Lucene search
+L

38665 matches found

CNVD
CNVD
added 2022/02/11 12:00 a.m.47 views

Sealevel Systems SeaConnect 370w越界写入漏洞

Sealevel Systems SeaConnect 370W is an Industrial Internet of Things Iiot edge device from Sealevel Systems, Inc. used to remotely monitor and control the status of actual I/O processes. The Sealevel Systems SeaConnect 370w is vulnerable to an out-of-bounds write vulnerability that could be...

8.1CVSS3.8AI score0.0089EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/02/11 12:00 a.m.14 views

PT-2022-9983 · Qualcomm · Snapdragon Compute +6

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT...

8.4CVSS7.5AI score0.00146EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/02/11 12:00 a.m.12 views

PT-2022-9985 · Qualcomm · Snapdragon Connectivity +5

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT...

7.8CVSS7.5AI score0.00154EPSS
SaveExploits0References4
ICS
ICS
added 2022/02/10 12:00 p.m.54 views

Ransomware Awareness for Holidays and Weekends

Summary Immediate Actions You Can Take Now to Protect Against Ransomware • Make an offline backup of your data. • Do not click on suspicious links. • If you use RDP, secure and monitor it. • Update your OS and software. • Use strong passwords. • Usemulti-factor authentication. The Federal Bureau ...

9.7AI score
SaveExploits0References43
CNVD
CNVD
added 2022/02/10 12:00 a.m.57 views

Sealevel Systems SeaConnect 370W Buffer Overflow Vulnerability

Sealevel Systems SeaConnect 370W is an Industrial Internet of Things Iiot edge device from Sealevel Systems, Inc. The Sealevel Systems SeaConnect 370W is vulnerable to a buffer overflow vulnerability that stems from the product's LLMNR feature that does not effectively limit memory boundaries,...

10CVSS4.9AI score0.02639EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/02/10 12:00 a.m.59 views

Sealevel Systems SeaConnect 370W Trust Management Issue Vulnerability

Sealevel Systems SeaConnect 370W is an Industrial Internet of Things Iiot edge device from Sealevel Systems, Inc. The Sealevel Systems SeaConnect 370W is vulnerable to a trust management issue stemming from a misconfiguration of the product's MQTTS functionality, which could be exploited by an...

8.1CVSS3.2AI score0.00843EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/02/10 12:00 a.m.41 views

Sealevel Systems SeaConnect 370W File Writing Vulnerability

Sealevel Systems SeaConnect 370W is an Industrial Internet of Things Iiot edge device from Sealevel Systems, Inc. The Sealevel Systems SeaConnect 370W is vulnerable to a file-write vulnerability, which stems from the fact that the product's OTA update task feature does not effectively restrict...

8.3CVSS3.1AI score0.00952EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/02/10 12:00 a.m.25 views

Sealevel Systems SeaConnect 370W Buffer Overflow Vulnerability (CNVD-2022-10701)

Sealevel Systems SeaConnect 370W is an Industrial Internet of Things Iiot edge device from Sealevel Systems, Inc. A buffer overflow vulnerability exists in Sealevel Systems SeaConnect 370W, which stems from the product's OTA update task feature that does not effectively limit memory boundaries, a...

5.9CVSS4.5AI score0.00696EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/02/10 12:00 a.m.54 views

Sealevel Systems SeaConnect 370W Buffer Overflow Vulnerability (CNVD-2022-10702)

Sealevel Systems SeaConnect 370W is an Industrial Internet of Things Iiot edge device from Sealevel Systems, Inc. A buffer overflow vulnerability exists in Sealevel Systems SeaConnect 370W, which stems from the product's NBNS feature that does not effectively limit memory boundaries, and can be...

10CVSS5.3AI score0.02639EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/02/10 12:00 a.m.53 views

Sealevel Systems SeaConnect 370W Buffer Overflow Vulnerability (CNVD-2022-10700)

Sealevel Systems SeaConnect 370W is an Industrial Internet of Things Iiot edge device from Sealevel Systems, Inc. A buffer overflow vulnerability exists in Sealevel Systems SeaConnect 370W, which stems from the product's OTA Update u-download feature that does not effectively limit memory...

