Delta Electronics DiaLink security vulnerability

DIALink is an equipment networking platform from Delta Electronics that effectively manages CNC machines and PLC-controlled machines, collects on-site equipment data and connects it to the upper management platform through a unified interface, and at the same time provides visual information...

GSD-2021-1001618 x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n

x86/entry: Clear X86FEATURESMAP when CONFIGX86SMAP=n This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.73 by commit...

PT-2021-30220

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.9 Description The issue is related to a NULL dereference in the qeth clear working pool list function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30135

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.70 Description The issue is related to a NULL dereference in the qeth clear working pool list function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-26225

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.9 Description: The issue is related to a NULL dereference in the qeth clear working pool list function. This problem was introduced in version v5.9 and is fixed in Linux Kernel version v5.14.9. The actual...

PT-2021-26140

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.70 Description A potential security issue exists due to a NULL dereference in the qeth clear working pool list function. The actual impact and attack plausibility have not yet been proven. Recommendations F...

PT-2021-22319

Name of the Vulnerable Software and Affected Versions IBM Security Risk Manager on CP4S version 1.7.0.0 Description The issue allows user credentials to be stored in plain clear text, which can be read by an authenticated privileged user. Recommendations For IBM Security Risk Manager on CP4S...

CVE-2021-38915

IBM Data Risk Manager 2.0.6 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 209947...

PT-2024-11444

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.0-rc4+ Description The issue is related to a lock added around the Tx timestamp tracker flow in the Linux kernel, which can lead to a deadlock if a mutex actually sleeps. This lock is problematic because it ...

Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities

Summary IBM Data Risk Manager has addressed the following vulnerabilities: Vulnerability Details CVEID: CVE-2021-20227 DESCRIPTION: SQLite is vulnerable to a denial of service, caused by a use-after-free flaw in the SELECT query function in src/select.c. By sending a specially-crafted request, a...

openSUSE 15 Security Update : curl (openSUSE-SU-2021:3298-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3298-1 advisory. - A user can tell curl = 7.20.0 and = 7.20.0 and = 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to...

Fortinet FortiManager VM and FortiAnalyzer VM information leakage vulnerabilities

Fortinet FortiManager VM is a centralized network security management platform for virtual machines. FortiAnalyzer Vm is a virtual machine that provides the ability to group devices into different management domains ADOMs for security deployment and management. FortiAnalyzer Vm is a virtual machi...

Bosch Rexroth IndraMotion MLC authorization issue vulnerability

Bosch Rexroth IndraMotion Mlc is a new device that combines motion and logic control, as well as robotics control.A security vulnerability exists in Bosch Rexroth IndraMotion Mlc, which stems from a network system or product that does not properly use the relevant cryptographic algorithms, and...

CVE-2021-41302

ECOA BAS controller stores sensitive data backup exports in clear-text, thus the unauthenticated attacker can remotely query user password and obtain user’s privilege...

Default credentials

ECOA BAS controller stores sensitive data backup exports in clear-text, thus the unauthenticated attacker can remotely query user password and obtain user’s privilege...

CVE-2021-41302

CVE-2021-41302 affects ECOA BAS controller family (ECS Router Controller - ECS (FLASH); RiskBuster Terminator - E6L45; RiskBuster System RB 3.0.0; TRANE 1.0; Graphic Control Software; SmartHome II - E9246; RiskTerminator). The issue is that backup exports and other sensitive data are stored in cl...

CVE-2021-41302

ECOA BAS controller stores sensitive data backup exports in clear-text, thus the unauthenticated attacker can remotely query user password and obtain user’s privilege...

PT-2021-23257 · Unknown · Ecoa Bas Controller

Name of the Vulnerable Software and Affected Versions: ECOA BAS controller affected versions not specified Description: The ECOA BAS controller stores sensitive data, including backup exports, in clear-text. This allows an unauthenticated attacker to remotely query user passwords and obtain user...

Ecoa Bas controller security vulnerability

Ecoa Bas controller is a building automation controller from Ecoa Technologies Corp in China. Ecoa Bas controller is vulnerable to an access control error, which can be exploited by attackers to compromise administrative account credentials in clear text to cause privilege escalation...

CVE-2021-41302: Missing Encryption of Sensitive Data

ECOA BAS controller stores sensitive data backup exports in clear-text, thus the unauthenticated attacker can remotely query user password and obtain user’s privilege...