903 matches found
PT-2022-3929
Name of the Vulnerable Software and Affected Versions Mitsubishi Electric MC Works64 versions 4.00A 10.95.201.23 to 4.04E 10.95.210.01 ICONICS GENESIS64 versions 10.95.3 to 10.97 ICONICS Hyper Historian versions 10.95.3 to 10.97 ICONICS AnalytiX versions 10.95.3 to 10.97 ICONICS MobileHMI version...
PT-2025-8644
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15 Description A use-after-free issue was found in the Linux kernel, specifically in the fsl-mc-bus component. The problem occurs when mc-root mc bus dev is freed in fsl mc device remove, but its mc io is still...
mc-en.ru Cross Site Scripting vulnerability OBB-2303853
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-24927
The My Calendar WordPress plugin before 3.2.18 does not sanitise and escape the callback parameter of the mcpostlookup AJAX action available to any authenticated user before outputting it back in the response, leading to a Reflected Cross-Site Scripting issue...
PT-2021-16371
Name of the Vulnerable Software and Affected Versions: My Calendar WordPress plugin versions prior to 3.2.18 Description: The issue arises from the lack of sanitization and escaping of the callback parameter in the mc post lookup AJAX action, which is accessible to any authenticated user. This...
CVE-2021-36370 affecting package mc 4.8.21-4
CVE-2021-36370 affecting package mc 4.8.21-4. An upgraded version of the package is available that resolves this issue...
ICONICS GENESIS64 and Mitsubishi Electric MC Works64 OPC UA
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendors: ICONICS, Mitsubishi Electric Equipment: ICONICS GENESIS64, Mitsubishi Electric MC Works64 Vulnerability: Uncontrolled Recursion 2. RISK EVALUATION Successful exploitation of this vulnerability could...
epc-mc.eu Cross Site Scripting vulnerability OBB-2161321
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
ALPINE-CVE-2020-21595
libde265 v1.0.4 contains a heap buffer overflow in the mcluma function, which can be exploited via a crafted a file...
Libde265 缓冲区错误漏洞
libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a heap buffer overflow vulnerability in the mcchroma function. An attacker can exploit the vulnerability to cause a denial of service via specially crafted files...
Juniper Junos OS DoS (JSA11187)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11187 advisory. - An uncontrolled resource consumption vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX4600 Series switches allows an attacker, which is sending large...
CVE-2021-0285 Junos OS: QFX5000 Series and EX4600 Series: Continuous traffic destined to a device configured with MC-LAG leading to nodes losing their control connection which can impact traffic
An uncontrolled resource consumption vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX4600 Series switches allows an attacker sending large amounts of legitimate traffic destined to the device to cause Interchassis Control Protocol ICCP interruptions, leading to an unstable...
CVE-2021-0285: Allocation of Resources Without Limits or Throttling
An uncontrolled resource consumption vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX4600 Series switches allows an attacker sending large amounts of legitimate traffic destined to the device to cause Interchassis Control Protocol ICCP interruptions, leading to an unstable...
PT-2021-28350
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue, as reported by OSS-Fuzz. The crash involves the generate inter prediction samples function within the mc...
CVE-2021-21362
A flaw has been identified in minio https://github.com/minio/minio. It is possible to bypass a readOnly policy by creating a temporary 'mc share upload'...
PT-2021-29534
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.9 through v5.12.12 Description A memory leak issue exists in the ip mc add1 src function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v4.9 through...
PT-2021-29453
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.9 through 5.10.45 Description A memory leak issue exists in the ip mc add1 src function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 4.9 through 5.10.45,...
PT-2021-25394
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.128 Description: A memory leak issue exists in the ip mc add1 src function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.4.128,...
PT-2021-25459
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.9 through 5.10.45 Description: A memory leak issue exists in the ip mc add1 src function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 4.9 through...
PT-2021-25540
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.9 through v5.12.12 Description: A memory leak issue exists in the ip mc add1 src function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v4.9 through...