439 matches found
Mitsubishi Electric GX Works2 安全漏洞
The Mitsubishi Electric GX Works2 is a programmable controller from Mitsubishi Electric Japan. The Mitsubishi Electric GX Works2 contains a security vulnerability that can be exploited by an attacker to tamper with program files in the Mitsubishi Electric PLC by sending maliciously crafted packet...
Mitsubishi Electric GX Works2
1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/high attack complexity Vendor: Mitsubishi Electric Equipment: GX Works2 Vulnerability: Improper Handling of Length Parameter Inconsistency 2. RISK EVALUATION Successful exploitation of this vulnerability may cause a...
Mitsubishi Electric FA Engineering Software (Update B)
1. EXECUTIVE SUMMARY CVSS v3 5.5 ATTENTION: Low attack complexity Vendor: Mitsubishi Electric Equipment: FA Engineering Software Vulnerabilities: Out-of-bounds Read, Integer Underflow 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-21-350-05...
Intel® FPGA OPAE Driver Advisory
This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00440.html...
Denial of Service Vulnerability in GX Works2 (CNVD-2021-16895)
GX Works2 is a PLC programming software. A memory out-of-bounds access vulnerability exists in GX Works2. An attacker could exploit this vulnerability to cause the program to crash...
Code Injection Vulnerability in GX Works2
GX Works2 is a PLC programming software. A code injection vulnerability exists in GX Works2. An attacker can exploit this vulnerability to gain server privileges...
Memory Out-of-Bounds Access Vulnerability in GX Works2
GX Works2 is a PLC programming software. A memory out-of-bounds access vulnerability exists in GX Works2. An attacker could exploit this vulnerability to cause the program to crash...
Directory Traversal
static-server-gx is vulnerable to directory traversal. The vulnerability exists as it does not validate the file path for input such as ../, allowing the escape from the target root directory...
Intel® PAC with Arria® 10 GX FPGA Advisory
This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00375.html...
Intel PAC with Arria 10 GX FPGA Elevation of Privilege Vulnerability
Intel PAC with Arria 10 GX FPGA and Intel Acceleration Stack are both products of Intel Corporation, U.S.A. Intel PAC with Arria 10 GX FPGA is a programmable acceleration card that uses Intel Arria 10 GX FPGAs Field Programmable Gate Arrays. Intel Acceleration Stack is an acceleration stack that...
Improper access control
Improper access control in firmware for IntelR PAC with ArriaR 10 GX FPGA before Intel Acceleration Stack version 1.2.1 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-8684
Improper access control in firmware for IntelR PAC with ArriaR 10 GX FPGA before Intel Acceleration Stack version 1.2.1 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-8684
CVE-2020-8684 affects Intel® PAC with Arria® 10 GX FPGA, where firmware under the Intel Acceleration Stack prior to version 1.2.1 has improper access control that may allow a privileged user to escalate privileges via local access. The issue is mitigated by updating to Intel Acceleration Stack ve...
Gambio GX SQL Injection Vulnerability
Gambio GX is a suite of e-commerce platforms from Gambio Germany. A SQL injection vulnerability exists in the admin/mobile.php file in Gambio GX versions prior to 4.0.1.0. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An...
CVE-2020-10983
Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php...
CVE-2020-10983
Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php...
CVE-2020-10984
Gambio GX before 4.0.1.0 allows admin/admin.php CSRF...
CVE-2020-10984
Gambio GX before 4.0.1.0 allows admin/admin.php CSRF...