Malware in mv-browser-support

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

mv-sachsen-anhalt.de Cross Site Scripting vulnerability OBB-3224723

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Code injection

MV iDigital Clinic Enterprise iDCE 1.0 stores passwords in cleartext...

CVE-2022-31405

MV iDigital Clinic Enterprise iDCE 1.0 stores passwords in cleartext...

PT-2023-13034 · Unknown · Mv Idigital Clinic Enterprise

Name of the Vulnerable Software and Affected Versions: MV iDigital Clinic Enterprise iDCE version 1.0 Description: The issue concerns the storage of passwords in cleartext. There is no information provided about the estimated number of potentially affected devices worldwide or details about...

CVE-2022-31405

MV iDigital Clinic Enterprise (iDCE) 1.0 stores passwords in cleartext, a vulnerability affecting confidentiality (C HIGH) due to plaintext credential storage. Multiple sources corroborate this issue; the root cause is improper password handling in iDCE 1.0. Documents do not detail existing explo...

CVE-2022-31405: Cleartext Storage of Sensitive Information

MV iDigital Clinic Enterprise iDCE 1.0 stores passwords in cleartext...

PT-2022-36330 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.16 through 5.10.154 Description: A resource leak was discovered in the mv xor v2 remove function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 4.16...

PT-2022-36608 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.334 Description: A resource leak was discovered in the mv xor v2 remove function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-36559 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.300 Description: A resource leak was discovered in the mv xor v2 remove function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-36201

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.79 Description A resource leak was discovered in the mv xor v2 remove function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.7...

PT-2022-36043

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.9 Description The issue is related to a resource leak in the mv xor v2 remove function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-9051 · Seagate · Seagate Central Nas

Name of the Vulnerable Software and Affected Versions: Seagate Central NAS versions STCG2000300, STCG3000300, and STCG4000300 Description: The web-management application on the affected devices allows OS command injection via mv backend launch in cirrus/application/helpers/mv backend helper.php b...

MV POWER CCTV DVR 安全漏洞

MV POWER CCTV DVR is a series of CCTV cameras from MV POWER. A security vulnerability exists in MV POWER CCTV DVR TV-7104HE version 1.8.4 115215B9 and TV7108HE version. An attacker can exploit this vulnerability to execute arbitrary operating system commands as the root user...

CVE-2022-33138

A vulnerability has been identified in SIMATIC MV540 H All versions V3.3, SIMATIC MV540 S All versions V3.3, SIMATIC MV550 H All versions V3.3, SIMATIC MV550 S All versions V3.3, SIMATIC MV560 U All versions V3.3, SIMATIC MV560 X All versions V3.3. Affected devices do not perform authentication f...

mv-tiefenstein.de Cross Site Scripting vulnerability OBB-2690960

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-30496

SQL injection in Logon Page of IDCE MV's application, version 1.0, allows an attacker to inject SQL payloads in the user field, connecting to a database to access enterprise's private and sensitive information...

CVE-2022-30496

SQL injection in Logon Page of IDCE MV's application, version 1.0, allows an attacker to inject SQL payloads in the user field, connecting to a database to access enterprise's private and sensitive information...

Sql injection

SQL injection in Logon Page of IDCE MV's application, version 1.0, allows an attacker to inject SQL payloads in the user field, connecting to a database to access enterprise's private and sensitive information...

MV Informática IDCE MV SQL注入漏洞

MV Informática IDCE MV is a health management software from the Brazilian company MV Informática. MV Informática IDCE MV version 1.0 contains a SQL injection vulnerability that stems from a SQL injection issue in the user field of the login page. An attacker could exploit the vulnerability to...