440 matches found
CVE-2021-27188
CVE-2021-27188 제안된 설명 FX Aggregator 터미널 클라이언트 Sovremennye Delovye Tekhnologii 제품는 공격자가 피해자 계정에 대해 5회의 잘못된 로그인 시도를 통해 서비스 거부5시간 동안 접속 중단를 유발할 수 있습니다. 취약점 유형 기타 DoS 제품 공급업체 OOO Sovremennye Delovye Tekhnologii 영향을 받는 제품 코드 베이스 Fx-agreggator terminal client - 1 영향을 받는 구성 요소 영향을 받는 실행 파일 공격 유형 원격 서비스 ...
CVE-2021-27187
CVE-2021-27187 제안된 설명 OOO "Sovremennye Delovye Tekhnologii"의 FX Aggregator 터미널 클라이언트는 Save Password비밀번호 저장 확인란을 선택하면 인증 자격 증명을 login.sav에 평문으로 저장합니다. 취약점 유형 기타 CWE-522 불충분하게 보호된 자격 증명 제품 공급업체 OOO Sovremennye Delovye Tekhnologii 영향을 받는 제품 코드 베이스 Fx-agreggator 터미널 클라이언트 - 1 영향을 받는 구성 요소 영향을 받는 파일...
CVE-2026-82763
Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82762
Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
EUVD-2026-77248
Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP...
CVE-2026-82765
Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP...
CVE-2026-82765
CVE-2026-82765 is a path traversal vulnerability in Contec FX5000, FX4000, and FX3000 series devices. An attacker with FTP access to the affected product can view and/or alter arbitrary files on the server, resulting in high confidentiality and integrity impact with no availability impact. The CN...
EUVD-2026-77242
Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82763
A cross-site scripting (XSS) vulnerability affects Contec FX5000, FX4000, and FX3000 series devices. When exploited, an arbitrary script may be executed in a logged-in user's web browser . The CVSS 3.1 score is 5.4 (Medium) with low privileges required, user interaction required, and a changed sc...
CVE-2026-82762
Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
EUVD-2026-77217
Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
MINI-FXFF-PC97-M56R
Bulletin has no description...
ImageMagick 7.x < 7.1.2-27 Multiple Vulnerabilities
The remote host has a version of ImageMagick 7.x installed that is prior to 7.1.2-27. It is, therefore, affected by multiple vulnerabilities: - The BGR decoder does not check for an end-of-file in every location so a crafted image could result in a heap buffer over-read. CVE-2026-64685 - A heap...
RHEL 10 : freerdp (RHSA-2026:50747)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:50747 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP...
CVE-2026-62363
A flaw was found in ImageMagick. A local attacker with low privileges could cause a heap buffer over-write by passing a specially crafted argument to the 'fx' operation. This could lead to a denial of service...
CVE-2026-62363
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer over-write can occur in the fx operation by passing a crafted argument. This issue has been fixed in version 7.1.2-27...
DEBIAN-CVE-2026-62363
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer over-write can occur in the fx operation by passing a crafted argument. This issue has been fixed in version 7.1.2-27...
UBUNTU-CVE-2026-62363
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer over-write can occur in the fx operation by passing a crafted argument. This issue has been fixed in version 7.1.2-27...
CVE-2026-62363 ImageMagick: Heap Buffer Over-Write in fx operation
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer over-write can occur in the fx operation by passing a crafted argument. This issue has been fixed in version 7.1.2-27...
CVE-2026-62363
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer over-write can occur in the fx operation by passing a crafted argument. This issue has been fixed in version 7.1.2-27...