EUVD-2021-14411

Malware in sbrugna...

EUVD-2021-14410

Malware in sbrugna...

EUVD-2019-17128

Malware in sbrugna...

EUVD-2024-30651

Malicious code in bioql PyPI...

EUVD-2024-30545

Malicious code in bioql PyPI...

exacqVision Client Server Encryption Issue

The vulnerability of the exacqVision Client and exacqVision Server software is related to insufficiently secure data encryption. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2024-32865

Under certain circumstances the exacqVision Server will not properly validate TLS certificates provided by connected devices...

CVE-2024-32758

Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and exchange...

Johnson Controls exacqVision Server

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 6.4 ATTENTION : Exploitable remotely Vendor : Johnson Controls, Inc. Equipment : exacqVision Server Vulnerability : Improper Certificate Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to perform a...

CVE-2024-32865: Improper Certificate Validation

Under certain circumstances the exacqVision Server will not properly validate TLS certificates provided by connected devices...

PT-2024-5520

Name of the Vulnerable Software and Affected Versions exacqVision Server affected versions not specified Description The issue is related to the improper validation of TLS certificates by the exacqVision Server under certain circumstances. This could allow a remote attacker to perform a...

PT-2024-5766 · Unknown · Exacqvision Server +1

Name of the Vulnerable Software and Affected Versions: exacqVision Client and exacqVision Server affected versions not specified Description: The issue is related to insufficient key length and exchange in the communication between exacqVision Client and exacqVision Server, which may allow a remo...

CVE-2024-32758: Inadequate Encryption Strength

Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and exchange...

Johnson Controls ExacqVision Server information leakage vulnerability

Johnson Controls exacqVision Server is a surveillance video management software from Johnson Controls, a U.S. company. Johnson Controls is vulnerable to an information disclosure vulnerability that stems from excessive data output from the application. An attacker could use this vulnerability to...

CVE-2021-27665

An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause denial-of-service condition...

CVE-2021-27665

An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause denial-of-service condition...

CVE-2021-27664

Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVision Server...

CVE-2021-27664

Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVision Server...

Integer overflow

An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause denial-of-service condition...

CVE-2021-27665

CVE-2021-27665 affects exacqVision Server 32-bit (Johnson Controls) with an integer overflow vulnerability exploitable remotely by an unauthenticated attacker via a specially crafted script to cause a denial-of-service. The issue, tracked across multiple sources, is rated CVSS v3.1 base 7.5 (HIGH...