Lucene search
K

1576 matches found

OpenVAS
OpenVAS
added 2020/05/02 12:0 a.m.46 views

Fedora: Security Advisory for git (FEDORA-2020-4e093619bb)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.1AI score
Exploits0References2
CNVD
CNVD
added 2020/04/30 12:0 a.m.3 views

Authorization Bypass Vulnerability in Configuration King Real-Time Database

Configuration King, i.e. Configuration King development monitoring system software, is a new type of industrial automatic control system, which replaces the traditional closed system with an integrated system composed of standard industrial computer software and hardware platforms. There is an...

6.6AI score
Exploits0
OpenVAS
OpenVAS
added 2020/04/30 12:0 a.m.76 views

Fedora: Security Advisory for git (FEDORA-2020-f6b3b6fb18)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.1AI score
Exploits0References2
CNVD
CNVD
added 2020/04/29 12:0 a.m.8 views

Unnamed Vulnerability in GitLab

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab versions 10.8...

5.3CVSS6.4AI score0.00769EPSS
Exploits0References1
CNVD
CNVD
added 2020/04/23 12:0 a.m.3 views

ABB System 800xA Base License Issue Vulnerability

ABB System 800xA Base is a distributed control system from ABB Switzerland for the industrial control industry. An authorization issue vulnerability exists in ABB System 800xA Base. An attacker could use this vulnerability to read and modify registry settings related to control system...

7.8CVSS6.8AI score0.00285EPSS
Exploits0References1
OSV
OSV
added 2020/04/22 3:15 p.m.5 views

CVE-2020-8474

Weak Registry permissions in ABB System 800xA Base allow low privileged users to read and modify registry settings related to control system functionality, allowing an authenticated attacker to cause system functions to stop or malfunction...

7.8CVSS7.1AI score0.00285EPSS
Exploits0References1
Prion
Prion
added 2020/04/22 3:15 p.m.19 views

Design/Logic Flaw

Weak Registry permissions in ABB System 800xA Base allow low privileged users to read and modify registry settings related to control system functionality, allowing an authenticated attacker to cause system functions to stop or malfunction...

4.6CVSS7.2AI score0.00285EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2020/04/22 2:18 p.m.69 views

CVE-2020-8474

CVE-2020-8474 concerns ABB System 800xA Base, where an incorrect permission assignment allows low-privilege users to read/modify registry settings that control system functionality. The vulnerability can be exploited by an authenticated user with local access to cause system functions to stop or ...

7.8CVSS7.4AI score0.00285EPSS
Exploits0References1Affected Software1
0day.today
0day.today
added 2020/04/21 12:0 a.m.32 views

P5 FNIP-8x16A FNIP-4xSH 1.0.20 - Cross-Site Request Forgery (Add Admin) Vulnerability

Exploit for hardware platform in category web applications Exploit Title: P5 FNIP-8x16A FNIP-4xSH 1.0.20 - Cross-Site Request Forgery Add Admin Google Dork:jizhicms Exploit Author: iej1ctk1g Product web page: https://www.p5.hu Affected version: 1.0.20, 1.0.11 CVE : N/A !-- P5 FNIP-8x16A/FNIP-4xSH...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2020/04/21 12:0 a.m.554 views

P5 FNIP-8x16A FNIP-4xSH 1.0.20 - Cross-Site Request Forgery (Add Admin)

Exploit Title: P5 FNIP-8x16A FNIP-4xSH 1.0.20 - Cross-Site Request Forgery Add Admin Google Dork:jizhicms Date: 2020-04-18 Exploit Author: iej1ctk1g Product web page: https://www.p5.hu Affected version: 1.0.20, 1.0.11 CVE : N/A !-- P5 FNIP-8x16A/FNIP-4xSH CSRF Stored Cross-Site Scripting Vendor: ...

7.4AI score
Exploits0
OpenVAS
OpenVAS
added 2020/04/19 12:0 a.m.55 views

Fedora: Security Advisory for git (FEDORA-2020-cdef88bb89)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.1AI score0.10047EPSS
Exploits2References2
CNVD
CNVD
added 2020/04/15 12:0 a.m.1 views

Buffer Overflow Vulnerability in GE Control System ACTIVEX Control (CNVD-2020-26344)

General Electric GE is a global digital industrial company that creates software-defined machines that are connected, responsive and predictive to transform traditional industries. A buffer overflow vulnerability exists in the ACTIVEX control of the GE control system, which can be exploited by an...

7.3AI score
Exploits0
CNVD
CNVD
added 2020/04/15 12:0 a.m.1 views

Buffer overflow vulnerability in GE control system ACTIVEX control (CNVD-2020-26342)

General Electric GE is a global digital industrial company that creates software-defined machines that are connected, responsive and predictive to transform traditional industries. A buffer overflow vulnerability exists in the ACTIVEX control of the GE control system, which can be exploited by an...

7.3AI score
Exploits0
CNVD
CNVD
added 2020/04/01 12:0 a.m.2 views

Denial of Service Vulnerability in Configuration King HistorySvr

Configuration King, i.e. Configuration King development monitoring system software, is a new type of industrial automatic control system, which replaces the traditional closed system with an integrated system composed of standard industrial computer software and hardware platforms. There is a...

7.5AI score
Exploits0
Circl
Circl
added 2020/03/30 9:47 a.m.2 views

CVE-2019-5105

creationtimestamp| type| source ---|---|--- 2020-03-30 09:47:43+00:00| seen| https://t.me/cibsecurity/10817 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01...

7.5CVSS7.3AI score0.02154EPSS
Exploits1References2
NVD
NVD
added 2020/03/30 5:15 a.m.10 views

CVE-2020-5551

Toyota 2017 Model Year DCU Display Control Unit allows an unauthenticated attacker within Bluetooth range to cause a denial of service attack and/or execute an arbitrary command. The affected DCUs are installed in Lexus LC, LS, NX, RC, RC F, TOYOTA CAMRY, and TOYOTA SIENNA manufactured in the...

8.8CVSS8.8AI score0.01385EPSS
Exploits1References2
Prion
Prion
added 2020/03/30 5:15 a.m.12 views

Design/Logic Flaw

Toyota 2017 Model Year DCU Display Control Unit allows an unauthenticated attacker within Bluetooth range to cause a denial of service attack and/or execute an arbitrary command. The affected DCUs are installed in Lexus LC, LS, NX, RC, RC F, TOYOTA CAMRY, and TOYOTA SIENNA manufactured in the...

5.4CVSS8.7AI score0.01385EPSS
Exploits1References2
ICS
ICS
added 2020/03/26 12:0 a.m.48 views

Advantech WebAccess

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Advantech Equipment: WebAccess Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability may allow remote code execution. 3. TECHNICAL DETAILS 3.1...

8.8CVSS9.3AI score0.02123EPSS
Exploits0References5
CNVD
CNVD
added 2020/03/24 12:0 a.m.1 views

Schneider Electric Interactive Graphical SCADA System Path Traversal Vulnerability

Schneider Electric Interactive Graphical SCADA System IGSS is a SCADA Data Acquisition and Supervisory System system for monitoring and controlling industrial processes from Schneider Electric, France. A path traversal vulnerability exists in Schneider Electric IGSS Interactive Graphical SCADA...

7.5CVSS6.8AI score0.03966EPSS
Exploits0References1
ICS
ICS
added 2020/03/12 12:0 a.m.80 views

ABB Asset Suite

1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: ABB Equipment: Asset Suite Vulnerability: Authorization Bypass Through User-Controlled Key 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker access to...

7.1CVSS7AI score0.00779EPSS
Exploits0References5
Rows per page
Query Builder