The vulnerability of the software for creating and managing graphical user interfaces for Rockwell Automation FactoryTalk View Machine Edition (ME) devices lies in the lack of authentication procedures. This allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the software for creating and managing graphical user interfaces for Rockwell Automation FactoryTalk View Machine Edition industrial devices is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The software’s vulnerability regarding access to analytics and planning tools within the IBM Analytics Content Hub, due to deficiencies in the error reporting mechanism, allows a perpetrator to gain access to confidential information.

The vulnerability of the software for accessing analytics and planning tools in the IBM Analytics Content Hub is related to deficiencies in the reporting mechanism for errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of Asterisk management systems, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of Asterisk management systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...

The vulnerability of the telnetd daemon in the microprogramming-based router software of Tenda AC8, AC10, and AC18 allows a hacker to execute arbitrary commands.

The vulnerability of the telnetd microprogramming system for Tenda AC8, AC10, and AC18 routers is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the software used for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP lies in the lack of authentication procedures. This allows attackers to increase their privileges.

The vulnerabilities of the software used for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP are related to deficiencies in the authentication process. Exploiting these vulnerabilities can allow attackers, operating remotely, to increase the...

The vulnerability of the Shopping Cart component of the Oracle iStore system, which is used for creating, managing, and personalizing online stores. This vulnerability exists in the Oracle E-Business Suite, a software solution for automating business operations. It allows attackers to gain access to read, modify, or delete data.

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, as well as the Oracle E-Business Suite system for automating business operations, is related to deficiencies in the authentication process. Exploiti...

REDCap 安全漏洞

REDCap is a data collection and management web application from REDCap Open Source. A security vulnerability exists in REDCap 15.0.0 and earlier versions, which stems from a lack of sufficient input validation of the Project Dashboard name field, making it vulnerable to a stored cross-site...

The vulnerability of the command-line interface (CLI) of the Azure Service Connector allows a perpetrator to escalate their privileges.

The vulnerability of the Command Line Interface CLI of the Azure Service Connector relates to the lack of data cleansing measures at the management level. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of Adobe Experience Manager’s content and media data management system, related to deficiencies in authentication procedures, allows attackers to circumvent security restrictions.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions from a remote location...

The vulnerability of the NuPoint Unified Messaging component of the Mitel MiCollab collaboration platform allows a hacker to execute arbitrary commands.

The vulnerability of the NuPoint Unified Messaging component of the Mitel MiCollab collaboration platform is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using specially created data...

The vulnerability of the command-line interface (CLI) of the Instant AOS-8 and AOS-10 operating systems, which allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the command-line interface CLI of the Instant AOS-8 and AOS-10 operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to increase their privileges and execute arbitrary code b...

The vulnerability of the instance_create function in the monitoring and adaptive configuration of system devices allows a perpetrator to execute arbitrary code.

The vulnerability of the instancecreate function in the monitoring and adaptive configuration of system devices related to tuned systems lies in the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows an attacker to execute arbitrary code with root...

The vulnerability of the virtual learning environment Moodle, related to deficiencies in authentication procedures, allows unauthorized users to gain access to system elements.

The vulnerability of the virtual learning environment Moodle is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to system components...

CVE-2024-50054 mySCADA myPRO Path Traversal

The back-end does not sufficiently verify the user-controlled filename parameter which makes it possible for an attacker to perform a path traversal attack and retrieve arbitrary files from the file system...

Intel QAT Engine for OpenSSL software Control Flow Management Insufficiency Vulnerability

The Intel QAT Engine for OpenSSL software is an open source software plug-in designed to accelerate OpenSSL cryptographic operations with Intel Quick Assist Technology QAT hardware. A control flow management deficiency vulnerability exists in Intel QAT Engine for OpenSSL software, which can be...

The vulnerability of the Microsoft Visual Studio software development tool lies in its lack of access control mechanisms, which allows attackers to escalate their privileges.

The vulnerability of the Microsoft Visual Studio software development tool is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Intel Raid Web Console web console, related to deficiencies in access control, allows attackers to disclose protected information.

The vulnerability of the Intel Raid Web Console web console relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to disclose protected information...

CVE-2023-29114

The CVE-2023-29114 entry concerns Enel X Waybox (JuiceBox) where a lack of access control lets attackers read system logs via the web management interface. The exposed logs contain sensitive credentials and configuration data, including Wi‑Fi credentials, APN web address/credentials, IPsec creden...

The vulnerability of DrayTek Vigor router microprogramming software, related to deficiencies in authentication procedures, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of DrayTek Vigor router microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Imagine Cup platform’s code execution mechanism for Microsoft Azure Functions allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Imagine Cup platform’s Microsoft Azure Functions component is related to lack of access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...