Lucene search
+L

5587 matches found

CNNVD
CNNVD
added 2022/07/15 12:00 a.m.10 views

SonicWALL Hosted Email Security 安全特征问题漏洞

SonicWALL Hosted Email Security is an advanced cloud email security service from SonicWALL, Inc. A security feature issue vulnerability exists in SonicWall Hosted Email Security HES version 10.0.17.7319 and prior versions that stems from the incorrect implementation of certain security features i...

7.5CVSS7.3AI score0.00604EPSS
SaveExploits0References3
SonicWall
SonicWall
added 2022/07/14 6:43 p.m.33 views

SonicWall Hosted Email Security Capture ATP Bypass

Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service in the appliance. CVE: CVE-2022-2324 Last updated: July 14, 2022, 6:43 p.m...

7.2CVSS6.9AI score0.00604EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/07/11 12:00 a.m.17 views

The vulnerability lies in the communication functions between the Omron NJ/NX automation controller, the Omron Sysmac Studio automation software, and the programmable terminal Omron NA. This vulnerability allows a perpetrator to gain access to the controller.

The vulnerability of the communication functions between Omron NJ/NX automation controllers, the Omron Sysmac Studio automation software, and the programmable terminal Omron NA lies in the ability to bypass the authentication process by using capture-replay techniques for intercepted parameters...

6.8CVSS7.5AI score0.01781EPSS
SaveExploits0References4Affected Software8
BDU FSTEC
BDU FSTEC
added 2022/07/11 12:00 a.m.20 views

The vulnerability of Microprogrammed Software in Omron NJ/NX automation controllers, related to bypassing the authentication process using capture-replay techniques for intercepted parameters, allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of Microprogrammed Software in Omron NJ/NX automation controllers lies in the ability to bypass the authentication process by using capture-replay techniques to intercept and replay captured parameters. Exploiting this vulnerability allows a malicious actor to trigger malfunctio...

7.6CVSS7.5AI score0.01184EPSS
SaveExploits0References4Affected Software3
OSV
OSV
added 2022/07/05 2:15 p.m.20 views

CVE-2021-43116

An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login...

8.8CVSS8.6AI score
SaveExploits0References3
Prion
Prion
added 2022/07/05 2:15 p.m.15 views

Improper access control

An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login...

6.5CVSS8.5AI score0.07398EPSS
SaveExploits4References3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/07/05 1:50 p.m.78 views

Security Bulletin: IBM QRadar Network Packet Capture includes multiple vulnerable components.

Summary The product includes multiple vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM has addressed the relevant CVEs. Vulnerability Details CVEID:CVE-2018-25032 DESCRIPTION: Zlib is vulnerable to a denial of service, caused by a memo...

9.8CVSS7.8AI score0.73188EPSS
SaveExploits5Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/07/04 2:15 a.m.6 views

CVE-2022-33971

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow ...

7.5CVSS6AI score0.01184EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2022/07/04 2:15 a.m.37 views

CVE-2022-33208

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software...

8.1CVSS0.01781EPSS
SaveExploits0References2
OSV
OSV
added 2022/07/04 2:15 a.m.11 views

CVE-2022-33208

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software...

8.1CVSS7.3AI score0.01781EPSS
SaveExploits0References2
OSV
OSV
added 2022/07/04 2:15 a.m.8 views

CVE-2022-33971

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow ...

7.5CVSS7.2AI score0.01184EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/07/04 2:15 a.m.4 views

CVE-2022-33208

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software...

8.1CVSS5.8AI score0.01781EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2022/07/04 2:15 a.m.34 views

CVE-2022-33971

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow ...

8.3CVSS0.01184EPSS
SaveExploits0References2
Prion
Prion
added 2022/07/04 2:15 a.m.20 views

Authentication flaw

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software...

6.8CVSS8AI score0.01781EPSS
SaveExploits0References2Affected Software57
Cvelist
Cvelist
added 2022/07/04 1:50 a.m.49 views

CVE-2022-33971

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow ...

7.8AI score0.01184EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/07/04 1:50 a.m.7 views

CVE-2022-33971

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow ...

7.2AI score0.01184EPSS
SaveExploits0References2
CVE
CVE
added 2022/07/04 1:50 a.m.89 views

CVE-2022-33971

CVE-2022-33971 affects Omron NJ/NX-series Machine Automation Controllers. An adjacent attacker who can analyze the communication between the controller and internal software may bypass authentication via capture-replay, potentially causing a DoS or enabling execution of a malicious program. Affec...

8.3CVSS7.5AI score0.01184EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/07/04 1:50 a.m.58 views

CVE-2022-33208

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software...

8.2AI score0.01781EPSS
SaveExploits0References2
CVE
CVE
added 2022/07/04 1:50 a.m.111 views

CVE-2022-33208

CVE-2022-33208 is an authentication bypass by capture-replay affecting Omron NJ/NX-series Machine Automation Controllers (NJ 1.48 and earlier; NX7 1.28 and earlier; NX1 1.48 and earlier), Sysmac Studio (≤1.49), and NA-series PT runtimes (NA5-15W/12W/9W/7W ≤1.15). A remote attacker who can analyze...

8.1CVSS7.9AI score0.01781EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2022/07/04 12:00 a.m.72 views

Jenkins XebiaLabs XL Release Plugin Licensing Issue Vulnerability (CNVD-2022-58430)

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application. jenkins XebiaLabs XL Release Plugin...

4CVSS2.1AI score0.00665EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder