Lucene search
+L

1439 matches found

UbuntuCve
UbuntuCve
•added 2019/12/17 2:15 p.m.•33 views

CVE-2014-8178

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for attackers to poison the image cache via a crafted image in pull or push commands...

5.5CVSS6.8AI score0.00493EPSS
SaveExploits0References1
OSV
OSV
•added 2019/12/17 2:15 p.m.•21 views

UBUNTU-CVE-2014-8178

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for attackers to poison the image cache via a crafted image in pull or push commands...

5.5CVSS6.7AI score0.00493EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/12/17 1:49 p.m.•36 views

CVE-2019-18825

Barco ClickShare Huddle CS-100 devices before 1.9.0 and CSE-200 devices before 1.9.0 have incorrect Credentials Management. The ClickShare Base Unit implements encryption at rest using encryption keys which are shared across all ClickShare Base Units of models CS-100 & CSE-200...

7.7AI score0.00603EPSS
SaveExploits1References2
CVE
CVE
•added 2019/12/17 1:49 p.m.•67 views

CVE-2019-18825

Barco ClickShare Huddle CS-100 devices before 1.9.0 and CSE-200 devices before 1.9.0 are affected by CVE-2019-18825 due to incorrect Credentials Management. The ClickShare Base Unit uses encryption-at-rest keys that are shared across all Base Units of models CS-100 & CSE-200, enabling potential i...

7.5CVSS7.6AI score0.00603EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2019/12/17 12:00 a.m.•5 views

PT-2019-15682

Name of the Vulnerable Software and Affected Versions Barco ClickShare Huddle CS-100 versions prior to 1.9.0 Barco ClickShare CSE-200 versions prior to 1.9.0 Description The issue concerns incorrect Credentials Management in the affected devices. The ClickShare Base Unit uses encryption at rest...

7.5CVSS0.00603EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2019/12/17 12:00 a.m.•88 views

Debian: Security Advisory (DSA-4585-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.6AI score0.02281EPSS
SaveExploits3References4
NVD
NVD
•added 2019/12/16 8:15 p.m.•29 views

CVE-2019-18269

Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability...

9.8CVSS9.6AI score0.01049EPSS
SaveExploits0References2
NVD
NVD
•added 2019/12/16 8:15 p.m.•29 views

CVE-2019-13533

In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could monitor traffic between the PLC and the controller and replay requests that could result in the opening and closing of industrial valves...

8.1CVSS8.5AI score0.00873EPSS
SaveExploits0References1
Prion
Prion
•added 2019/12/16 8:15 p.m.•24 views

Design/Logic Flaw

In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could monitor traffic between the PLC and the controller and replay requests that could result in the opening and closing of industrial valves...

6.8CVSS8.4AI score0.00873EPSS
SaveExploits0References1
Prion
Prion
•added 2019/12/16 8:15 p.m.•28 views

Authentication flaw

In Omron PLC CS series, all versions, Omron PLC CJ series, all versions, and Omron PLC NJ series, all versions, the software does not implement sufficient measures to prevent multiple failed authentication attempts within in a short time frame, making it more susceptible to brute force attacks...

5CVSS9.4AI score0.01307EPSS
SaveExploits0References1
Prion
Prion
•added 2019/12/16 8:15 p.m.•27 views

Command injection

In Omron PLC CJ series, all versions and Omron PLC CS series, all versions, an attacker could spoof arbitrary messages or execute commands...

7.5CVSS9.4AI score0.0211EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/12/16 7:27 p.m.•45 views

CVE-2019-18261

In Omron PLC CS series, all versions, Omron PLC CJ series, all versions, and Omron PLC NJ series, all versions, the software does not implement sufficient measures to prevent multiple failed authentication attempts within in a short time frame, making it more susceptible to brute force attacks...

9.5AI score0.01307EPSS
SaveExploits0References1
CVE
CVE
•added 2019/12/16 7:27 p.m.•84 views

CVE-2019-18261

The CVE-2019-18261 issue affects Omron PLC CS series, CJ series, and NJ series (all versions) where the software does not adequately limit repeated authentication attempts, making brute-force compromise more feasible. This is categorized as CWE-307 (Improper Restriction of Excessive Authenticatio...

9.8CVSS9.4AI score0.01307EPSS
SaveExploits0References1Affected Software3
Vulnrichment
Vulnrichment
•added 2019/12/16 7:25 p.m.•14 views

CVE-2019-13533

In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could monitor traffic between the PLC and the controller and replay requests that could result in the opening and closing of industrial valves...

7.2AI score0.00873EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2019/12/16 7:21 p.m.•13 views

CVE-2019-18269

Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability...

7.3AI score0.01049EPSS
SaveExploits0References2
CVE
CVE
•added 2019/12/16 7:21 p.m.•103 views

CVE-2019-18269

CVE-2019-18269 affects Omron CS and CJ series PLCs. The vulnerability is an unrestricted externally accessible lock, allowing remote interaction with PLCs (ICSA-19-346-02 indicates remote exploitation risk). Affected products are CS and CJ series PLCs (all versions), per multiple sources, with th...

9.8CVSS8.5AI score0.01049EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
•added 2019/12/16 7:19 p.m.•40 views

CVE-2019-18259

In Omron PLC CJ series, all versions and Omron PLC CS series, all versions, an attacker could spoof arbitrary messages or execute commands...

9.5AI score0.0211EPSS
SaveExploits0References1
CVE
CVE
•added 2019/12/16 7:19 p.m.•74 views

CVE-2019-18259

CVE-2019-18259 affects Omron PLC CJ series and CS series (all versions). The vulnerability enables an attacker to spoof arbitrary messages or execute commands against the PLC, i.e., an authentication bypass by spoofing. NVD reports CVSSv3.1 base score 9.8 (CRITICAL) with network access, no privil...

9.8CVSS9.3AI score0.0211EPSS
SaveExploits0References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/16 12:00 a.m.•5 views

CVE-2019-18269: Unrestricted Externally Accessible Lock

Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability...

9.8CVSS8.3AI score0.01049EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/16 12:00 a.m.•4 views

CVE-2019-13533: Authentication Bypass by Capture-replay

In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could monitor traffic between the PLC and the controller and replay requests that could result in the opening and closing of industrial valves...

8.1CVSS7.5AI score0.00873EPSS
SaveExploits0References4
Rows per page
Query Builder