Lucene search
+L

9020 matches found

Prion
Prion
added 2023/06/19 5:15 a.m.24 views

Design/Logic Flaw

FINS Factory Interface Network Service is a message communication protocol, which is designed to be used in closed FA Factory Automation networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues --...

7.5CVSS9.6AI score0.01374EPSS
SaveExploits1References7Affected Software2
Vulnrichment
Vulnrichment
added 2023/06/19 12:00 a.m.16 views

CVE-2023-27396

FINS Factory Interface Network Service is a message communication protocol, which is designed to be used in closed FA Factory Automation networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues --...

7.6AI score0.01374EPSS
SaveExploits1References7
CVE
CVE
added 2023/06/19 12:00 a.m.84 views

CVE-2023-27396

CVE-2023-27396 affects Omron FINS protocol used in SYSMAC factory controllers. Issues: plaintext communication and no authentication allow interception, and arbitrary FINS messages can execute commands or reveal system info. Affected: SYSMAC CS-, CJ-, CP-, NJ-, NX1P-, NX102-series CPU Units (all ...

9.8CVSS9.6AI score0.01374EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
added 2023/06/19 12:00 a.m.55 views

CVE-2023-27396

FINS Factory Interface Network Service is a message communication protocol, which is designed to be used in closed FA Factory Automation networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues --...

9.9AI score0.01374EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2023/06/15 12:00 a.m.12 views

IBM Security Directory Suite 安全漏洞

IBM Security Directory Suite is a scalable, standards-based identity platform from International Business Machines IBM that simplifies identity and directory management. An information disclosure vulnerability exists in IBM Security Directory Suite VA, which could be exploited by an attacker to...

6.5CVSS5.8AI score0.00341EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/06/15 12:00 a.m.17 views

PT-2023-13230 · Ibm · Ibm Security Directory Suite Va

Name of the Vulnerable Software and Affected Versions: IBM Security Directory Suite VA versions 8.0.1 through 8.0.1.19 Description: The issue allows an authenticated user to read user credentials stored in plain clear text. Recommendations: For IBM Security Directory Suite VA versions 8.0.1 throu...

6.5CVSS6.3AI score0.00341EPSS
SaveExploits0References6
Rockylinux
Rockylinux
added 2023/06/13 7:54 p.m.25 views

sos bug fix and enhancement update

An update is available for sos. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The sos package contains a set of utilities that gather information from system...

6.5AI score
SaveExploits0
NVD
NVD
added 2023/06/13 9:15 a.m.33 views

CVE-2023-26204

A plaintext storage of a password vulnerability CWE-256 in FortiSIEM 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions, 6.1 all versions, 5.4 all versions, 5.3 all versions may allow an attacker able to access user DB content to impersonate...

9.8CVSS5.7AI score0.00435EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/13 9:15 a.m.9 views

CVE-2023-26204

A plaintext storage of a password vulnerability CWE-256 in FortiSIEM 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions, 6.1 all versions, 5.4 all versions, 5.3 all versions may allow an attacker able to access user DB content to impersonate...

9.8CVSS7.3AI score0.00435EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/13 9:15 a.m.26 views

Design/Logic Flaw

A plaintext storage of a password vulnerability CWE-256 in FortiSIEM 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions, 6.1 all versions, 5.4 all versions, 5.3 all versions may allow an attacker able to access user DB content to impersonate...

7.5CVSS9.3AI score0.00435EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/06/13 8:41 a.m.44 views

CVE-2023-26204

A plaintext storage of a password vulnerability CWE-256 in FortiSIEM 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions, 6.1 all versions, 5.4 all versions, 5.3 all versions may allow an attacker able to access user DB content to impersonate...

3.7CVSS9.7AI score0.00435EPSS
SaveExploits0References1
CVE
CVE
added 2023/06/13 8:41 a.m.100 views

CVE-2023-26204

CVE-2023-26204 describes a plaintext storage of admin credentials in FortiSIEM, affecting Fortinet FortiSIEM versions 6.7, 6.6, 6.5, 6.4, 6.3, 6.2, 6.1, 5.4, and 5.3. The root cause is storage of passwords in plaintext (CWE-256), which may allow an attacker with access to the user database to imp...

9.8CVSS9.4AI score0.00435EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/06/13 12:00 a.m.13 views

Fortinet FortiSIEM 安全漏洞

Fortinet FortiSIEM is a suite of security information and event management systems from the American company Fiat Fortinet. The system includes features such as asset discovery, workflow automation, and unified management. A security vulnerability exists in Fortinet FortiSIEM that stems from...

9.8CVSS8.4AI score0.00435EPSS
SaveExploits0References2
Fortinet
Fortinet
added 2023/06/12 12:00 a.m.61 views

FortiSIEM - Plaintext credentials storage in DB

A plaintext storage of a password vulnerability CWE-256 in FortiSIEM may allow an attacker able to access user DB content to impersonate any admin user on the device GUI...

7.5CVSS6.9AI score0.00435EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2023/06/11 12:00 a.m.15 views

Danfoss AK-EM100 web applications 安全漏洞

Danfoss AK-EM100 web applications is a web application from Danfoss, Denmark. It provides a web-based graphical user interface to the store that allows a range of everyday users to locally or remotely monitor data, alarms and reports on all their refrigeration equipment. A security vulnerability...

7.5CVSS7.3AI score0.00453EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/06/09 12:00 a.m.11 views

Bitwarden 安全漏洞

Bitwarden is an open source password manager from Bitwarden Inc. in the United States. A security vulnerability exists in Bitwarden Desktop version v1.20.0 and prior versions, which stems from storing biometric keys in plaintext, allowing a local attacker to decrypt the entire local vault...

7.1CVSS7AI score0.00585EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2023/06/07 12:00 a.m.20 views

The vulnerability of HMI/SCADA CONPROSYS HMI, related to the storage of account data in plaintext format, allows a intruder to gain unauthorized access to protected information.

The vulnerability of HMI/SCADA CONPROSYS HMI lies in the storage of account data in plain text. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

5.5CVSS7.5AI score0.00431EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2023/06/02 11:15 a.m.32 views

CVE-2023-30602

Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator...

7.5CVSS7.6AI score0.00491EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/02 11:15 a.m.12 views

CVE-2023-30602

Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator...

7.5CVSS7.2AI score0.00491EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/02 11:15 a.m.25 views

Design/Logic Flaw

Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator...

5CVSS7.6AI score0.00491EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder