4061 matches found
Assertions and array length checks can be manipulated maliciously, causing issues.
Lines of code Vulnerability details Impact There are some assertions and requirements on array lengths to prevent mismatched data. But assertions like require statements can potentially be used maliciously in some cases. These are a few ways a malicious user could try to exploit the asserts,...
Vulnerabilities fixed in Siemens products
Siemens has fixed vulnerabilities in QMS Automotive, Parasolid, WIBU, Teamcenter, JT2Go, Spectrum Power 7, SIMATIC, SIPLUS and RUGGEDCOM products. The vulnerabilities allow a malicious potentially able to carry out attacks that could result in the following categories of damage: Denial-of-Service...
Code injection
OctoPrint is a web interface for 3D printers. OctoPrint versions up until and including 1.9.2 contain a vulnerability that allows malicious admins to configure a specially crafted GCODE script that will allow code execution during rendering of that script. An attacker might use this to extract da...
PYSEC-2023-195
OctoPrint is a web interface for 3D printers. OctoPrint versions up until and including 1.9.2 contain a vulnerability that allows malicious admins to configure a specially crafted GCODE script that will allow code execution during rendering of that script. An attacker might use this to extract da...
CVE-2023-41047 Improper Neutralization of Special Elements Used in a Template Engine in OctoPrint
OctoPrint is a web interface for 3D printers. OctoPrint versions up until and including 1.9.2 contain a vulnerability that allows malicious admins to configure a specially crafted GCODE script that will allow code execution during rendering of that script. An attacker might use this to extract da...
CVE-2023-41047
OctoPrint is a web interface for 3D printers. OctoPrint versions up until and including 1.9.2 contain a vulnerability that allows malicious admins to configure a specially crafted GCODE script that will allow code execution during rendering of that script. An attacker might use this to extract da...
CVE-2023-45247
CVE-2023-45247 affects Acronis Cyber Protect Cloud Agent (Linux/macOS/Windows) before build 36497 and Acronis Cyber Protect 16 before build 39169 (also Acronis Agent variants before 36497 per PT-2023-5801). The vulnerability stems from missing authorization, enabling sensitive information disclos...
OctoPrint Security Vulnerability
OctoPrint is an application. that provides a fast web interface for controlling consumer 3D printers. A security vulnerability exists in OctoPrint versions prior to 1.9.3, which originated from a vulnerability that allows an attacker to extract data managed by OctoPrint or manipulate data managed...
CVE-2023-45246
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 36343, Acronis Cyber Protect 16 Linux, macOS, Windows before build 39169...
CVE-2023-45246
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 36343, Acronis Cyber Protect 16 Linux, macOS, Windows before build 39169...
Acronis Cyber Protect and Acronis Cyber Protect Cloud Agent Authorization Issues Vulnerability
Acronis Cyber Protect and Acronis Cyber Protect Cloud Agent are both products of Acronis, Switzerland.Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise. Combining backup, anti-malware, network security and endpoint management features such as vulnerabili...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information disclosure and manipulation due to missing authorization
...
Acronis Agent Security Vulnerability
Acronis Agent is an agent software from Acronis Singapore. Acronis Agent suffers from a security vulnerability that stems from a lack of authorization leading to the disclosure and manipulation of sensitive information...
Acronis Agent Security Vulnerability
Acronis Agent is an agent software from Acronis Singapore. Acronis Agent suffers from a security vulnerability that stems from a lack of authorization leading to the disclosure and manipulation of sensitive information...
Sensitive information disclosure and manipulation due to missing authorization
...
Authorization
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40713...
Acronis Agent Security Vulnerability
Acronis Agent is an agent software from Acronis Singapore. Acronis Agent suffers from a security vulnerability that stems from a lack of authorization leading to the disclosure and manipulation of sensitive information...