Lucene search
+L

306 matches found

Positive Technologies
Positive Technologies
•added 2023/04/24 12:00 a.m.•14 views

PT-2023-17125 · WordPress · Custom Post Type Ui

Name of the Vulnerable Software and Affected Versions: Custom Post Type UI WordPress plugin versions prior to 1.13.5 Description: The issue arises from the plugin's failure to properly check for CSRF when sending debug information to a user-supplied email. This could allow attackers to make a...

6.5CVSS9.5AI score0.00352EPSS
SaveExploits1References7
SUSE CVE
SUSE CVE
•added 2023/02/15 4:29 a.m.•7 views

SUSE CVE-2018-7568

The parsedie function in dwarf1.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service integer overflow and application crash via an ELF file with corrupt dwarf1 debug information, as demonstrated by nm...

3.3CVSS6.9AI score0.01925EPSS
SaveExploits1References23
OSV
OSV
•added 2023/02/10 8:15 p.m.•18 views

CVE-2022-34364

Dell BSAFE SSL-J, versions before 6.5 and version 7.0 contain a debug message revealing unnecessary information vulnerability. This may lead to disclosing sensitive information to a locally privileged user...

4.4CVSS5.8AI score0.00186EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2023/01/25 12:00 a.m.•50 views

Siemens in SCALANCE Products (CVE-2022-46140)

Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system. This plugin only works with Tenable.ot. Please visit...

9.8CVSS6.6AI score0.02427EPSS
SaveExploits0References3
OSV
OSV
•added 2022/12/13 4:15 p.m.•16 views

CVE-2022-46140

Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system...

7.1CVSS5.8AI score0.00239EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/12/13 12:00 a.m.•16 views

PT-2022-27759 · Siemens · Ruggedcom Rm1224 Lte(4G) Eu +151

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns the use of a weak encryption scheme to encrypt the debug zip file. This weakness could allow an authenticated attacker to decrypt the...

7.1CVSS6.8AI score0.00239EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2022/12/13 12:00 a.m.•9 views

CVE-2022-46140

Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system...

7.1CVSS6.2AI score0.00239EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/12/13 12:00 a.m.•37 views

CVE-2022-46140

Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system...

7.1CVSS6.4AI score0.00239EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2022/09/25 11:13 p.m.•21 views

Security Bulletin: The IBM Data Studio Help System may display debug information if an input parameter is out of range.

Abstract IBM Data Studio version 3.1.1 and 3.2 include Eclipse 3.6 components that provide functionality to display the help. These components have a potential vulnerability where debug information may be displayed if an input parameter is out of range. Content VULNERABILITY DETAILS: CVE ID:...

5CVSS8.9AI score0.02153EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2022/08/10 12:15 p.m.•30 views

CVE-2021-46304

A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C All versions, CP-8000 MASTER MODULE WITH I/O -40/+70°C All versions, CP-8021 MASTER MODULE All versions, CP-8022 MASTER MODULE WITH GPRS All versions. The component allows to activate a web server module which provide...

7.5CVSS0.0067EPSS
SaveExploits0References1
Prion
Prion
•added 2022/08/10 12:15 p.m.•20 views

Design/Logic Flaw

A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C All versions, CP-8000 MASTER MODULE WITH I/O -40/+70°C All versions, CP-8021 MASTER MODULE All versions, CP-8022 MASTER MODULE WITH GPRS All versions. The component allows to activate a web server module which provide...

5CVSS7.3AI score0.0067EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2022/08/10 11:17 a.m.•4 views

CVE-2021-46304

A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C All versions, CP-8000 MASTER MODULE WITH I/O -40/+70°C All versions, CP-8021 MASTER MODULE All versions, CP-8022 MASTER MODULE WITH GPRS All versions. The component allows to activate a web server module which provide...

7.3AI score0.0067EPSS
SaveExploits0References1
CVE
CVE
•added 2022/08/10 11:17 a.m.•93 views

CVE-2021-46304

CVE-2021-46304 affects Siemens SICAM A8000/Web Server Module products (CP-8000 series and CP-8021/CP-8022). The issue is improper access control: the web server module can be activated to provide unauthenticated access to its web pages, enabling retrieval of debug information (e.g., internal netw...

7.5CVSS6.5AI score0.0067EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/08/10 12:00 a.m.•16 views

Siemens SICAM A8000 CP-8000 安全漏洞

The SICAM A8000 RTU Remote Terminal Unit series is a modular device family for remote control and automation applications in all energy supply areas.An authentication bypass vulnerability exists in the Siemens SICAM A8000 Web Server Module, which is caused by the component allowing the activation...

7.5CVSS7AI score0.0067EPSS
SaveExploits0References4
CNVD
CNVD
•added 2022/08/09 12:00 a.m.•72 views

Siemens SICAM A8000 Web Server Module Authentication Bypass Vulnerability

The SICAM A8000 RTU Remote Terminal Unit series is a modular device family for remote control and automation applications in all energy supply areas.An authentication bypass vulnerability exists in the Siemens SICAM A8000 Web Server Module, which is caused by the component allowing the activation...

7.5CVSS3AI score0.0067EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/08/09 12:00 a.m.•16 views

PT-2022-4104

Name of the Vulnerable Software and Affected Versions CP-8000 MASTER MODULE WITH I/O -25/+70°C All versions CP-8000 MASTER MODULE WITH I/O -40/+70°C All versions CP-8021 MASTER MODULE All versions CP-8022 MASTER MODULE WITH GPRS All versions Description A vulnerability has been identified in the...

7.8CVSS7.3AI score0.0067EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/07/01 12:00 a.m.•14 views

IBM InfoSphere Information Server 访问控制错误漏洞

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server 11.7, which stems from an incorrect...

5.5CVSS5.3AI score0.00535EPSS
SaveExploits0References4
OSV
OSV
•added 2022/05/12 5:15 p.m.•13 views

CVE-2021-33080

Exposure of sensitive system information due to uncleared debug information in firmware for some IntelR SSD DC, IntelR OptaneTM SSD and IntelR OptaneTM SSD DC Products may allow an unauthenticated user to potentially enable information disclosure or escalation of privilege via physical access...

6.8CVSS5.8AI score0.00263EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/12/13 12:00 a.m.•15 views

Rizin 缓冲区错误漏洞

Rizin is a free open source reverse engineering framework from the Rizin organization. It is used to analyze binaries, disassemble code, debug programs, as a forensic tool, as a command-line hex editor that can open disk files that can be scripted, etc. Rizin 0.3.1 and earlier versions have a...

7.8CVSS6.1AI score0.00846EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2021/11/09 6:20 p.m.•20 views

binutils: Excessive debug section size can cause excessive memory consumption in bfd's dwarf2.c read_section()

There's a flaw in the BFD library of binutils. An attacker who supplies a crafted file to an application linked with BFD, and using the DWARF functionality, could cause an impact to system availability by way of excessive memory consumption...

6.7AI score
SaveExploits0References4
Rows per page
Query Builder