5873 matches found
PT-2023-2726 · NetGear · Netgear Rax30
Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: This issue allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. The specific flaw exists within the handling of SOAP...
The vulnerability of the remote access tool for VMware Workspace ONE Assist, related to lack of access control, allows a perpetrator to circumvent existing security restrictions and enhance their privileges.
The vulnerability of the remote access tool for VMware Workspace ONE Assist is related to lack of access control mechanisms. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and gain increased privileges...
BELL-CVE-2022-47519 CVE-2022-47519 does not affect BellSoft software
Bulletin has no description...
The vulnerability of the APC Easy UPS Online Monitoring Software lies in the lack of authentication for a critical function, allowing attackers to gain access to the software.
The vulnerability of the APC Easy UPS Online Monitoring Software relates to the absence of authentication for a critical function. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the software...
BELL-CVE-2022-45886 CVE-2022-45886 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2022-3344 CVE-2022-3344 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2022-3635 CVE-2022-3635 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2022-3606 CVE-2022-3606 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2022-3541 CVE-2022-3541 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2022-41674 CVE-2022-41674 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2022-3171 CVE-2022-3171 does not affect BellSoft software
Bulletin has no description...
The vulnerability of the Valmet System 2019 software suite (Metso DNA) lies in the lack of authentication for a critical function, allowing an intruder to perform basic operations on system files.
The vulnerability of the Valmet System 2019 software suite Metso DNA is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to perform basic operations on system files...
BELL-CVE-2022-2785 CVE-2022-2785 does not affect BellSoft software
Bulletin has no description...
PT-2022-23113
Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.10.0 TensorFlow versions 2.9.1 and earlier TensorFlow versions 2.8.1 and earlier TensorFlow versions 2.7.2 and earlier Description The issue occurs when the mlir::tfg::GraphDefImporter::ConvertNodeDef function...
CVE-2022-32555
Unisys Data Exchange Management Studio before 6.0.IC2 and 7.x before 7.0.IC1 doesn't have an Anti-CSRF token to authenticate the POST request. Thus, a cross-site request forgery attack could occur...
BELL-CVE-2022-1184 CVE-2022-1184 does not affect BellSoft software
Bulletin has no description...
The vulnerability of the microprogrammed software of the digital video recorders UNIMO models UDR-JA1004, JA1008, and JA1016 lies in the absence of authentication for a critical function, allowing attackers to execute arbitrary OS commands.
The vulnerability of the microprogrammed software of the UNIMO digital video recorders models UDR-JA1004, JA1008, and JA1016 is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary OS...
CVE-2022-29951
JTEKT TOYOPUC PLCs through 2022-04-29 mishandle authentication. They utilize the CMPLink/TCP protocol configurable on ports 1024-65534 on either TCP or UDP for a wide variety of engineering purposes such as starting and stopping the PLC, downloading and uploading projects, and changing...
The vulnerability of the OAS Engine SecureAddUser function in the platform for data transmission between devices and applications allows a perpetrator to gain unauthorized access to the system.
The vulnerability of the OAS Engine SecureAddUser function on the platform for data transfer between devices and applications is related to the lack of authentication checks for this critical function. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized...