.6AI score0.00455EPSS
SaveExploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/04/02 6:12 a.m.•24 views

Multiple vulnerabilities in JTEKT ELECTRONICS CORPORATION's products

Overview HMI ViewJet C-more series and HMI GC-A2 series provided by JTEKT ELECTRONICS CORPORATION contain multiple vulnerabilities listed below. Improper Restriction of Rendered UI Layers or Frames CWE-1021 - CVE-2025-24310 Allocation of Resources Without Limits or Throttling CWE-770 -...

6.5CVSS7AI score0.0061EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/04/02 12:00 a.m.•34 views

PT-2025-14826 · Unknown · Hmi Gc-A2 Series +1

Name of the Vulnerable Software and Affected Versions: HMI ViewJet C-more series affected versions not specified HMI GC-A2 series affected versions not specified Description: The issue is related to an unintended proxy or intermediary problem, also known as 'Confused Deputy', which may allow a...

5.8CVSS5.6AI score0.00455EPSS
SaveExploits0References12
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/04/02 12:00 a.m.•37 views

JVN#17260367: Multiple vulnerabilities in JTEKT ELECTRONICS CORPORATION's products

HMI ViewJet C-more series and HMI GC-A2 series provided by JTEKT ELECTRONICS CORPORATION contain multiple vulnerabilities listed below. Improper Restriction of Rendered UI Layers or Frames CWE-1021 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Base Score 4.3 CVE-2025-24310 Allocation of Resources...

6.5CVSS7.5AI score0.0061EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/04/02 12:00 a.m.•23 views

PT-2025-14825 · Unknown · Hmi Gc-A2 Series +1

Name of the Vulnerable Software and Affected Versions: HMI ViewJet C-more series affected versions not specified HMI GC-A2 series affected versions not specified Description: A resource allocation issue without limits or throttling exists, potentially allowing a remote unauthenticated attacker to...

5.3CVSS6.7AI score0.0061EPSS
SaveExploits0References13
vulnersOsv
vulnersOsv
•added 2025/03/20 12:32 p.m.•2 views

a2 (>=0.1.0, <=0.3.17), ikomia (>=0.9.0, <=0.13.0) +2 more potentially affected by CVE-2025-1474 via mlflow (1.30.0)

mlflow PYPI version 1.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - a2 =0.1.0, =0.9.0, =0.13.0 - mantik 0.1.2 - pyrovelocity 0.1.1 Source cves: CVE-2025-1474 Source advisory: OSV:GHSA-4RJ2-9GCX-5QHX...

5.5CVSS0.00366EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2025/03/20 12:32 p.m.•2 views

a2 (>=0.1.0, <=0.3.17), ikomia (>=0.9.0, <=0.13.0) +2 more potentially affected by CVE-2025-0453 via mlflow (1.30.0)

mlflow PYPI version 1.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - a2 =0.1.0, =0.9.0, =0.13.0 - mantik 0.1.2 - pyrovelocity 0.1.1 Source cves: CVE-2025-0453 Source advisory: OSV:GHSA-49M6-VRR9-2CQM...

7.5CVSS0.11033EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2025/03/20 12:32 p.m.•3 views

a2 (>=0.1.0, <=0.3.17), ikomia (>=0.9.0, <=0.13.0) +2 more potentially affected by CVE-2024-8859 via mlflow (1.30.0)

mlflow PYPI version 1.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - a2 =0.1.0, =0.9.0, =0.13.0 - mantik 0.1.2 - pyrovelocity 0.1.1 Source cves: CVE-2024-8859 Source advisory: OSV:GHSA-4RQF-8PFM-P36R...

7.5CVSS0.02769EPSS
SaveExploits1
Rows per page
Query Builder