PT-2022-18728 · Cynet · Cynet 360 Web Portal

Name of the Vulnerable Software and Affected Versions: Cynet 360 Web Portal versions prior to 4.5 Description: The issue allows attackers to access a list of monitored files and profiles via a crafted GET request sent to "/WebApp/SettingsFileMonitor/GetFileMonitorProfiles". Recommendations: For...

Security Bulletin: Enterprise Content Management System Monitor is affected by a vulnerability in Java SE related to the Utility component

Summary Vulnerability found in Java SE related to the Utility component used by Enterprise Content Management System Monitor. Enterprise Content Management System Monitor has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2021-35561 DESCRIPTION: An unspecified vulnerability in Java...

LinkHub Mesh Wi-Fi AC1200 GetValue DoS

The vulnerability of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 routers lies in the copying of buffers without checking the size of the input data during the processing of the telnetatemonitor file. Exploiting this vulnerability could allow an attacker to...

Google Android Input Verification Vulnerability

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

OESA-2022-1891 libvirt security update

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support. Security Fixes: A use-after-free flaw was found in libvirt. The qemuMonitorUnregister function in...

Contec Health CMS8000 Patient Monitor (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Low attack complexity Vendor: Contec Health Equipment: CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor Vulnerabilities: Improper Access Control, Uncontrolled Resource Consumption, Use of Hard-Coded Credentials, Active Debug Code 2. RISK EVALUATION...

Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor has security vulnerabilities.

The Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor is a vital signs patient monitor from Contec Japan. The Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor suffers from a security vulnerability that stems from a failure of the CMS800 device when attempting to par...

Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor has security vulnerabilities.

The Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor is a vital signs patient monitor from Contec Health. A security vulnerability exists in the Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor that stems from multiple binary application files on the CMS8000 device...

Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor: Trust management issues

The Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor is a vital signs patient monitor from Contec Health. The Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor suffers from a trust management issue vulnerability that stems from the presence of multiple global defaul...

Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor: Access control error vulnerability

The Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor is a vital signs patient monitor from Contec Health. The Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor suffers from an Access Control Error vulnerability that originates from a threat actor with transient acce...

PT-2022-23471 · Unknown · Rubyinstaller2

Name of the Vulnerable Software and Affected Versions: Rubyinstaller2 versions 3.1.2 and below Description: The issue is related to incorrect access control in the install directory of Rubyinstaller2, specifically the C:RailsInstaller directory. This allows authenticated attackers to execute...

A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down. An unprivileged client with a read-only connection could use this flaw to perform a denial of service attack by causing the libvirt daemon to crash.

...

dBmonster - Track WiFi Devices With Their Recieved Signal Strength

With dBmonster you are able to scan for nearby WiFi devices and track them trough the signal strength dBm of their sent packets sniffed with TShark. These dBm values will be plotted to a graph with matplotlib. It can help you to identify the exact location of nearby WiFi devices use a directional...

PT-2022-22386 · Abb · Abb Zenon

Name of the Vulnerable Software and Affected Versions: ABB Zenon version 8.20 Description: The issue allows an attacker to store passwords in a recoverable format, potentially enabling them to add more network clients. These clients may then monitor various activities of the Zenon system...

ABB Zenon security vulnerabilities

ABB Zenon is a secure operational data management platform from ABB Switzerland. Easily connect machines, infrastructure and production assets. ABB Zenon 8.20 and prior versions have a security vulnerability that stems from a recoverable format storage password vulnerability that can be...

CVE-2021-3975

A use-after-free flaw was found in libvirt. The qemuMonitorUnregister function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down...

DEBIAN-CVE-2021-3975

A use-after-free flaw was found in libvirt. The qemuMonitorUnregister function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down...

CVE-2021-3975

A use-after-free flaw was found in libvirt. The qemuMonitorUnregister function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down...

CVE-2021-45454

Ampere Altra before SRP 1.08b and Altra Max​ before SRP 2.05 allow information disclosure of power telemetry via HWmon...

PT-2022-12362 · Ampere · Ampere Altra +1

Name of the Vulnerable Software and Affected Versions: Ampere Altra versions before SRP 1.08b Ampere Altra Max versions before SRP 2.05 Description: The issue allows information disclosure of power telemetry via HWmon. Recommendations: For Ampere Altra versions before SRP 1.08b, update to SRP 1.0...