GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: minio, falcoctl, boring-registry, boring-registry-fips, external-secrets-fips, mc, mc-fips, spire-server, spire-server-fips, falcoctl-fips, minio-fips...

mc-status.net Improper Access Control vulnerability OBB-3858705

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-7735

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the vfio-fsl-mc driver in the Linux kernel. It involves the eventfd ctx trigger pointer of the vfio fsl mc irq object, which is initially NULL and may become NULL...

The vulnerability of the mc_luma() function in the h.265 Libde265 video codec implementation allows a attacker to cause a service failure.

The vulnerability of the mcluma function in the h.265 Libde265 video codec implementation is related to the issue where the output operation goes beyond the buffer boundaries when processing the unsigned char data type. Exploiting this vulnerability can allow a remote attacker to cause a service...

mc-again.com Cross Site Scripting vulnerability OBB-3849193

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mc-automation.it Improper Access Control vulnerability OBB-3841527

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-21664 vulnerabilities

Vulnerabilities for packages: boring-registry, mc, minio, falcoctl, kubescape, spire-server, tekton-chains, gitsign, vexctl...

Siemens SIMATIC 资源管理错误漏洞

SINUMERIK MC is a CNC system for customized machine solutions. SINUMERIK ONE is a digital native CNC. A denial of service vulnerability exists in Siemens SINUMERIK ONE and SINUMERIK-MC due to a failure of an affected device to methodically and correctly process specially crafted packets sent to...

Siemens OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SINUMERIK

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

mc-medcon.com Improper Access Control vulnerability OBB-3805471

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-8385

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the ASoC component of the Linux kernel, specifically with the sof sdw rt sdca jack exit function. This function is used by different codecs, some of which share t...

mc-dortmund.de Cross Site Scripting vulnerability OBB-3790200

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-39054

An information leak in Tokudaya.ekimaemc v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39054

An information leak in Tokudaya.ekimaemc v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

PT-2023-26762 · Unknown · Tokudaya.Ekimae Mc

Name of the Vulnerable Software and Affected Versions: Tokudaya.ekimae mc version 13.6.1 Description: An information leak in the software allows attackers to obtain the channel access token and send crafted messages. Recommendations: For Tokudaya.ekimae mc version 13.6.1, at the moment, there is ...

CVE-2023-46378

Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...

CVE-2023-46378

Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...

CVE-2023-46378

Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...

CVE-2023-46378: Improper Neutralization of Input During Web Page Generation

Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...