Lucene search
+L

12719 matches found

Huntr
Huntr
added 2021/08/02 4:58 p.m.22 views

in star7th/showdoc

✍️ Description The referenced code block computes a MD5 hash based on a string "rgrsfsrfsrf", the current time, and a random number. The string used is static and does not appear to change, therefore I'm not sure why it is there in the first place as it does not provide any additional security...

4.3CVSS0.6AI score0.01064EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2021/08/02 11:15 a.m.4 views

CVE-2021-37165

A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. When a message is sent to the HMI TCP socket, it is forwarded to the hmiProcessMsg function through the pendingQ, and may lead t...

9.8CVSS7.8AI score0.03264EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2021/08/01 9:30 p.m.239 views

tsharkVM - Tshark + ELK Analytics Virtual Machine

This project builds virtual machine which can be used for analytics of tshark -T ek ndjson output. The virtual appliance is built using vagrant, which builds Debian 10 with pre-installed and pre-configured ELK stack. After the VM is up, the process is simple: decoded pcaps tshark -T ek output /...

7.2AI score
SaveExploits0References3
NVD
NVD
added 2021/07/30 7:15 p.m.33 views

CVE-2021-29297

Buffer Overflow in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle MITM attack to the component "FrameworX.exe" in the module "MSVCR100.dll"...

5.3CVSS0.00802EPSS
SaveExploits0References2
OSV
OSV
added 2021/07/30 7:15 p.m.6 views

CVE-2021-29298

Improper Input Validation in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle MITM attack to the component "FrameworX.exe"in the module "fxVPStatcTcp.dll"...

5.3CVSS5.7AI score0.00775EPSS
SaveExploits0References2
NVD
NVD
added 2021/07/30 7:15 p.m.14 views

CVE-2021-29298

Improper Input Validation in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle MITM attack to the component "FrameworX.exe"in the module "fxVPStatcTcp.dll"...

5.3CVSS0.00775EPSS
SaveExploits0References2
OSV
OSV
added 2021/07/30 7:15 p.m.7 views

CVE-2021-29297

Buffer Overflow in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle MITM attack to the component "FrameworX.exe" in the module "MSVCR100.dll"...

5.3CVSS6AI score0.00802EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/07/30 7:15 p.m.6 views

CVE-2021-29297

Buffer Overflow in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle MITM attack to the component "FrameworX.exe" in the module "MSVCR100.dll"...

5.3CVSS6.1AI score0.00802EPSS
SaveExploits0References3
Prion
Prion
added 2021/07/30 7:15 p.m.23 views

Buffer overflow

Buffer Overflow in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle MITM attack to the component "FrameworX.exe" in the module "MSVCR100.dll"...

2.6CVSS5.3AI score0.00802EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/07/30 7:15 p.m.15 views

Input validation

Improper Input Validation in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle MITM attack to the component "FrameworX.exe"in the module "fxVPStatcTcp.dll"...

2.6CVSS5.2AI score0.00775EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/07/30 6:20 p.m.23 views

CVE-2021-29298

Improper Input Validation in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle MITM attack to the component "FrameworX.exe"in the module "fxVPStatcTcp.dll"...

5.5AI score0.00775EPSS
SaveExploits0References2
CVE
CVE
added 2021/07/30 6:20 p.m.100 views

CVE-2021-29298

CVE-2021-29298 affects Emerson GE Automation Proficy Machine Edition v8.0. The issue arises from improper input validation in the FrameworX.exe component within the fxVPStatcTcp.dll module, enabling an attacker to trigger a denial of service and application crash via crafted traffic delivered ove...

5.3CVSS5.2AI score0.00775EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/07/30 6:20 p.m.33 views

CVE-2021-29297

Buffer Overflow in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle MITM attack to the component "FrameworX.exe" in the module "MSVCR100.dll"...

5.6AI score0.00802EPSS
SaveExploits0References2
CVE
CVE
added 2021/07/30 6:20 p.m.97 views

CVE-2021-29297

CVE-2021-29297 affects Emerson GE Automation Proficy Machine Edition (v8.0). The vulnerability is a buffer overflow in the FrameworX.exe component within MSVCR100.dll that can be triggered by crafted traffic from a Man-in-the-Middle (MITM) attack, potentially causing a denial of service and appli...

5.3CVSS5.2AI score0.00802EPSS
SaveExploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/07/30 5:02 a.m.39 views

Security Bulletin: Netty Vulnerability Affects IBM Watson Machine Learning on CP4D (CVE-2021-21409)

Summary Netty is vulnerable to request smuggling, caused by improper validation of request, caused by missing validation of content-length on IBM Watson Machine Learning on CP4D Vulnerability Details CVEID: CVE-2021-21409 DESCRIPTION: Netty is vulnerable to request smuggling, caused by improper...

5.9CVSS0.7AI score0.04935EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/07/30 5:02 a.m.35 views

Security Bulletin: Golang Go Vulnerability Affects IBM Watson Machine Learning on CP4D (CVE-2020-29652)

Summary Golang Go is vulnerable to a denial of service, caused by a NULL pointer dereference on IBM Watson Machine Learning on CP4D Vulnerability Details CVEID: CVE-2020-29652 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by a NULL pointer dereference in the...

7.5CVSS1.5AI score0.03228EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/07/30 5:02 a.m.21 views

Security Bulletin: akka-http-core Vulnerability Affects IBM Watson Machine Learning on CP4D (CVE-2021-23339)

Summary akka-http-core allows is vulnerable to allow multiple Transfer-Encoding headers on IBM Watson Machine Learning on CP4D Vulnerability Details CVEID: CVE-2021-23339 DESCRIPTION: com.typesafe.akka:akka-http-core is vulnerable to request smuggling, caused by improper validation of request. By...

6.5CVSS1AI score0.00711EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2021/07/30 12:00 a.m.9 views

Emerson GE Automation Proficy Machine 输入验证错误漏洞

Emerson GE Automation Proficy Machine Edition is an application of emerson Inc. an automation solution. An automation solution, an input validation error vulnerability exists in Emerson GE Automation Proficy Machine due to incorrect input validation in Emerson GE Automation Proficy Machine Editio...

5.3CVSS5.5AI score0.00775EPSS
SaveExploits0References2
Citrix
Citrix
added 2021/07/30 12:00 a.m.13 views

Failed to add disks to the VM from XenCenter, error "you have reached the maximum number of virtual disks allowed for this virtual machine"

Adding more than 6 disks to VM from XenCenter throws error "You have reached the maximum number of virtual disks allowed for this virtual machine"...

7.1AI score
SaveExploits0
CNNVD
CNNVD
added 2021/07/30 12:00 a.m.10 views

Emerson GE Automation Proficy Machine 缓冲区错误漏洞

Emerson GE Automation Proficy Machine Edition is an application from emerson, Inc. An automation solution. A buffer error vulnerability exists in Emerson GE Automation Proficy Machine that originates from a buffer overflow in Emerson GE Automation Proficy Machine Edition v8.0. The vulnerability c...

5.3CVSS5.9AI score0.00802EPSS
SaveExploits0References2
Rows per page
Query Builder