418 matches found
CVE-2018-18688
The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or...
perfect-broker.tarad.com Cross Site Scripting vulnerability OBB-1460124
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Command Execution Vulnerability in Perfect Game Platform (Windows Client)
Perfect Game Platform is a game platform created by Perfect that integrates account, game, and service, and includes all of Perfect's end-game and page games. A command execution vulnerability exists in Perfect Game Platform Windows client, which can be exploited by an attacker to gain control of...
perfect-journey.de Cross Site Scripting vulnerability OBB-1403576
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
perfectpieces.co.uk Cross Site Scripting vulnerability OBB-1386690
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
perfect-lady.pl Cross Site Scripting vulnerability OBB-1298577
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
my-perfect-job.de Cross Site Scripting vulnerability OBB-1292730
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
The vulnerability of the SINAMICS PERFECT HARMONY GH180 driver software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the device.
The vulnerability of SINAMICS PERFECT HARMONY GH180 driver software is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the device...
my-perfect-job.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1134436 Security Researcher DakkarKey Helped patch 407 vulnerabilities Received 6 Coordinated Disclosure badges Received 14 recommendations , a holder of 6 badges for responsible and coordinated disclosure, found a security vulnerability affecting my-perfect-job.de website...
my-perfect-pool.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1131921 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting my-perfect-pool.de website...
my-perfect-job.de Cross Site Scripting vulnerability
Security Researcher DakkarKey Helped patch 397 vulnerabilities Received 6 Coordinated Disclosure badges Received 14 recommendations , a holder of 6 badges for responsible and coordinated disclosure, found a security vulnerability affecting my-perfect-job.de website and its users. Following...
Return Of Bleichenbacher's Oracle Threat
ROBOT is the return of a 19-year-old vulnerability that allows performing RSA decryption and signing operations with the private key of a TLS server. Recent assessments: busterb at May 09, 2019 5:57pm UTC reported: The details are pretty heavily documented on robotattack.org, so no need to...
CVE-2019-19278
A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-.... MLFB 6SR4...-.....-.... MLFB 6SR5...-.....-.... With option A30 HMIs 12 inches or larger All versions, SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR325.-.....-.... High Availability All versions...
Design/Logic Flaw
A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-.... MLFB 6SR4...-.....-.... MLFB 6SR5...-.....-.... With option A30 HMIs 12 inches or larger All versions, SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR325.-.....-.... High Availability All versions...
CVE-2019-19278
The CVE-2019-19278 entry concerns Siemens SINAMICS PERFECT HARMONY GH180 drives (MLFB 6SR32/4/5 with option A30 for HMIs ≥12 in, and MLFB 6SR325 High Availability) where an unauthenticated attacker with physical access can restore the device to a state where protection mechanisms are disabled. Th...
CVE-2019-19278
A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-.... MLFB 6SR4...-.....-.... MLFB 6SR5...-.....-.... With option A30 HMIs 12 inches or larger All versions, SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR325.-.....-.... High Availability All versions...
SIEMENS SINAMICS PERFECT HARMONY GH180 Access Control Vulnerability
The SINAMICS Perfect Harmony GH180 Medium Voltage Drives series is designed to control medium voltage drives or inverters in a variety of different applications. An access control vulnerability exists in the SIEMENS SINAMICS PERFECT HARMONY GH180. An attacker could exploit this vulnerability to...
Siemens SINAMICS PERFECT HARMONY GH180
1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Low skill level to exploit Vendor: Siemens Equipment: SINAMICS PERFECT HARMONY GH180 Vulnerability: Protection Mechanism Failure 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthorized attacker with physical access...
