The vulnerability of the interface for accessing resources on the Cisco BroadWorks Application Server’s XSI-Actions server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the interface for accessing resources on the Cisco BroadWorks Application Server’s XSI-Actions server is related to deficiencies in data protection. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

PT-2021-3738

Name of the Vulnerable Software and Affected Versions Kubernetes affected versions not specified Description A security issue exists in Kubernetes that could allow users to send network traffic to locations they would not normally have access to. This is due to a confused deputy attack. The issue...

Vulnerability of reply_query() function (forward.c): The Dnsmasq DNS server has vulnerabilities related to errors in implementing security checks for standard elements, allowing attackers to compromise the integrity of protected information.

The vulnerability of the replyquery function forward.c: The Dnsmasq DNS server has vulnerabilities related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

SUSE SLES12: kernel-azure / kernel-azure-base / kernel-azure-devel / etc (SUSE-SU-2021:2321-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2321-1 advisory. The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixe...

CVE-2021-22778

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

CVE-2021-22778

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

CVE-2021-22781

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

CVE-2021-22778

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

Design/Logic Flaw

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

CVE-2021-22781

CVE-2021-22781 affects Schneider Electric EcoStruxure Control Expert (and Unity Pro), EcoStruxure Process Expert, and SCADAPack RemoteConnect for x70. Description: an Insufficiently Protected Credentials vulnerability could allow a leak of SMTP credentials used for mailbox authentication when an ...

CVE-2021-22780

CVE-2021-22780 describes an Insufficiently Protected Credentials issue across Schneider Electric EcoStruxure product lines (EcoStruxure Control Expert/Unity Pro, EcoStruxure Process Expert, SCADAPack RemoteConnect for x70). The vulnerability allows unauthorized access to a password-protected proj...

CVE-2021-22778

The CVE-2021-22778 issue is an Insufficiently Protected Credentials vulnerability affecting Schneider Electric EcoStruxure Control Expert (all versions before v15.0 SP1, including Unity Pro), EcoStruxure Process Expert (all versions, including EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect ...

Schneider Electric EcoStruxure Control Expert 安全漏洞

Schneider Electric EcoStruxure Control Expert formerly Unity Pro is a suite of programming software for Schneider Electric logic controller products from Schneider Electric, France. A security vulnerability exists in various EcoStruxure products and stems from an under-protected credential...

PT-2021-5015 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a component of Microsoft Windows, specifically Media Foundation, and involves the disclosure of information. Exploitation of this issue could allow an...

PT-2021-5214 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a Windows SMB information disclosure vulnerability. It allows a remote attacker to disclose protected information. The vulnerability can be exploited to obtain...

The vulnerability of the PHP-Fusion CMS system, related to bypassing the authentication process, allows attackers to gain unauthorized access to protected information.

The vulnerability of the PHP-Fusion CMS system relates to the bypassing of the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the admin/user_import.php file in the Chamilo electronic training and content management software, related to the disclosure of protected information, allows a hacker to carry out an XXE attack.

The vulnerability of the admin/userimport.php file function in the Chamilo e-learning and content management software relates to the exposure of protected information. Exploiting this vulnerability could allow a malicious actor to carry out an XXE attack...

The vulnerability of the sscanf() function in the libcurl library, a software tool for interacting with servers via CURL, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the sscanf function in the libcurl library, a software tool for interacting with servers via CURL, is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Schneider Electric Modicon Controllers and Software (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor : Schneider Electric Equipment : EcoStruxure Control Expert, EcoStruxure Process Expert, SCADAPack RemoteConnect x70, SCADAPack x70 RTUs, and Modicon M580 and M340 control products Vulnerabilities :...

The vulnerability of the Keycloak identity and access management software lies in its authentication mechanism, which has flaws. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Keycloak identity and access management software is related to shortcomings in the WebAuthn authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...