Lucene search
K

18 matches found

NVD
NVD
added 2026/02/23 6:16 a.m.2 views

CVE-2026-2972

A vulnerability was determined in a466350665 Smart-SSO up to 2.1.1. This affects the function Save of the file smart-sso-server/src/main/java/openjoe/smart/sso/server/controller/admin/UserController.java of the component Role Edit Page. Executing a manipulation can lead to cross site scripting. T...

5.4CVSS0.00011EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/02/12 12:0 a.m.3 views

Dell iDRAC Service Module 访问控制错误漏洞

The Dell iDRAC Service Module is a lightweight software module developed by the American company Dell. It is designed to enhance the functionality of iDRAC Integrated Dell Remote Access Controller on Dell PowerEdge servers. There were access control vulnerabilities in versions of the Dell iDRAC...

7.8CVSS5.8AI score0.00018EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/27 1:32 p.m.4 views

CVE-2025-34502

Deck Mate 2 lacks a verified secure-boot chain and runtime integrity validation for its controller and display modules. Without cryptographic boot verification, an attacker with physical access can modify or replace the bootloader, kernel, or filesystem and gain persistent code execution on reboo...

7CVSS7.4AI score0.00032EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/25 12:30 a.m.3 views

EUVD-2025-35894

Deck Mate 2 lacks a verified secure-boot chain and runtime integrity validation for its controller and display modules. Without cryptographic boot verification, an attacker with physical access can modify or replace the bootloader, kernel, or filesystem and gain persistent code execution on reboo...

7CVSS6.9AI score0.00032EPSS
Exploits0References3
NVD
NVD
added 2022/04/07 11:15 a.m.11 views

CVE-2021-46417

Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privileges in Franklin Fueling Systems Colibri Controller Module 1.8.19.8580...

7.8CVSS0.92171EPSS
Exploits7References3
Prion
Prion
added 2022/04/07 11:15 a.m.16 views

Path traversal

Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privileges in Franklin Fueling Systems Colibri Controller Module 1.8.19.8580...

7.8CVSS7.3AI score0.92171EPSS
Exploits7References3Affected Software1
Cvelist
Cvelist
added 2022/04/07 10:55 a.m.14 views

CVE-2021-46417

Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privileges in Franklin Fueling Systems Colibri Controller Module 1.8.19.8580...

7.6AI score0.92171EPSS
Exploits7References3
CNNVD
CNNVD
added 2022/04/07 12:0 a.m.1 views

Franklin Fueling Systems 路径遍历漏洞

Franklin Fueling Systems is a fueling system in the United States. A security vulnerability exists in Franklin Fueling Systems Colibri Controller Module version 1.8.19.8580, which stems from an insecure handling of the download function resulting in a path traversal issue. An attacker could explo...

7.8CVSS7.4AI score0.92171EPSS
Exploits7References8
NVD
NVD
added 2021/10/08 5:15 p.m.6 views

CVE-2021-20600

Uncontrolled resource consumption in Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V Firmware Versions "16" and prior allows a remote unauthenticated attacker to cause a denial-of-service DoS condition by sending a large number of packets in a short time while the module...

7.1CVSS0.00517EPSS
Exploits0References3
Cvelist
Cvelist
added 2021/10/08 4:42 p.m.16 views

CVE-2021-20600

Uncontrolled resource consumption in Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V Firmware Versions "16" and prior allows a remote unauthenticated attacker to cause a denial-of-service DoS condition by sending a large number of packets in a short time while the module...

6AI score0.00517EPSS
Exploits0References3
Prion
Prion
added 2020/11/02 9:15 p.m.16 views

Design/Logic Flaw

Improper neutralization of argument delimiters in a command 'Argument Injection' vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Modul...

3.3CVSS7.2AI score0.00171EPSS
Exploits0References3
Cvelist
Cvelist
added 2020/10/30 3:35 a.m.13 views

CVE-2020-5657

Improper neutralization of argument delimiters in a command 'Argument Injection' vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Modul...

6.6AI score0.00171EPSS
Exploits0References3
CNVD
CNVD
added 2020/04/17 12:0 a.m.2 views

Schneider Electric Tricon TCM Model Resource Management Error Vulnerability

Schneider Electric Tricon TCM Model 4351 and others are a communication module from Schneider Electric, France. A security vulnerability exists in the Schneider Electric Tricon TCM Model v10.3.x version and v10.4.x version. An attacker could exploit the vulnerability to reset the TCM module...

7.5CVSS6.8AI score0.003EPSS
Exploits0References1
Prion
Prion
added 2020/02/17 7:15 a.m.9 views

Design/Logic Flaw

Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 MELSEC-Q Series C Controller ModuleQ24DHCCPU-V, Q24DHCCPU-VG User Ethernet port CH1, CH2: First 5 digits of serial number 21121 or before, MELSEC iQ-R Series C Controller Module / C Intelligent Function ModuleR12CCPU-V Ethern...

7.5CVSS9AI score0.0077EPSS
Exploits0References2Affected Software5
CVE
CVE
added 2020/02/17 6:55 a.m.106 views

CVE-2020-5531

CVE-2020-5531 affects Mitsubishi Electric MELSEC C Controller Module, MELIPC MI5000, MELSEC-Q C Controller Module (Q24DHCCPU-V/VG), MELSEC iQ-R C Controller Module/C Intelligent Function Module (R12CCPU-V, RD55UP06-V) and MELIPC MI5000 (MI5122-VW). The vulnerability enables remote DoS and malware...

9.8CVSS9AI score0.0077EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/07/31 12:0 a.m.12 views

Honeywell C200 Controller Module

Binary data 764872.prm...

7.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:0 a.m.8 views

GE IC695PNC001 PACSystems RX3i PROFINET Controller Module Detection

Binary data 755481.prm...

7.3AI score
Exploits0
CNVD
CNVD
added 2016/04/30 12:0 a.m.0 views

Cisco Application Policy Infrastructure Controller Enterprise Module Security Bypass Vulnerability

The Cisco Application Policy Infrastructure Controller Enterprise Module is a suite of applications that provide policy-based use for automated configuration of end-to-end infrastructure controllers. A security bypass vulnerability exists in the API of the Cisco Application Policy Infrastructure...

7.5CVSS6.9AI score0.00235EPSS
Exploits0References1
Rows per page
Query Builder