CVE-2022-31509: Improper Limitation of a Pathname to a Restricted Directory

The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

dc-bandits.de Cross Site Scripting vulnerability OBB-2685183

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Secheron SEPCOS Control and Protection Relay Elevation of Privilege Vulnerability

Secheron SEPCOS Control and Protection Relay is a relay from Secheron. Control and protect your DC panels and contact lines from short circuits and other electrical faults, and benefit from enhanced communication capabilities.An elevation of privilege vulnerability exists in the Secheron SEPCOS...

Secheron SEPCOS Control and Protection Relay Weak Password Vulnerability

Secheron SEPCOS Control and Protection Relay is a relay from Secheron. Control and protect your DC panels and contact lines from short circuits and other electrical faults, and benefit from enhanced communication capabilities.The Secheron SEPCOS Control and Protection Relay has a weak password...

Malicious code in fossa-dc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc48c6e613a443d6df8f223800c5ddb65bbd98d2a4a436ae5dadc30701be04b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3118 Malicious code in fossa-dc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc48c6e613a443d6df8f223800c5ddb65bbd98d2a4a436ae5dadc30701be04b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MINMAX SQL Injection Vulnerability

MINMAX is a high power density 10W DC-DC converter for space-critical applications from China-based MINMAX. MINMAX is vulnerable to SQL injection, which can be exploited by attackers to cause a sql injection issue through manipulation of the id parameter in /newsDia.php...

CVE-2022-1669 Circutor COMPACT DC-S BASIC

A buffer overflow vulnerability has been detected in the firewall function of the device management web portal. The device runs a CGI binary index.cgi to offer a management web application. Once authenticated with valid credentials in this web portal, a potential attacker could submit any "Addres...

samba security, bug fix, and enhancement update

4.15.5-5 - resolves: rhbz2064325 - Fix 'create krb5 conf = yes' when a KDC has a single IP address. 4.15.5-4 - resolves: rhbz2057503 - Fix winbind kerberos ticket refresh 4.15.5-3 - related: rhbz1979959 - Fix typo in testparm output 4.15.5-2 - resolves: rhbz1979959 - Improve idmap autorid sanity...

Circutor COMPACT DC-S BASIC 安全漏洞

Circutor COMPACT DC-S BASIC is a compact DC concentrator from Circutor Spain. A security vulnerability exists in Circutor COMPACT DC-S BASIC CIRCDCv1.2.17 version, which originates from a buffer overflow in the firewall function of the provisioning management portal. An attacker could send a long...

CVE-2021-33078

Race condition within a thread in firmware for some IntelR OptaneTM SSD and IntelR SSD DC Products may allow a privileged user to potentially enable denial of service via local access...

CVE-2021-33078

Race condition within a thread in firmware for some IntelR OptaneTM SSD and IntelR SSD DC Products may allow a privileged user to potentially enable denial of service via local access...

CVE-2021-33075

Race condition in firmware for some IntelR OptaneTM SSD, IntelR OptaneTM SSD DC and IntelR SSD DC Products may allow a privileged user to potentially enable denial of service via local access...

CVE-2021-33074

Protection mechanism failure in firmware for some IntelR SSD, IntelR SSD DC and IntelR OptaneTM SSD Products may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2021-33075

CVE-2021-33075 describes a race condition in the firmware of several Intel SSD/Optane products that may let a privileged local user cause a denial of service. Affected families include Intel Optane SSD DC D4800X, P4800X/P4801X, P5800X, and SSD DC lines, plus Optane Memory H10/H20. The Intel advis...

CVE-2021-33078

CVE-2021-33078 involves a race condition in the firmware of Intel Optane SSD and Intel SSD DC products. The issue, described across multiple sources (Intel/Solidigm advisory, Red Hat, CVE lists), is a race condition within a firmware thread that may allow a privileged local attacker to cause a de...

CVE-2021-33077: Undefined Security Weakness

Insufficient control flow management in firmware for some IntelR SSD, IntelR OptaneTM SSD and IntelR SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2021-33080: Improper Removal of Sensitive Information Before Storage or Transfer

Exposure of sensitive system information due to uncleared debug information in firmware for some IntelR SSD DC, IntelR OptaneTM SSD and IntelR OptaneTM SSD DC Products may allow an unauthenticated user to potentially enable information disclosure or escalation of privilege via physical access...

CVE-2021-33069: Improper Resource Shutdown or Release

Improper resource shutdown or release in firmware for some IntelR SSD, IntelR SSD DC, IntelR OptaneTM SSD and IntelR OptaneTM SSD DC may allow a privileged user to potentially enable denial of service via local access...

CVE-2021-33078: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition within a thread in firmware for some IntelR OptaneTM SSD and IntelR SSD DC Products may allow a privileged user to potentially enable denial of service via local access...