CVE-2022-33740

Summary: The CVE-2022-33740 issue concerns the Linux Block and Network PV device frontends leaking data to the backend. The root cause described in the sources is that memory regions are not zeroed before sharing with the backend, and the grant-table granularity (4K pages) means data from differe...

CVE-2022-32036

Tenda M3 V1.0.0.12 was discovered to contain multiple stack overflow vulnerabilities via the ssidList, storeName, and trademark parameters in the function formSetStoreWeb...

The vulnerability of microprogrammed software in communication modules of SIMATIC CP 1543-1 and SIPLUS NET CP arises from insufficient validation of input data. This allows attackers to trigger service failures.

The vulnerability of microprogrammed communication module software for SIMATIC CP 1543-1 and SIPLUS NET CP is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures by sending specially crafted packets to port 161/udp...

The vulnerability of the saprouttab file affects SAP NetWeaver and SAP ABAP software integration platforms, allowing attackers to execute arbitrary commands.

The vulnerability of the saprouttab file in SAP NetWeaver and SAP ABAP software integration platforms is related to authentication errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the remote monitoring and control system Geo SCADA Mobile (previously known as ClearSCADA Mobile) stems from deficiencies in the system’s boundary definitions. This allows attackers to compromise the integrity, accessibility, and confidentiality of the protected information.

The vulnerability of the remote monitoring and control system Geo SCADA Mobile previously known as ClearSCADA Mobile is related to deficiencies in the system’s boundary settings. Exploiting this vulnerability allows an attacker to compromise the integrity, accessibility, and confidentiality of th...

The vulnerability of HID Mercury programmable logic controllers’ microprogramming software, related to security mechanism failures, allows a intruder to cause a service failure.

The vulnerability of HID Mercury programmable logic controllers’ microprogramming software is related to security mechanism errors. Exploiting this vulnerability allows a malicious actor to cause service failure by loading arbitrary firmware files remotely...

The vulnerability of the Microsoft Office 365 software, related to access control deficiencies, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Office 365 software package is related to errors in the implemented Conditional Access Policy for the end-point. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the blob_decompress function in the Cboot module of the NVIDIA Jetson embedded software driver package allows a attacker to execute arbitrary code or cause a partial service failure.

The vulnerability of the blobdecompress function in the Cboot module of the NVIDIA Jetson embedded software driver package is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause partial service failure...

The vulnerability of the Honeywell Modbus TCP protocol and the Safety Builder controller devices for emergency protection systems like Safety Manager, as well as the micro-programmed software for programmable logic controllers like Honeywell Experion PKS, allows a intruder to alter the device’s configuration.

The vulnerability of Honeywell Modbus TCP and Safety Builder controllers’ anti-disaster protection devices, such as Safety Manager and Honeywell Experion PKS programmable logic controllers, is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an...

Critical Security Flaws Identified in CODESYS ICS Automation Software

CODESYS has released patches to address as many as 11 security flaws that, if successfully exploited, could result in information disclosure and a denial-of-service DoS condition, among others. "These vulnerabilities are simple to exploit, and they can be successfully exploited to cause...

The vulnerability of the Omron FINS protocol’s microprogramming software for programmable logic controllers of the SYSMAC CP series allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Omron FINS protocol implemented by the microprogramming software for programmable logic controllers of the SYSMAC series lies in the deficiencies of the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

The vulnerability of the File System API interfaces in Google Chrome and Microsoft Edge browsers allows attackers to disclose protected information.

The vulnerability of the File System API interfaces in Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created web page...

The vulnerability of the IBM InfoSphere BigInsights data analysis platform, related to deficiencies in access control, allows a intruder to disclose protected information.

The vulnerability of the IBM InfoSphere BigInsights data analysis platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose sensitive information...

The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to gain access to modify, add, or delete data, or cause the system to crash or fail in rare cases.

The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to modify, add, or delete data, or cause the system to freeze or, in rare cases, crash...

The vulnerabilities of microprogrammed software in programmable logic controllers such as ILC 1x0, ILC 1x1, ILC 1x1 GSM/GPRS, ILC 3xx, AXC 1050, AXC 1050 XC, AXC 3050, RFC 480S PN 4TX, RFC 470 PN 3TX, RFC 470S PN 3TX, RFC 460R PN 3TX, RFC 460R PN 3TX-S, RFC 430 ETH-IB, RFC 450 ETH-IB, PC WORX SRT, PC WORX RT BASIC, and FC 350 PCI ETH are related to authentication process flaws. These flaws allow attackers to gain unauthorized access to protected information or compromise the integrity of that information.

The vulnerabilities of the microprogrammed logic controllers ILC 1x0, ILC 1x1, ILC 1x1 GSM/GPRS, ILC 3xx, AXC 1050, AXC 1050 XC, AXC 3050, RFC 480S PN 4TX, RFC 470 PN 3TX, RFC 470S PN 3TX, RFC 460R PN 3TX, RFC 460R PN 3TX-S, RFC 430 ETH-IB, RFC 450 ETH-IB, PC WORX SRT, PC WORX RT BASIC, and FC 35...

The vulnerability of the File System API interfaces of Google Chrome and Microsoft Edge allows a hacker to circumvent established security restrictions by using a specially created website.

The vulnerability of the File System API interfaces in Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions by using a specially created website...

Yokogawa Exaopc 安全漏洞

The Yokogawa Exaopc is an OPC data access server from Yokogawa Electric Yokogawa, Japan. A security vulnerability exists in the Yokogawa CENTUM CS 3000 that stems from a violation of security design principles...

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK allows a hacker to trigger a service failure.

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK set is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure using the HTTP protocol...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to access control deficiencies, allows a perpetrator to gain unauthorized access to limited functions.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to limited functions through the REST API...

The vulnerability of the Media Center application for playing multimedia content on Windows operating systems, which allows a hacker to escalate their privileges.

The vulnerability of the Media Center application for playing multimedia content on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...