9CVSS5.3AI score0.0201EPSS
SaveExploits1References1
The Hacker News
The Hacker News
added 2022/02/08 4:38 a.m.28 views

Microsoft Disables Internet Macros in Office Apps by Default to Block Malware Attacks

Microsoft on Monday said it's taking steps to disable Visual Basic for Applications VBA macros by default across its products, including Word, Excel, PowerPoint, Access, and Visio, for documents downloaded from the web in an attempt to eliminate an entire class of attack vector. "Bad actors send...

2.1AI score
SaveExploits0
CISA
CISA
added 2022/02/08 12:00 a.m.112 views

Critical Vulnerabilities Affecting SAP Applications Employing Internet Communication Manager (ICM)

On February 8, 2022, SAP released security updates to address vulnerabilities affecting multiple products, including critical vulnerabilities affecting SAP applications using SAP Internet Communication Manager ICM. SAP applications help organizations manage critical business processes—such as...

10CVSS8.7AI score0.97945EPSS
SaveExploits8References6
BDU FSTEC
BDU FSTEC
added 2022/02/07 12:00 a.m.14 views

The vulnerability of the Windows IKE extension of the Windows operating system, which allows a hacker to trigger a service failure.

The vulnerability of the Windows IKE extension in the Windows operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.5CVSS7.3AI score0.0303EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.23 views

Mitsubishi Electric Multiple Products Predictable Exact Value From Previous Values (CVE-2020-16226)

Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

9.8CVSS8.6AI score0.0227EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/02/07 12:00 a.m.15 views

Qualcomm 多款产品安全漏洞

Qualcomm Qca chips and others are products of Qualcomm Incorporated, a U.S. company.The Qualcomm Qca chip is a Bluetooth module chip.The Qualcomm Qcs chip is a high-performance IoT system-on-chip.The Qualcomm Sd chip is a processor.The Qualcomm Qca chip is a Bluetooth module chip.The Qualcomm Qcs...

7.8CVSS7.3AI score0.00154EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/02/07 12:00 a.m.16 views

The vulnerability of the Windows IKE extension of the Windows operating system, which allows a hacker to trigger a service failure.

The vulnerability of the Windows IKE extension in the Windows operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.5CVSS7.3AI score0.0303EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.26 views

ABB Relion 650 and 670 Series Improper Input Validation (CVE-2019-18247)

An attacker may use a specially crafted message to force Relion 650 series versions 1.3.0.5 and prior or Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior to reboot, which could cause a denial of service. This plugin only works with Tenable.ot. Please visit...

7.8CVSS7.3AI score0.01551EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/02/05 10:00 a.m.17 views

CVE-2021-4198

A NULL Pointer Dereference vulnerability in the messagingipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools, VPN Standalone allows an attacker to arbitrarily crash product processes and generate crashdump files. This issue affects:...

6.1CVSS6.3AI score0.00566EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/02/04 12:00 a.m.11 views

Sealevel Systems SeaConnect 370w 缓冲区错误漏洞

Sealevel Systems SeaConnect 370W is an Industrial Internet of Things Iiot edge device from Sealevel Systems, Inc. used to remotely monitor and control the status of actual I/O processes. The Sealevel Systems SeaConnect 370w is vulnerable to an out-of-bounds write vulnerability that could be...

8.1CVSS5.7AI score0.0089EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/02/04 12:00 a.m.12 views

Sealevel Systems SeaConnect 370W 访问控制错误漏洞

Sealevel Systems SeaConnect 370W is an Industrial Internet of Things Iiot edge device from Sealevel Systems, Inc. Sealevel Systems SeaConnect 370w is a denial of service vulnerability that can be exploited by attackers to send malicious packets resulting in a denial of service...

8.6CVSS5.6AI score0.00711EPSS
SaveExploits1References2
Rows per page
Query Builder