Lucene search
+L

2342 matches found

NVD
NVD
added 2021/11/09 12:15 p.m.53 views

CVE-2021-40359

A vulnerability has been identified in OpenPCS 7 V8.2 All versions, OpenPCS 7 V9.0 All versions V9.0 Upd4, OpenPCS 7 V9.1 All versions, SIMATIC BATCH V8.2 All versions, SIMATIC BATCH V9.0 All versions, SIMATIC BATCH V9.1 All versions, SIMATIC NET PC Software V14 All versions, SIMATIC NET PC...

7.7CVSS0.01137EPSS
SaveExploits0References1
Prion
Prion
added 2021/11/09 12:15 p.m.23 views

Authentication flaw

A vulnerability has been identified in OpenPCS 7 V8.2 All versions, OpenPCS 7 V9.0 All versions V9.0 Upd4, OpenPCS 7 V9.1 All versions, SIMATIC BATCH V8.2 All versions, SIMATIC BATCH V9.0 All versions, SIMATIC BATCH V9.1 All versions, SIMATIC NET PC Software V14 All versions, SIMATIC NET PC...

5CVSS7.8AI score0.01137EPSS
SaveExploits0References1Affected Software5
NVD
NVD
added 2021/11/05 3:15 a.m.22 views

CVE-2021-25507

Improper authorization vulnerability in Samsung Flow mobile application prior to 4.8.03.5 allows Samsung Flow PC application connected with user device to access part of notification data in Secure Folder without authorization...

5.7CVSS0.00286EPSS
SaveExploits0References1
OSV
OSV
added 2021/11/04 10:15 a.m.8 views

CVE-2021-34597

Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbitrary files outside of the selected project directory...

7.8CVSS5.8AI score0.00633EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/04 10:15 a.m.22 views

CVE-2021-34597

Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbitrary files outside of the selected project directory...

7.8CVSS0.00633EPSS
SaveExploits0References1
Prion
Prion
added 2021/11/04 10:15 a.m.16 views

Input validation

Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbitrary files outside of the selected project directory...

6.8CVSS7.5AI score0.00633EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2021/11/04 9:50 a.m.27 views

CVE-2021-34597 Phoenix Contact: PC Worx/-Express prone to improper input validation vulnerability

Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbitrary files outside of the selected project directory...

7.8CVSS7.8AI score0.00633EPSS
SaveExploits0References1
CVE
CVE
added 2021/11/04 9:50 a.m.54 views

CVE-2021-34597

CVE-2021-34597 affects Phoenix Contact PC Worx Automation Suite (up to version 1.88). The root cause is improper input validation in project files, enabling a manipulated project to unpack arbitrary files outside the selected directory. NVD reports CVSS v2 base score 6.8 (NETWORK, partial impact)...

7.8CVSS7.6AI score0.00633EPSS
SaveExploits0References1Affected Software2
Openbugbounty
Openbugbounty
added 2021/11/02 8:59 a.m.9 views

pc-internet-telefon-dienstleistung.de Improper Access Control vulnerability OBB-2225318

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

0.1AI score
SaveExploits0
OSV
OSV
added 2021/10/27 1:15 a.m.9 views

CVE-2021-37124

There is a path traversal vulnerability in Huawei PC product. Because the product does not filter path with special characters,attackers can construct a file path with special characters to exploit this vulnerability. Successful exploitation could allow the attacker to transport a file to certain...

6.5CVSS5.8AI score0.00294EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/27 1:15 a.m.27 views

CVE-2021-37124

There is a path traversal vulnerability in Huawei PC product. Because the product does not filter path with special characters,attackers can construct a file path with special characters to exploit this vulnerability. Successful exploitation could allow the attacker to transport a file to certain...

6.5CVSS0.00294EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/27 1:15 a.m.20 views

Path traversal

There is a path traversal vulnerability in Huawei PC product. Because the product does not filter path with special characters,attackers can construct a file path with special characters to exploit this vulnerability. Successful exploitation could allow the attacker to transport a file to certain...

3.3CVSS6.2AI score0.00294EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2021/10/27 12:30 a.m.26 views

CVE-2021-37124

There is a path traversal vulnerability in Huawei PC product. Because the product does not filter path with special characters,attackers can construct a file path with special characters to exploit this vulnerability. Successful exploitation could allow the attacker to transport a file to certain...

6.5AI score0.00294EPSS
SaveExploits0References1
CVE
CVE
added 2021/10/27 12:30 a.m.60 views

CVE-2021-37124

CVE-2021-37124 describes a path traversal vulnerability in Huawei PC Smart Full Scene (and PCManager) where unfiltered directory traversal sequences allow a remote attacker to transfer files to a specified path. Affected: Huawei PC Smart Full Scene v11.1 and PCManager v11.1.1.97. Root cause: impr...

6.5CVSS6.2AI score0.00294EPSS
SaveExploits0References1Affected Software2
Malwarebytes
Malwarebytes
added 2021/10/05 9:0 a.m.40 views

Windows 11 is out. Is it any good for security?

Windows 11, the latest operating system OS from Microsoft, launches today, and organizations have begun asking themselves when and if they should upgrade from Windows 10 or older versions. The requirements and considerations of each organization will be different, and many things will inform the...

6.8AI score
SaveExploits0
Securelist
Securelist
added 2021/09/27 10:0 a.m.34 views

BloodyStealer and gaming assets for sale

Earlier this year, we covered the threats related to gaming, and looked at the changes from 2020 and the first half of 2021 in mobile and PC games as well as various phishing schemes that capitalize on video games. Many of the threats faced by gamers are associated with loss of personal data, and...

6.9AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2021/09/26 12:19 p.m.23 views

stockton-warks-pc.gov.uk Cross Site Scripting vulnerability OBB-2149882

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Wired Threat Level
Wired Threat Level
added 2021/09/26 11:0 a.m.20 views

How to Go Passwordless on Your Microsoft Account

You no longer need an ungainly string of characters to access your Windows PC or Xbox...

4.6AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2021/09/23 10:50 a.m.34 views

stockton-warks-pc.gov.uk Cross Site Scripting vulnerability OBB-2147910

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
added 2021/09/15 5:56 p.m.9 views

pc-shop-dresden.de Cross Site Scripting vulnerability OBB-2142144

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Rows per page
Query Builder