3985 matches found
CVE-2022-45440
The CVE-2022-45440 issue affects Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0, where the FTP server processes symbolic links on external storage. A local attacker with administrator privileges can abuse this to access the device’s root filesystem by creating a symbolic link on a USB/external...
Unspecified Vulnerability in Siemens S7-1500 CPU devices
SIMATIC drive controllers are designed for the automation of production machines, combining the functionality of the SIMATIC S7-1500 CPU and the SINAMICS S120 drive control.The SIMATIC S7-1500 CPU products are designed for discrete and continuous control in industrial environments such as global...
Siemens SIMATIC S7-1500 安全漏洞
SIMATIC drive controllers are designed for the automation of production machines, combining the functionality of the SIMATIC S7-1500 CPU and the SINAMICS S120 drive control.The SIMATIC S7-1500 CPU products are designed for discrete and continuous control in industrial environments such as global...
Siemens Multiple Denial of Service in Industrial Products (CVE-2021-44694)
A vulnerability has been identified in SIMATIC Drive Controller family All versions V3.0.1, SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions, SIMATIC S7-1200 CPU family incl. SIPLUS variants All versions V4.6.0, SIMATIC S7-1500 CPU family incl. related ET200 CPUs...
Siemens Multiple Denial of Service in Industrial Products (CVE-2021-40365)
A vulnerability has been identified in SIMATIC Drive Controller family, SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants, SIMATIC S7-1200 CPU family incl. SIPLUS variants, SIMATIC S7-1500 CPU 1510SP F-1 PN, SIMATIC S7-1500 CPU 1510SP-1 PN, SIMATIC S7-1500 CPU 1511-1 PN, SIMAT...
Siemens Multiple Denial of Service in Industrial Products (CVE-2021-44693)
A vulnerability has been identified in SIMATIC Drive Controller family, SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants, SIMATIC S7-1200 CPU family incl. SIPLUS variants, SIMATIC S7-1500 CPU 1510SP F-1 PN, SIMATIC S7-1500 CPU 1510SP-1 PN, SIMATIC S7-1500 CPU 1511-1 PN, SIMAT...
Raspberry Robin Worm Evolves to Attack Financial and Insurance Sectors in Europe
Financial and insurance sectors in Europe have been targeted by the Raspberry Robin worm, as the malware continues to evolve its post-exploitation capabilities while remaining under the radar. "What is unique about the malware is that it is heavily obfuscated and highly complex to statically...
CVE-2022-44016
An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can download arbitrary files from the web server by abusing an API call: /DS/LMAPI/api/ConfigurationService/GetImages with an '"ImagesPath":"C:\"' value...
FreeBSD : freerdp -- multiple vulnerabilities (1f0421b1-8398-11ed-973d-002b67dfc673)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 1f0421b1-8398-11ed-973d-002b67dfc673 advisory. - FreeRDP is a free remote desktop protocol library and clients. In affected versions there is...
freerdp -- multiple vulnerabilities
FreeRDP reports: GHSA-5w4j-mrrh-jjrm: Out of bound read in zgfx decoder. GHSA-99cm-4gw7-c8jh: Undefined behaviour in zgfx decoder. GHSA-387j-8j96-7q35: Division by zero in urbdrc channel. GHSA-mvxm-wfj2-5fvh: Missing length validation in urbdrc channel. GHSA-qfq2-82qr-7f4j: Heap buffer overflow i...
CVE-2022-46282
Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,...
CVE-2022-46282
Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,...
Design/Logic Flaw
Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,...
CVE-2022-46282
Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,...
CVE-2022-46282
Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,...
CVE-2022-46282
CVE-2022-46282 affects Omron CX-Drive, specifically versions 3.00 and earlier. The issue is a use-after-free vulnerability in CX-Drive that allows a local attacker to execute arbitrary code when a user opens a specially crafted file. The Red Hat/NVD/JVN and related records confirm the local-execu...
PT-2022-27797 · Cx-Drive · Cx-Drive
Name of the Vulnerable Software and Affected Versions: CX-Drive versions 3.00 and earlier Description: The issue allows a local attacker to execute arbitrary code by having a user open a specially crafted file. This is due to a use after free vulnerability. Recommendations: For CX-Drive versions...
Use-after-free vulnerability in Omron CX-Drive
Overview CX-Drive provided by Omron Corporation contains a use-after-free vulnerability CWE-416. Michael Heinzl reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact By having a user to open a specially crafted file, arbitrary code may be executed. Solution...
Omron CX-Drive 资源管理错误漏洞
Omron CX-Drive is a CX drive software for inverters and servos from Omron Japan. A security vulnerability exists in Omron CX-Drive V3.00 and earlier versions, which stems from the fact that CX-Drive contains a post-release reuse, which can be exploited by an attacker to allow execution of arbitra...
Google Takes Gmail Security to the Next Level with Client-Side Encryption
Google on Friday announced that its client-side encryption for Gmail is in beta for Workspace and education customers as part of its efforts to secure emails sent using the web version of the platform. The development comes at a time when concerns about online privacy and data security are at an...