4004 matches found
Siemens SICAM PQ Analyzer
1. EXECUTIVE SUMMARY CVSS v3 3.4 ATTENTION: Low attack complexity Vendor: Siemens Equipment: SICAM PQ Analyzer Vulnerability: Unquoted Search Path or Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to achieve persistence on the system or cause a...
RCLocals - Linux Startup Analyzer
Inspired by 'Autoruns' from Sysinternals, RCLocals analyzes all Linux startup possibilities to find backdoors, also performs process integrity verification, scan for DLL injected processes and much more Things covered: ·List GPG keys trusted by the system ·Installed Packages ·File integrity...
ckb-analyzer (0.39.2), ckb-app-config (>=0.37.0-pre, <=0.100.0-rc2) +57 more potentially affected by CVE-2021-45697 via molecule (>=0.2.5, <=0.7.1)
molecule CARGO version =0.2.5, =0.37.0-pre, =0.4.0, =0.37.0-pre, =0.37.0-pre, =0.37.0-pre, =0.40.0, =0.40.0, =0.37.0-pre, =0.37.0-pre, =0.37.0-pre, =0.37.0-pre, =0.1.0, =0.37.0-pre, =0.39.1 and more Source cves: CVE-2021-45697 Source advisory: OSV:GHSA-6P3C-V8VC-C244...
The software of SIEM EventLog Analyzer is vulnerable because measures are not taken to neutralize special elements used in the operating system command. This vulnerability allows a perpetrator to execute arbitrary commands on the target system.
The vulnerability of the SIEM EventLog Analyzer software exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the target system remotely...
The vulnerability of the Bluetooth DHT traffic analyzer service in Wireshark allows a hacker to cause a service failure.
The vulnerability of the Bluetooth DHT traffic analyzer service in Wireshark stems from an uncontrolled recursion. Exploiting this vulnerability allows a malicious actor to cause a service failure by injecting specially created packets...
Debian: Security Advisory (DLA-2849-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Rational Asset Analyzer is affected by vulnerabilities in WebSphere Application Server Liberty.
Summary Rational Asset Analyzer team has addressed the following vulnerabilities in WebSphere Application Server Liberty: CVE-2021-35517 and CVE-2021-36090 Vulnerability Details CVEID: CVE-2021-35517 DESCRIPTION: Apache Commons Compress is vulnerable to a denial of service, caused by an out of...
Security Bulletin: Vulnerabilities in IBM Java affecting IBM Rational Asset Analyzer.
Summary Multiple vulnerabilities are identified in IBM® SDK Java™ Technology Edition Version 1.8 that is used by IBM Rational Asset Analyzer. These issues were disclosed as part of the IBM Java SDK updates in October 2021 . Vulnerability Details CVEID: CVE-2021-35560 DESCRIPTION: An unspecified...
The vulnerability of the communication standard set for IEEE 802.11 by the computer network traffic analyzer Wireshark allows a hacker to cause a service failure.
The vulnerability of the IEEE 802.11 communication standard set for computer network traffic analyzers like Wireshark is related to pointer arithmetic errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by injecting specially crafted packets...
The vulnerability of the IPPUSB discriver, a traffic analyzer for computer networks by Wireshark, allows a hacker to cause a service failure.
The vulnerability of the IPPUSB discriver and the traffic analyzer for computer networks by Wireshark is related to pointer assignment errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by injecting specially created packets...
InsightCloudSec Supports 12 New AWS Services Announced at re:Invent
In case you didn’t hear, Amazon hosted AWS re:Invent in Las Vegas last week. As has come to be expected at the annual mega-event, Amazon made a number of huge announcements and launched a significant number of improvements and brand-new services and settings to enhance their public cloud platform...
The vulnerability of the Modbus analyzer component in Wireshark allows a hacker to trigger a service failure.
The vulnerability of the Modbus analyzer component in Wireshark relates to pointer assignment errors. Exploiting this vulnerability can allow a malicious actor to cause service failures by injecting specially created packets...
The vulnerability of the Bluetooth SDP analyzer service in computer networks, Wireshark, allows a hacker to cause a service failure.
The vulnerability of the Bluetooth SDP analyzer in Wireshark’s computer network traffic analysis service is due to buffer overflow. Exploiting this vulnerability allows a malicious actor to cause a service failure by injecting specially created packets...
PT-2021-30941
Уязвимость программного обеспечение для SIEM EventLog Analyzer существует из-за непринятия мер по нейтрализации специальных элементов, используемых в команде операционной системы. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольные команды целевой...
zeek:zeek-packet-fuzzer: Heap-buffer-overflow in zeek::packet_analysis::AYIYA::AYIYAAnalyzer::DetectProtocol
Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=5513195373068288 Project: zeek Fuzzing Engine: honggfuzz Fuzz Target: zeek-packet-fuzzer Job Type: honggfuzzasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60400160a38...
Cross-site Scripting Vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer
Overview A Cross-site Scripting vulnerability was found in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official...
SolarWinds Database Performance Analyzer Cross-Site Scripting Vulnerability
Solarwinds SolarWinds Database Performance Analyzer is a database performance analyzer from SolarWinds, Inc. The product is used for SQL query performance monitoring, analysis, tuning, etc. A security vulnerability exists in SolarWinds Database Performance Analyzer v2021.3.7388, which stems from ...
Hands-On IoT Hacking: Rapid7 at DefCon IoT Village, Part 1
This year, Rapid7 participated at the IoT Village during DefCon29 by running a hands-on hardware hacking exercise, with the goal of exposing attendees to concepts and methods for IoT hacking. Over the years, these exercises have covered several different embedded device topics, including how to u...
Zoho ManageEngine OpManager SQL Injection Vulnerability (CNVD-2021-88241)
ZOHO ManageEngine OpManager is an end-to-end integrated network management software that enables comprehensive, visual, unified and centralized monitoring and management of IT infrastructure, including network devices, servers, hosts, WAN links, applications and services, within an enterprise...
