717 matches found
CVE-2025-0417 Valmet DNA Lack of protection against brute force attacks
Lack of protection against brute force attacks in Valmet DNA visualization in DNA Operate. The possibility to make an arbitrary number of login attempts without any rate limit gives an attacker an increased chance of guessing passwords and then performing switching operations...
CVE-2025-0417 Valmet DNA Lack of protection against brute force attacks
Lack of protection against brute force attacks in Valmet DNA visualization in DNA Operate. The possibility to make an arbitrary number of login attempts without any rate limit gives an attacker an increased chance of guessing passwords and then performing switching operations...
CVE-2025-0417
CVE-2025-0417 affects Valmet DNA Visualization in DNA Operate. The issue is a lack of protection against brute force attacks, permitting an arbitrary number of login attempts with no rate limit, increasing the chance of password guessing and subsequent switching operations. Reported impact per CV...
CVE-2025-0418 Valmet DNA user passwords in plain text
Valmet DNA user passwords in plain text. This practice poses a security risk as attackers who gain access to local project data can read the passwords...
CVE-2025-0418
Valmet DNA CVE-2025-0418 involves storing user passwords in plain text, as described across multiple sources. The vulnerability affects Valmet DNA where local project data can expose passwords if accessed, implying insufficient protection of credentials in storage. The primary concrete detail ava...
CVE-2025-0418 Valmet DNA user passwords in plain text
Valmet DNA user passwords in plain text. This practice poses a security risk as attackers who gain access to local project data can read the passwords...
PT-2025-14024 · Valmet · Valmet Dna
Name of the Vulnerable Software and Affected Versions: Valmet DNA affected versions not specified Description: The issue involves storing Valmet DNA user passwords in plain text, which poses a security risk. If attackers gain access to local project data, they can read the passwords...
Valmet DNA 安全漏洞
Valmet DNA is a platform for automation and information systems from the Finnish company Valmet. In this single platform, process control, machine control, quality control, drive control and equipment condition monitoring systems are covered. A security vulnerability exists in Valmet DNA, which...
PT-2025-14022 · Valmet · Valmet Dna
Name of the Vulnerable Software and Affected Versions: Valmet DNA versions prior to C2023 Description: The issue concerns an insecure DCOM configuration in Valmet DNA, specifically with the DCOM object Valmet DNA Engineering. This object has permissions that allow it to run commands as a user wit...
Valmet DNA 安全漏洞
Valmet DNA is a platform for automation and information systems from the Finnish company Valmet. In this single platform, process control, machine control, quality control, drive control and equipment condition monitoring systems are covered. A security vulnerability exists in Valmet DNA, which...
Valmet DNA 安全漏洞
Valmet DNA is a platform for automation and information systems from the Finnish company Valmet. In this single platform, process control, machine control, quality control, drive control and equipment condition monitoring systems are covered. A security vulnerability exists in Valmet DNA versions...
al-for-design (=0.0.1), autogluon (>=0.0.4 <=0.5.3b20221014) +42 more potentially affected by CVE-2024-12216 via gluoncv (>=0.10.3.post0 <=0.9.0)
gluoncv PYPI version =0.10.3.post0, =0.0.4, =0.0.15b20201024, =0.0.15b20201024, =0.0.15b20201024, =1.0.0, =0.1.1, =0.1.0, =0.0.6, =0.0.3, =0.0.1, =0.0.20 - monk-colab =0.0.1 - monk-colab-test =0.0.1 - monk-cpu =0.0.1 - monk-cpu-test =0.0.11 and more Source cves: CVE-2024-12216 Source advisory:...
CVE-2025-24555
Cross-Site Request Forgery CSRF vulnerability in subscriptiondna Subscription DNA subscriptiondna allows Stored XSS.This issue affects Subscription DNA: from n/a through = 2.1...
Malicious code in dna-mbc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4919122f5b393650aa18a1db8740d7a79cfa480059256e2c386c52ab0a1c8405 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-1115 Malicious code in dna-mbc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4919122f5b393650aa18a1db8740d7a79cfa480059256e2c386c52ab0a1c8405 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-24555
Cross-Site Request Forgery CSRF vulnerability in subscriptiondna Subscription DNA subscriptiondna allows Stored XSS.This issue affects Subscription DNA: from n/a through = 2.1...
CVE-2025-24555 WordPress Subscription DNA plugin <= 2.1 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in subscriptiondna Subscription DNA subscriptiondna allows Stored XSS.This issue affects Subscription DNA: from n/a through = 2.1...
CVE-2025-24555
CVE-2025-24555 is a CSRF to Stored XSS vulnerability reported for the WordPress Subscription DNA plugin (versions n/a through 2.1). The CVE records indicate the affected software is Subscription DNA and that the issue spans CSRF leading to stored cross-site scripting, but there is no publicly doc...
CVE-2025-24555 WordPress Subscription DNA plugin <= 2.1 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in subscriptiondna Subscription DNA subscriptiondna allows Stored XSS.This issue affects Subscription DNA: from n/a through = 2.1...
