Lucene search
+L

1940 matches found

CNNVD
CNNVD
added 2023/06/07 12:00 a.m.18 views

Triangle MicroWorks SCADA Data Gateway 安全漏洞

Triangle Microworks Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product from Triangle Microworks, Inc. A security vulnerability exists in Triangle MicroWorks SCADA Data Gateway v5.01.03 and earlier versions, which originates from an unauthenticated attacker being able to send a...

5.3CVSS5.7AI score0.00593EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/06/05 12:00 a.m.11 views

Huawei HarmonyOS 代码问题漏洞

Huawei HarmonyOS is an operating system from Huawei China. HarmonyOS is an operating system from Huawei, China. It provides a full-scenario distributed operating system based on a microkernel. HarmonyOS has a security vulnerability that originates from an improper privilege checking vulnerability...

7.5CVSS7.4AI score0.00447EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2023/05/31 12:15 a.m.4 views

CVE-2023-28352

An issue was discovered in Faronics Insight 10.0.19045 on Windows. By abusing the Insight UDP broadcast discovery system, an attacker-controlled artificial Student Console can connect to and attack a Teacher Console even after Enhanced Security Mode has been enabled...

7.4CVSS6.9AI score0.00686EPSS
SaveExploits1References3
NVD
NVD
added 2023/05/31 12:15 a.m.19 views

CVE-2023-28352

An issue was discovered in Faronics Insight 10.0.19045 on Windows. By abusing the Insight UDP broadcast discovery system, an attacker-controlled artificial Student Console can connect to and attack a Teacher Console even after Enhanced Security Mode has been enabled...

7.4CVSS7.4AI score0.00686EPSS
SaveExploits1References2
Prion
Prion
added 2023/05/31 12:15 a.m.19 views

Design/Logic Flaw

An issue was discovered in Faronics Insight 10.0.19045 on Windows. By abusing the Insight UDP broadcast discovery system, an attacker-controlled artificial Student Console can connect to and attack a Teacher Console even after Enhanced Security Mode has been enabled...

3.3CVSS7.3AI score0.00686EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2023/05/30 12:00 a.m.26 views

CVE-2023-28352

An issue was discovered in Faronics Insight 10.0.19045 on Windows. By abusing the Insight UDP broadcast discovery system, an attacker-controlled artificial Student Console can connect to and attack a Teacher Console even after Enhanced Security Mode has been enabled...

7.6AI score0.00686EPSS
SaveExploits1References2
Prion
Prion
added 2023/05/26 5:15 p.m.24 views

Authentication flaw

The reminder module lacks an authentication mechanism for broadcasts received. Successful exploitation of this vulnerability may affect availability...

5CVSS7.7AI score0.00452EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/26 12:00 a.m.8 views

PT-2023-16023 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Reminder module affected versions not specified Description: The issue is related to the reminder module lacking an authentication mechanism for broadcasts received. This could potentially affect availability upon successful exploitation...

7.5CVSS7AI score0.00452EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2023/05/16 8:56 a.m.22 views

kernel: wifi: mac80211: fix queue selection for mesh/OCB interfaces

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix queue selection for mesh/OCB interfaces When using iTXQ, the code assumes that there is only one vif queue for broadcast packets, using the BE queue. Allowing non-BE queue marking violates that assumption and...

5.5CVSS6.4AI score0.00263EPSS
SaveExploits0References5
AlmaLinux
AlmaLinux
added 2023/05/16 12:00 a.m.42 views

Moderate: dhcp security and bug fix update

The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to...

6.5CVSS7AI score0.00683EPSS
SaveExploits0References6
OSV
OSV
added 2023/05/15 10:15 p.m.8 views

CVE-2023-21117

In registerReceiverWithFeature of ActivityManagerService.java, there is a possible way for isolated processes to register a broadcast receiver due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...

7.8CVSS5.9AI score0.00084EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/05/15 12:00 a.m.38 views

CVE-2023-21117

In registerReceiverWithFeature of ActivityManagerService.java, there is a possible way for isolated processes to register a broadcast receiver due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...

7.9AI score0.00084EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/05/12 1:15 p.m.11 views

CVE-2023-23444

Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to...

8.2CVSS7.3AI score0.0117EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/05/12 12:00 a.m.9 views

SICK Flexi Classic 访问控制错误漏洞

SICK FX0-GENT00000 is a security control module from SICK with a built-in Ethernet switch. A security vulnerability exists in SICK Flexi Classic, Flexi Soft Gateways that originates from a vulnerability that could allow an unauthenticated, remote attacker to change the IP settings of the device v...

8.2CVSS7.8AI score0.0117EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/05/05 12:00 a.m.13 views

Huawei HarmonyOS 访问控制错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a broadcast receive unauthenticated type vulnerability in the background proxy alert...

7.5CVSS7.3AI score0.00452EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/05/02 12:00 a.m.17 views

Siemens SIMATIC CP 44x-1 RNA Uncontrolled Resource Consumption (CVE-2022-27640)

A vulnerability has been identified in SIMATIC CP 442-1 RNA All versions V1.5.18, SIMATIC CP 443-1 RNA All versions V1.5.18. The affected devices improperly handles excessive ARP broadcast requests. This could allow an attacker to create a denial of service condition by performing ARP storming...

6.5CVSS6.4AI score0.00354EPSS
SaveExploits0References3
OSV
OSV
added 2023/05/01 12:00 a.m.38 views

ASB-A-263358101

In registerReceiverWithFeature of ActivityManagerService.java, there is a possible way for isolated processes to register a broadcast receiver due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...

8.4CVSS7.7AI score0.00084EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/04/29 12:00 a.m.11 views

PT-2023-3043 · Triangle Microworks · Scada Data Gateway

Name of the Vulnerable Software and Affected Versions: Triangle MicroWorks' SCADA Data Gateway version = v5.01.03 Description: The issue is related to the use of uncontrolled format strings in the GTWWebMonitor.exe executable file of the SCADA Data Gateway system. An unauthenticated attacker can...

9.8CVSS9.2AI score0.00706EPSS
SaveExploits0References6
NVD
NVD
added 2023/04/25 4:15 p.m.26 views

CVE-2023-25313

OS injection vulnerability in World Wide Broadcast Network AVideo version before 12.4, allows attackers to execute arbitrary code via the video link field to the Embed a video link feature...

9.8CVSS9.7AI score0.01315EPSS
SaveExploits1References1
NVD
NVD
added 2023/04/25 4:15 p.m.30 views

CVE-2023-25314

Cross Site Scripting XSS vulnerability in World Wide Broadcast Network AVideo before 12.4, allows attackers to gain sensitive information via the success parameter to /user...

6.1CVSS6.1AI score0.00395EPSS
SaveExploits0References1
Rows per page
Query Builder