Lucene search
+L

903 matches found

Prion
Prion
•added 2022/11/11 4:15 p.m.•24 views

Design/Logic Flaw

Insufficiently protected credentials in software in IntelR AMT SDK before version 16.0.4.1, IntelR EMA before version 1.7.1 and IntelR MC before version 2.3.2 may allow an authenticated user to potentially enable escalation of privilege via network access...

6.5CVSS8.8AI score0.00466EPSS
SaveExploits0References1Affected Software3
CVE
CVE
•added 2022/11/11 3:47 p.m.•105 views

CVE-2022-26341

CVE-2022-26341 involves insufficiently protected credentials in Intel(R) AMT SDK prior to 16.0.4.1, Intel(R) EMA prior to 1.7.1, and Intel(R) MC prior to 2.3.2, potentially enabling an authenticated user to escalate privileges via network access. Affected components and versions are explicitly li...

8.8CVSS8.8AI score0.00466EPSS
SaveExploits0References1Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/11 12:00 a.m.•3 views

CVE-2022-26341: Insufficiently Protected Credentials

Insufficiently protected credentials in software in IntelR AMT SDK before version 16.0.4.1, IntelR EMA before version 1.7.1 and IntelR MC before version 2.3.2 may allow an authenticated user to potentially enable escalation of privilege via network access...

8.8CVSS5.9AI score0.00466EPSS
SaveExploits0References3
ICS
ICS
•added 2022/11/08 12:00 a.m.•60 views

Siemens SINUMERIK ONE and SINUMERIK MC

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

9.3CVSS8.9AI score0.00241EPSS
SaveExploits0References11
Lenovo
Lenovo
•added 2022/11/07 6:06 p.m.•13 views

Intel AMT SDK, Intel EMA and Intel MC Advisory - Lenovo Support US

No description provided...

8.9AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2022/11/01 9:40 p.m.•10 views

mc-living.at Cross Site Scripting vulnerability OBB-3031374

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/11 12:00 a.m.•7 views

CVE-2022-38465: Insufficiently Protected Credentials

A vulnerability has been identified in SIMATIC Drive Controller family All versions V2.9.2, SIMATIC ET 200SP Open Controller CPU 1515SP PC incl. SIPLUS variants All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions V21.9, SIMATIC S7-1200 CPU family incl...

9.3CVSS7.3AI score0.00241EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2022/10/04 5:00 p.m.•11 views

mc-aybolit.ru Cross Site Scripting vulnerability OBB-2976867

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2022/09/28 7:32 a.m.•20 views

webapp.cam.mc Cross Site Scripting vulnerability OBB-2960830

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/09/17 12:00 a.m.•0 views

PT-2022-34144

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.137 Description A potential buffer overflow issue exists in the ni set mc special registers function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/09/17 12:00 a.m.•1 views

PT-2022-34518

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.291 Description A potential buffer overflow issue exists in the ni set mc special registers function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/09/17 12:00 a.m.•2 views

PT-2022-34424

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.256 Description A potential buffer overflow issue exists in the ni set mc special registers function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

6AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2022/08/11 12:00 a.m.•37 views

mc-kill-port vulnerable to Arbitrary Command Execution via kill function

All versions of package mc-kill-port are vulnerable to Arbitrary Command Execution via the kill function, due to missing sanitization of the port argument...

7.8CVSS6.7AI score0.00488EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2022/08/10 5:15 a.m.•32 views

CVE-2022-25973

All versions of package mc-kill-port are vulnerable to Arbitrary Command Execution via the kill function, due to missing sanitization of the port argument...

7.8CVSS0.00488EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/08/10 5:00 a.m.•43 views

CVE-2022-25973 Arbitrary Command Execution

All versions of package mc-kill-port are vulnerable to Arbitrary Command Execution via the kill function, due to missing sanitization of the port argument...

7.8CVSS8AI score0.00488EPSS
SaveExploits1References2
CVE
CVE
•added 2022/08/10 5:00 a.m.•71 views

CVE-2022-25973

mc-kill-port is vulnerable to Arbitrary Command Execution via the kill function due to missing sanitization of the port argument. Affected versions (as described across multiple sources) expose an exploit path where an attacker can inject commands through the port parameter, enabling local comman...

7.8CVSS7.8AI score0.00488EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2022/08/10 5:00 a.m.•5 views

CVE-2022-25973

All versions of package mc-kill-port are vulnerable to Arbitrary Command Execution via the kill function, due to missing sanitization of the port argument...

8.5CVSS0.00488EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/08/10 5:00 a.m.•10 views

CVE-2022-25973

All versions of package mc-kill-port are vulnerable to Arbitrary Command Execution via the kill function, due to missing sanitization of the port argument...

7.8CVSS7.1AI score0.00488EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/10 12:00 a.m.•8 views

CVE-2022-25973: Improper Neutralization of Argument Delimiters in a Command

All versions of package mc-kill-port are vulnerable to Arbitrary Command Execution via the kill function, due to missing sanitization of the port argument...

7.8CVSS7.2AI score0.00488EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/08/10 12:00 a.m.•20 views

PT-2022-17621 · Unknown · Mc-Kill-Port

Name of the Vulnerable Software and Affected Versions: mc-kill-port versions all Description: The issue concerns Arbitrary Command Execution via the kill function due to missing sanitization of the port argument. This allows for potential exploitation. No information is provided about the estimat...

7.8CVSS7.6AI score0.00488EPSS
SaveExploits1References5
Rows per page
Query Builder