Lucene search
+L

20050 matches found

Vulnrichment
Vulnrichment
added 2024/02/28 12:00 a.m.17 views

CVE-2024-25831

F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting XSS vulnerability due to improper input sanitization. An authenticated, remote attacker can execute arbitrary JavaScript code in the web management interface...

6AI score0.00551EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/02/28 12:00 a.m.10 views

PT-2024-2172 · Unknown · F-Logic Datacube3

Name of the Vulnerable Software and Affected Versions: F-logic DataCube3 version 1.0 Description: The issue is related to insufficient access control in the F-logic DataCube3 terminal measurement system software for power generation systems. This can be exploited by an unauthenticated, remote...

9.8CVSS9.1AI score0.2403EPSS
SaveExploits5References10
Vulnrichment
Vulnrichment
added 2024/02/28 12:00 a.m.19 views

CVE-2024-25832

F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of dangerous type by manipulating the filename extension...

6.6AI score0.12825EPSS
SaveExploits5References1
CVE
CVE
added 2024/02/28 12:00 a.m.105 views

CVE-2024-25833

CVE-2024-25833 affects Field Logic DataCube3 v1.0. The available data describe an unauthenticated SQL injection vulnerability allowing an attacker to execute arbitrary SQL queries in the database. The vulnerability is rated critical (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Connected docu...

9.8CVSS8.1AI score0.02831EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2024/02/28 12:00 a.m.39 views

CVE-2024-25832

F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of dangerous type by manipulating the filename extension...

6.6AI score0.12825EPSS
SaveExploits5References1
Cvelist
Cvelist
added 2024/02/28 12:00 a.m.32 views

CVE-2024-25831

F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting XSS vulnerability due to improper input sanitization. An authenticated, remote attacker can execute arbitrary JavaScript code in the web management interface...

6AI score0.00551EPSS
SaveExploits1References1
CVE
CVE
added 2024/02/28 12:00 a.m.96 views

CVE-2024-25831

Summary: CVE-2024-25831 concerns F-Logic DataCube3 v1.0 with a reflected XSS vulnerability caused by improper input sanitization. The issue allows an authenticated, remote attacker to execute arbitrary JavaScript in the web management interface. The Red Hat, JVN/JPCERT-related entries and multipl...

6.1CVSS5.9AI score0.00551EPSS
SaveExploits1References1Affected Software1
ICS
ICS
added 2024/02/27 7:00 a.m.52 views

Mitsubishi Electric Multiple Factory Automation Products (Update A)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : Mitsubishi Electric Corporation Equipment : MELSEC iQ-F Series Vulnerability : Insufficient Resource Pool 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a...

5.3CVSS5.5AI score0.00854EPSS
SaveExploits0References10
NVD
NVD
added 2024/02/27 4:15 a.m.44 views

CVE-2023-7033

Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC iQ-L series CPU module, MELSEC iQ-R Ethernet Interface Module, MELSEC iQ-R CC-Link IE TSN Master/Local Module, CC-Link IE TSN Remote I/O Module, CC-Link IE TSN...

5.3CVSS5.2AI score0.00854EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/02/27 3:47 a.m.62 views

CVE-2023-7033

Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC iQ-L series CPU module, MELSEC iQ-R Ethernet Interface Module, MELSEC iQ-R CC-Link IE TSN Master/Local Module, CC-Link IE TSN Remote I/O Module, CC-Link IE TSN...

5.3CVSS5.5AI score0.00854EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/02/27 3:47 a.m.11 views

CVE-2023-7033

Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC iQ-L series CPU module, MELSEC iQ-R Ethernet Interface Module, MELSEC iQ-R CC-Link IE TSN Master/Local Module, CC-Link IE TSN Remote I/O Module, CC-Link IE TSN...

5.3CVSS5.3AI score0.00854EPSS
SaveExploits0References3
CVE
CVE
added 2024/02/27 3:47 a.m.149 views

CVE-2023-7033

CVE-2023-7033 describes an Insufficient Resource Pool vulnerability in the Ethernet function affecting Mitsubishi Electric MELSEC product families (including MELSEC iQ-F/FX5, iQ-R, iQ-L series CPUs and related Ethernet/communication modules, motion modules, inverters, and related CC‑Link IE TSN a...

5.3CVSS5.3AI score0.00854EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/02/26 12:00 a.m.16 views

PT-2024-2052 · Mitsubishi · Melsec Iq-R Series Cpu Modules +23

Name of the Vulnerable Software and Affected Versions: MELSEC iQ-R series CPU module affected versions not specified MELSEC iQ-L series CPU module affected versions not specified MELSEC iQ-R Ethernet Interface Module affected versions not specified MELSEC iQ-R CC-Link IE TSN Master/Local Module...

5.3CVSS6.7AI score0.00854EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2024/02/20 12:00 a.m.10 views

PT-2024-2171 · Unknown · F-Logic Datacube3

Name of the Vulnerable Software and Affected Versions: F-logic DataCube3 version 1.0 Description: The issue is related to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of a dangerous type by manipulating the filename extension. This could potentiall...

9CVSS7.9AI score0.12825EPSS
SaveExploits5References10
CNNVD
CNNVD
added 2024/02/13 12:00 a.m.13 views

HIMA Paul Hildebrandt Multiple Product Resource Management Error Vulnerability

The HIMA Paul Hildebrandt F Series and HIMA Paul Hildebrandt X Series are both a line of electronic components from HIMA Paul Hildebrandt. A resource management error vulnerability exists in multiple HIMA Paul Hildebrandt products, which originates from a denial of service attack in which an...

7.5CVSS6.8AI score0.00718EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/02/13 12:00 a.m.15 views

HIMA Paul Hildebrandt Multiple Product Access Control Error Vulnerability

The HIMA Paul Hildebrandt F Series and the HIMA Paul Hildebrandt X Series are both a line of electronic components from HIMA Paul Hildebrandt. An access control error vulnerability exists in multiple HIMA Paul Hildebrandt products that originates from an unauthenticated attacker being able to sen...

4.3CVSS7AI score0.00161EPSS
SaveExploits0References2
OSV
OSV
added 2024/01/31 8:58 a.m.17 views

MAL-2024-952 Malicious code in distube-f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48479b3c983fc83e29cd20bafa1614ca1620036eab32699c38fa083b5b0ed816 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/01/31 8:58 a.m.7 views

Malicious code in distube-f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48479b3c983fc83e29cd20bafa1614ca1620036eab32699c38fa083b5b0ed816 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
NVD
NVD
added 2024/01/29 5:15 p.m.16 views

CVE-2023-1705

Missing Authorization vulnerability in Forcepoint F|One SmartEdge Agent on Windows bgAutoinstaller service modules allows Privilege Escalation, Functionality Bypass.This issue affects F|One SmartEdge Agent: before 1.7.0.230330-554...

8.4CVSS8.4AI score0.0015EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/29 5:15 p.m.8 views

CVE-2023-1705

Missing Authorization vulnerability in Forcepoint F|One SmartEdge Agent on Windows bgAutoinstaller service modules allows Privilege Escalation, Functionality Bypass.This issue affects F|One SmartEdge Agent: before 1.7.0.230330-554...

7.8CVSS5.8AI score0.0015EPSS
SaveExploits0References1
Rows per page
Query Builder