1607 matches found
Windows Connected Devices Platform Service Information Disclosure Vulnerability
...
PT-2022-4075 · Microsoft · Windows Connected Devices Platform Service +1
Name of the Vulnerable Software and Affected Versions: Windows Connected Devices Platform Service CDPSvc affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Connected Devices Platform Service CDPSvc of Windows operating...
Microsoft Windows Connected Devices Platform Service 竞争条件问题漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A competitive conditions issue vulnerability exists in Microsoft Windows Connected Devices Platform Service. The following products and editions are affected:Windows 10 Version 1809 for...
5 Reasons You Should Learn About Cyber Security
By Owais Sultan In this technological era, the world has been converted into a global village with everything connected to everything.… This is a post from HackRead.com Read the original post: 5 Reasons You Should Learn About Cyber Security...
SICUNET Access Controller 安全漏洞
SICUNET Access Controller is a browser-based access from SICUNET China that allows you to connect your panel to our cloud servers so that you can access your panel without firewall settings. A security vulnerability exists in SICUNET Access Controller version 0.32-05z, which stems from a problem...
CVE-2022-29620
FileZilla v3.59.0 allows attackers to obtain cleartext passwords of connected SSH or FTP servers via a memory dump.- NOTE: the vendor does not consider this a vulnerability...
PT-2022-19732 · Filezilla · Filezilla
Name of the Vulnerable Software and Affected Versions: FileZilla version 3.59.0 Description: The issue allows attackers to obtain cleartext passwords of connected SSH or FTP servers via a memory dump. It is noted that the vendor does not consider this a vulnerability. Recommendations: For FileZil...
Lumos System Can Find Hidden Cameras and IoT Devices in Your Airbnb or Hotel Room
A group of academics has devised a system that can be used on a phone or a laptop to identify and locate Wi-Fi-connected hidden IoT devices in unfamiliar physical spaces. With hidden cameras being increasingly used to snoop on individuals in hotel rooms and Airbnbs, the goal is to be able to...
Malicious code in pp-mp-connected-path (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49db9986ebf217c7ccbc304c8d4eaee13ec495c5891270c696f80b69f479b830 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-1118
Connected Components Workbench v13.00.00 and prior, ISaGRAF Workbench v6.0 though v6.6.9, and Safety Instrumented System Workstation v1.2 and prior for Trusted Controllers do not limit the objects that can be deserialized. This allows attackers to craft a malicious serialized object that, if open...
Remote code execution
Connected Components Workbench v13.00.00 and prior, ISaGRAF Workbench v6.0 though v6.6.9, and Safety Instrumented System Workstation v1.2 and prior for Trusted Controllers do not limit the objects that can be deserialized. This allows attackers to craft a malicious serialized object that, if open...
CVE-2022-1118
CVE-2022-1118 affects Rockwell Automation components: Connected Components Workbench (v13.00.00 and prior), ISaGRAF Workbench (v6.0–v6.6.9), and Safety Instrumented System Workstation (v1.2 and prior for Trusted Controllers). The issue is deserialization of untrusted data, allowing a crafted seri...
CVE-2022-1118 Rockwell Automation ISaGRAF Deserialization of Untrusted Data
Connected Components Workbench v13.00.00 and prior, ISaGRAF Workbench v6.0 though v6.6.9, and Safety Instrumented System Workstation v1.2 and prior for Trusted Controllers do not limit the objects that can be deserialized. This allows attackers to craft a malicious serialized object that, if open...
GHSA-2CM5-F78C-H2C8 Missing permission checks in Jenkins Distributed Fork Plugin
It was found that there were no permission checks performed in the Distributed Fork plugin before and including 1.5.0 for Jenkins that provides the dist-fork CLI command beyond the basic check for Overall/Read permission, allowing anyone with that permission to run arbitrary shell commands on all...
CVE-2022-22783
A vulnerability in Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 and On-Premise Meeting Connector MMR version 4.8.102.20220310 exposes process memory fragments to connected clients, which could be observed by a passive attacker...
Platform Update: Build the Future on Akamai
Today, technology is infused into nearly everything we do. The data behind personalized recommendations, connected devices, and wearables has changed how we engage with the world around us — whether we’re driving to a new destination, purchasing from a new retailer, or monitoring our health...
Zoom On-Premise Meeting Connector Controller安全漏洞
Zoom On-Premise Meeting Connector Controller is an on-premise meeting connector from Zoom USA. A security vulnerability exists in Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 and On-Premise Meeting Connector MMR version 4.8. 102.20220310 A security vulnerability exists th...
PT-2022-15675 · Zoom · Zoom On-Premise Meeting Connector Mmr +1
Name of the Vulnerable Software and Affected Versions: Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 Zoom On-Premise Meeting Connector MMR version 4.8.102.20220310 Description: A vulnerability in Zoom On-Premise Meeting Connector exposes process memory fragments to connect...
The vulnerabilities of the software for designing and configuring controllers from the CCW platform, the SISW workstation for automated safety systems, and the ISaGRAF Workbench development environment for programmable logic controllers from Rockwell Automation allow attackers to execute arbitrary code by restoring unreliable data into memory.
The vulnerabilities of the software for designing and configuring controllers in the Connected Components Workbench, the workstations for automated safety systems called Safety Instrumented Systems Workstations, and the application development environment for programmable logic controllers in the...