1516 matches found
PT-2024-16121 · Tibco · Tibco Operational Intelligence +1
Name of the Vulnerable Software and Affected Versions: TIBCO Hawk and TIBCO Operational Intelligence affected versions not specified Description: A Cross-Site Scripting XSS vulnerability is present in mar.jar and monitoringconsolecommon.jar. This issue allows for potential system manipulation,...
PT-2024-16122 · Tibco Software · Tibco Operational Intelligence +1
Name of the Vulnerable Software and Affected Versions: TIBCO Hawk and TIBCO Operational Intelligence affected versions not specified Description: A high-severity issue exists in TIBCO Software Inc. products, specifically in the Monitoring Archive Utility MAR Utility, affecting multiple jar files,...
Siemens SCALANCE M-800 Family
SUMMARY SCALANCE M-800 family before V8.2 is affected by multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions. 2. GENERAL RECOMMENDATIONS As a general security measure, Siemens strongly recommends to protect network...
Siemens Spectrum Power 7
SUMMARY Spectrum Power 7 before V24Q3 contains several root-owned SUID binaries that could allow an authenticated local attacker to escalate privileges. Siemens has released a new version for Spectrum Power 7 and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS Operators of...
CVE-2024-10217: Improper Neutralization of Input During Web Page Generation
XSS Attack in mar.jar, Monitoring Archive Utility MAR Utility, monitoringconsolecommon.jar in TIBCO Software Inc TIBCO Hawk and TIBCO Operational Intelligence...
TIBCO Hawk和TIBCO Operational Intelligence 跨站脚本漏洞
TIBCO Hawk and TIBCO Operational Intelligence are both products of TIBCO Corporation, U.S.A. TIBCO Hawk is a software product that allows monitoring and management of distributed computing applications.TIBCO Operational Intelligence is a sophisticated hybrid monitoring and management application....
Siemens Mendix Runtime
SUMMARY The basic authentication mechanism of Mendix Runtime contains a race condition vulnerability which could allow unauthenticated remote attackers to circumvent default account lockout measures. Siemens has released new versions for several affected products and recommends to update to the...
Siemens SINEC INS
SUMMARY SINEC INS before V1.0 SP2 Update 3 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC INS and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a general security measure, Siemens strongly recommends to protect network access to...
CVE-2024-10218: Improper Restriction of XML External Entity Reference
XSS Attack in mar.jar, Monitoring Archive Utility MAR Utility, monitoringconsolecommon.jar in TIBCO Software Inc TIBCO Hawk and TIBCO Operational Intelligence...
The vulnerability of the command-line interface (CLI) of Juniper Networks Junos OS-based SRX routers allows a attacker to gain unauthorized access to protected information.
The vulnerability of the command-line interface CLI of Juniper Networks Junos OS routers of the SRX series relates to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of D-Link DIR-823G router’s microprogramming software, related to insufficient protection of operational data, allows unauthorized access to protected information.
The vulnerability of D-Link DIR-823G router microprogramming software is related to insufficient protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Mind the Gap: How Surface Command Tackles Asset Visibility in Attack Surface Management
“Only 17% of organizations can clearly identify and inventory a majority 95% or more of their assets.” - Gartner Imagine the scenario: your organization has been exposed to a new zero-day vulnerability. You are responsible for Threat & Vulnerability Management TVM, you have asked your IT departme...
The vulnerability of component E1 in the IOT Orchestrator Security application of JD Edwards EnterpriseOne allows a attacker to disclose protected information.
The vulnerability of component E1 in the JD Edwards EnterpriseOne Orchestrator Security application relates to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose sensitive information using the HTTP protocol...
What goes into testing a ship?
TL;DR Testing a ship involves identifying and mitigating cybersecurity risks using the "Identify, Prevent, Detect, Respond, Recover" framework. Guidelines include MSC.42898, BIMCO, IACS UR E26/E27, and ISO standards. New builds and existing vessels require proper documentation and network securit...
20/20 Cybersecurity: Lessons Learned in 2024 and Strategies for a Stronger 2025
With 2024 rapidly coming to a close, many of us here at Rapid7 are taking a step back, reflecting upon the successes and learnings of the last 12 months, and looking ahead to the challenges and opportunities we could jointly face in the year ahead. Of course, we are doing the same for our...
The vulnerability of the YouGile project management service, related to insufficient protection of operational data, allows a hacker to disclose the protected information.
The vulnerability of the YouGile project management service is related to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...
The vulnerability of the Splunk Enterprise platform’s SplunkD module for operational analytics allows a hacker to disclose protected information.
The vulnerability of the Splunk Enterprise platform for operational analysis involves insufficient protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...
The vulnerability of the SIMATIC Reader software for editing and managing projects and documents allows a perpetrator to influence the confidentiality of the protected information.
The vulnerability of the SIMATIC Reader software for editing and managing projects and documents is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality of the protected information...
The vulnerability of the REST Provider Definition Response component in SAP system management software allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the REST Provider Definition Response component in SAP system management software is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the software for centralized device management in Fortinet FortiManager allows a hacker to disclose protected information.
The vulnerability of the software for centralized device management in Fortinet FortiManager lies in the lack of protection for operational data. Exploiting this vulnerability can allow attackers to disclose sensitive information through generated HTTP requests...