Lucene search
+L

3748 matches found

CNNVD
CNNVD
added 2025/05/22 12:0 a.m.7 views

ABB多款产品 代码注入漏洞

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...

8CVSS8.3AI score0.0063EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/22 12:0 a.m.10 views

PT-2025-22524 · Unknown · Nexus Series +2

Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3.08.03 NEXUS Series versions through 3.08.03 MATRIX Series versions through 3.08.03 Description: File upload vulnerabilities are present in ASPECT if session administrator credentials become compromised...

6.7CVSS6.5AI score0.00324EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/05/22 12:0 a.m.8 views

PT-2025-22519 · Unknown · Nexus Series +2

Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3.08.03 NEXUS Series versions through 3.08.03 MATRIX Series versions through 3.08.03 Description: The issue allows attackers to control TCP/IP port access if session administrator credentials become...

9.1CVSS6.4AI score0.00475EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/05/22 12:0 a.m.7 views

ABB多款产品 安全漏洞

ABB ASPECT-Enterprise and others are products of ABB Switzerland.ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexib...

9.1CVSS6.5AI score0.00439EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/22 12:0 a.m.7 views

ABB多款产品 安全漏洞

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...

7.1CVSS6.1AI score0.00347EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/22 12:0 a.m.13 views

ABB多款产品 代码问题漏洞

ABB ASPECT-Enterprise and others are products of ABB Switzerland.ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexib...

6.7CVSS6.9AI score0.00324EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/22 12:0 a.m.8 views

ABB多款产品 安全漏洞

ABB ASPECT and others are products of ABB Switzerland.ABB ASPECT is a scalable building energy management and control solution.ABB MATRIX is an embedded building automation network controller.ABB NEXUS is a wireless and wired solution. A security vulnerability exists in several ABB products that...

7.1CVSS6.5AI score0.00292EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:6 p.m.10 views

CVE-2009-2779

SQL injection vulnerability in index.php in AJ Matrix DNA allows remote attackers to execute arbitrary SQL commands via the id parameter in a productdetail action...

7.5CVSS8.8AI score0.00993EPSS
SaveExploits2References1
Packet Storm News
Packet Storm News
added 2025/05/20 12:0 a.m.7 views

FedGraM: Defending against Untargeted Attacks in Federated Learning Via Embedding Gram Matrix

Federated Learning FL enables geographically distributed clients to collaboratively train machine learning models by sharing only their local models, ensuring data privacy. However, FL is vulnerable to untargeted attacks that aim to degrade the global model's performance on the underlying data...

6.6AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/05/06 12:0 a.m.6 views

A Chaos Driven Metric for Backdoor Attack Detection

The advancement and adoption of Artificial Intelligence AI models across diverse domains have transformed the way we interact with technology. However, it is essential to recognize that while AI models have introduced remarkable advancements, they also present inherent challenges such as their...

6.9AI score
SaveExploits0
OSV
OSV
added 2025/05/02 6:18 a.m.49 views

BIT-MOODLE-2024-43433 Moodle: matrix user/power level management not always working as expected with suspended users

A flaw was found in moodle. Matrix room membership and power levels are incorrectly applied and revoked for suspended Moodle users...

5.3CVSS5.2AI score0.00318EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/01 7:37 p.m.15 views

Security Bulletin: IBM Watson Speech Services Cartridge v4.8.8 is vulnerable to cross-site scripting in Twisted [CVE-2024-41810]

Summary IBM Watson Speech Services Cartridge is vulnerable to to cross-site scripting in Twisted, caused by improper validation of user-supplied input by the HTTP redirect body CVE-2024-41810. Twisted is used by our Speech Service runtimes. This vulnerabilitiy has been addressed. Please read the...

6.1CVSS6.3AI score0.01176EPSS
SaveExploits0Affected Software1
Packet Storm News
Packet Storm News
added 2025/04/29 12:0 a.m.20 views

DejaVuzz: Disclosing Transient Execution Bugs with Dynamic Swappable Memory and Differential Information Flow Tracking Assisted Processor Fuzzing

Transient execution vulnerabilities have emerged as a critical threat to modern processors. Hardware fuzzing testing techniques have recently shown promising results in discovering transient execution bugs in large-scale out-of-order processor designs. However, their poor microarchitectural...

7.3AI score
SaveExploits0
NVD
NVD
added 2025/04/24 9:15 p.m.46 views

CVE-2025-29529

ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx...

6.5CVSS0.003EPSS
SaveExploits0References2
Microsoft Secure
Microsoft Secure
added 2025/04/24 4:0 p.m.27 views

New whitepaper outlines the taxonomy of failure modes in AI agents

We are releasing a taxonomy of failure modes in AI agents to help security professionals and machine learning engineers think through how AI systems can fail and design them with safety and security in mind. The taxonomy continues Microsoft AI Red Team's work to lead the creation of systematizati...

7.5AI score
SaveExploits0
CVE
CVE
added 2025/04/24 12:0 a.m.73 views

CVE-2025-29529

CVE-2025-29529 relates to SQL injection in ITC Systems Multiplan/Matrix OneCard platform, specifically in Forgotpassword.aspx of version 3.7.4.1002. The vulnerability arises from a flaw in the Forgotpassword.aspx component that enables SQL injection. Affected product is ITC Systems Multiplan/Matr...

6.5CVSS7.9AI score0.003EPSS
SaveExploits0References2
OSV
OSV
added 2025/04/24 12:0 a.m.22 views

CVE-2025-29529

ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx...

6.5CVSS8.2AI score
SaveExploits0References4
CNNVD
CNNVD
added 2025/04/24 12:0 a.m.6 views

ITC Systems Multiplan/Matrix OneCard platform 安全漏洞

ITC Systems Multiplan/Matrix OneCard platform is a campus or institutional card management platform from ITC Systems. A security vulnerability exists in ITC Systems Multiplan/Matrix OneCard platform version 3.7.4.1002, which originates from a SQL injection vulnerability in the Forgotpassword.aspx...

6.5CVSS7.8AI score0.003EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/04/24 12:0 a.m.48 views

CVE-2025-29529

ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx...

0.003EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/04/24 12:0 a.m.5 views

CVE-2025-29529

ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx...

7.9AI score0.003EPSS
SaveExploits0References2
Rows per page
Query Builder