Lucene search
+L

11809 matches found

Cvelist
Cvelist
•added 2022/11/24 11:21 p.m.•50 views

CVE-2022-29825

Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 GOT2000 versions from 1.122C to 1.290C, and MT Works2 versions from 1.100E to 1.200J allows an unauthenticated attacker to disclose sensitive information. As a result,...

5.6CVSS7.8AI score0.00492EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2022/11/24 11:21 p.m.•14 views

CVE-2022-29825

Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 GOT2000 versions from 1.122C to 1.290C, and MT Works2 versions from 1.100E to 1.200J allows an unauthenticated attacker to disclose sensitive information. As a result,...

5.6CVSS7.3AI score0.00492EPSS
SaveExploits0References3
CVE
CVE
•added 2022/11/24 11:21 p.m.•100 views

CVE-2022-29825

CVE-2022-29825 describes a vulnerability in Mitsubishi Electric GX Works3 (versions 1.000A–1.090U), GT Designer3 (GOT2000) (1.122C–1.290C), and MT Works2 (1.100E–1.200J) where a hard-coded password could be exploited by an unauthenticated attacker to disclose sensitive information, allowing viewi...

7.5CVSS7.3AI score0.00492EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/24 12:00 a.m.•10 views

CVE-2022-29831: Use of Hard-coded Password

Use of Hard-coded Password vulnerability in Mitsubishi Electric Corporation GX Works3 versions from 1.015R to 1.095Z allows a remote unauthenticated attacker to obtain information about the project file for MELSEC safety CPU modules...

7.5CVSS5.9AI score0.01417EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/24 12:00 a.m.•7 views

CVE-2022-29830: Use of Hard-coded Cryptographic Key

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z, and Motion Control SettingGX Works3 related software versions from 1.000A to 1.065T allows a remote unauthenticated attacker to disclose or tamper with sensitive information. As a...

9.1CVSS5.8AI score0.01362EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/11/24 12:00 a.m.•23 views

PT-2022-19860

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric GX Works3 versions 1.000A through 1.090U GT Designer3 Version1 GOT2000 versions 1.122C through 1.290C Motion Control Setting GX Works3 related software versions 1.035M through 1.042U Description The issue allows a remote...

7.5CVSS7.4AI score0.01164EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/24 12:00 a.m.•12 views

CVE-2022-29829: Use of Hard-coded Cryptographic Key

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 GOT2000 versions from 1.122C to 1.290C, Motion Control SettingGX Works3 related software versions from 1.035M to 1.042U, and MT Works2 versions from 1.100E to...

7.5CVSS6AI score0.01164EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/24 12:00 a.m.•5 views

CVE-2022-29825: Use of Hard-coded Password

Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 GOT2000 versions from 1.122C to 1.290C, and MT Works2 versions from 1.100E to 1.200J allows an unauthenticated attacker to disclose sensitive information. As a result,...

7.5CVSS5.9AI score0.00492EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/24 12:00 a.m.•10 views

CVE-2022-29828: Use of Hard-coded Cryptographic Key

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated attackers may view programs and project file or execute programs illegally...

7.5CVSS6AI score0.01164EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/24 12:00 a.m.•10 views

CVE-2022-29827: Use of Hard-coded Cryptographic Key

Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated attackers may view programs and project files or execute programs illegally...

7.5CVSS6AI score0.01164EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/11/24 12:00 a.m.•21 views

PT-2022-6456

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U GT Designer3 Version1 GOT2000 versions from 1.122C to 1.290C Description The issue is related to the use of hard-coded passwords in the software, allowing an unauthenticated attacker...

7.8CVSS7.6AI score0.00492EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2022/11/24 12:00 a.m.•23 views

PT-2022-6320 · Mitsubishi · Gx Works3

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Corporation GX Works3 versions from 1.015R to 1.095Z Description: The issue is related to the use of hard-coded passwords in the software, allowing a remote unauthenticated attacker to obtain information about the project...

7.8CVSS7.7AI score0.01417EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2022/11/21 12:00 a.m.•22 views

Dell PowerPath Management Appliance Trust Management Vulnerability

Dell PowerPath Management Appliance is a PowerPath host management application from Dell USA that offers two models: a virtual machine-based appliance and a Docker containerized appliance. A security vulnerability exists in the Dell PowerPath Management Appliance version 3.3, all versions 3.2,...

6CVSS6.2AI score0.00176EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2022/11/17 10:15 p.m.•24 views

CVE-2022-44725

OPC Foundation Local Discovery Server LDS through 1.04.403.478 uses a hard-coded file path to a configuration file. This allows a normal user to create a malicious file that is loaded by LDS running as a high-privilege user...

7.8CVSS5.8AI score0.00181EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/17 12:00 a.m.•6 views

CVE-2022-44725: Incorrect Permission Assignment for Critical Resource

OPC Foundation Local Discovery Server LDS through 1.04.403.478 uses a hard-coded file path to a configuration file. This allows a normal user to create a malicious file that is loaded by LDS running as a high-privilege user...

7.8CVSS5.8AI score0.00181EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/11/17 12:00 a.m.•70 views

CVE-2022-44725

OPC Foundation Local Discovery Server LDS through 1.04.403.478 uses a hard-coded file path to a configuration file. This allows a normal user to create a malicious file that is loaded by LDS running as a high-privilege user...

7.7AI score0.00181EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/11/17 12:00 a.m.•24 views

PT-2022-6840 · Opc Foundation · Opc Foundation Local Discovery Server

Name of the Vulnerable Software and Affected Versions: OPC Foundation Local Discovery Server LDS versions 1.04.403.478 and earlier Description: The issue is related to the incorrect assignment of permissions for a critical resource in the Local Discovery Server LDS of the Siemens software. This...

7.8CVSS6.6AI score0.00181EPSS
SaveExploits0References8
The Hacker News
The Hacker News
•added 2022/11/16 7:35 a.m.•30 views

Warning: New RapperBot Campaign Aims to Launch DDoS Attacks at Game Servers

Cybersecurity researchers have unearthed new samples of malware called RapperBot that are being used to build a botnet capable of launching Distributed Denial of Service DDoS attacks against game servers. "In fact, it turns out that this campaign is less like RapperBot than an older campaign that...

1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/11/15 12:00 a.m.•35 views

Cisco AsyncOS Privilege Escalation

The vulnerability in the web interface for managing the Cisco AsyncOS operating system of the Cisco Email Security Appliance ESA, the Cisco Secure Email and Web Manager, and the Cisco Secure Web Appliance formerly Cisco Web Security Appliance WSA relates to the use of a hard-coded cryptographic...

9CVSS7.6AI score0.00797EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/11/10 12:00 a.m.•25 views

PT-2022-6348 · Dell Emc · Dell Emc Scg Policy Manager

Name of the Vulnerable Software and Affected Versions: Dell EMC SCG Policy Manager versions 5.10 through 5.12 Description: The issue is related to a Hard-coded Cryptographic Key, which could allow an attacker with knowledge of the hard-coded sensitive information to potentially exploit this...

9.8CVSS9.3AI score0.00485EPSS
SaveExploits0References5
Rows per page
Query Builder