Lucene search
+L

2591 matches found

CNNVD
CNNVD
•added 2026/02/27 12:00 a.m.•22 views

Johnson Controls Frick Controls Quantum HD 安全漏洞

Johnson Controls Frick Controls Quantum HD is a high-end microprocessor control panel designed specifically for industrial refrigeration systems by Johnson Controls. The version 10.22 and earlier of Johnson Controls Frick Controls Quantum HD contained security vulnerabilities, which were caused b...

9.8CVSS5.9AI score0.00399EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/02/27 12:00 a.m.•16 views

Johnson Controls Frick Controls Quantum HD 安全漏洞

Johnson Controls Frick Controls Quantum HD is a high-end microprocessor control panel designed specifically for industrial refrigeration systems by Johnson Controls. The version 10.22 and earlier of Johnson Controls Frick Controls Quantum HD contained security vulnerabilities, which were caused b...

9.8CVSS6.2AI score0.00637EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/02/27 12:00 a.m.•41 views

Johnson Controls Frick Controls Quantum HD 安全漏洞

Johnson Controls Frick Controls Quantum HD is a high-end microprocessor control panel designed specifically for industrial refrigeration systems by Johnson Controls. Versions of Johnson Controls Frick Controls Quantum HD prior to 10.22 contain security vulnerabilities. These vulnerabilities stem...

9.8CVSS6.4AI score0.00925EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/02/27 12:00 a.m.•25 views

Johnson Controls Frick Controls Quantum HD 安全漏洞

Johnson Controls Frick Controls Quantum HD is a high-end microprocessor control panel designed specifically for industrial refrigeration systems by Johnson Controls. The version 10.22 and earlier of Johnson Controls Frick Controls Quantum HD contained a security vulnerability. This vulnerability...

9.8CVSS5.8AI score0.00234EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/27 12:00 a.m.•2 views

CVE-2026-21659: Relative Path Traversal

Unauthenticated Remote Code Execution and Information Disclosure due to Local File Inclusion LFI vulnerability in Johnson Controls Frick Controls Quantum HD allow an unauthenticated attacker to execute arbitrary code on the affected device, leading to full system compromise. This issue affects...

9.8CVSS6.2AI score0.00925EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/27 12:00 a.m.•2 views

CVE-2026-21658: Improper Control of Generation of Code

Unauthenticated Remote Code Execution i.e Improper Control of Generation of Code 'Code Injection' vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection. Insufficient validation of input in certain parameters may permit unexpected actions, which could impact the securit...

9.8CVSS6AI score0.00637EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/27 12:00 a.m.•3 views

CVE-2026-21657: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection. Insufficient validation of input in certain parameters may permit unexpected actions, which could impact the security of the device before authentication...

9.8CVSS5.9AI score0.00399EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/27 12:00 a.m.•4 views

CVE-2026-21656: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection. Insufficient validation of input in certain parameters may permit unexpected actions, which could impact the security of the device before authentication...

9.8CVSS5.9AI score0.00399EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/27 12:00 a.m.•5 views

CVE-2026-21654: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Johnson Controls Frick Controls Quantum HD allows OS Command Injection. Insufficient validation of input in certain parameters may permit unexpected actions, which could impact the security o...

9.8CVSS5.9AI score0.01533EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/27 12:00 a.m.•4 views

CVE-2026-21660: Plaintext Storage of a Password

A Hardcoded Email Credentials Saved as Plaintext in Firmware CWE-256: Plaintext Storage of a Password vulnerability in Frick Controls Quantum HD version 10.22 and prior lead to unauthorized access, exposure of sensitive information, and potential misuse or system compromise This issue affects Fri...

9.8CVSS5.8AI score0.00234EPSS
SaveExploits0References5
The Hacker News
The Hacker News
•added 2026/02/26 12:06 p.m.•29 views

Expert Recommends: Prepare for PQC Right Now

Introduction: Steal It Today, Break It in a Decade Digital evolution is unstoppable, and though the pace may vary, things tend to fall into place sooner rather than later. That, of course, applies to adversaries as well. The rise of ransomware and cyber extortion generated funding for a complex a...

6.2AI score
SaveExploits0
ICS
ICS
•added 2026/02/26 7:00 a.m.•39 views

Johnson Controls, Inc. Frick Controls Quantum HD

RISK EVALUATION Successful exploitation of these vulnerabilities can lead to pre-authentication remote code execution, information leak or denial of service. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such...

9.8CVSS6.5AI score0.01533EPSS
SaveExploits0References11
RedhatCVE
RedhatCVE
•added 2026/02/26 4:15 a.m.•27 views

CVE-2026-27611

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to versions 1.1.3-stable and 1.2.6-beta, when users share password-protected files, the recipient can completely bypass the password and still download the file. This happens because the API returns a direct download link i...

7.1CVSS5.4AI score0.00433EPSS
SaveExploits1References1
Packet Storm News
Packet Storm News
•added 2026/02/26 12:00 a.m.•14 views

Cryptographic Fragility of Standard Quantum Repeater Protocols

The security of the proposed quantum Internet relies on repeater protocols designed under the assumption of stochastic, characterizable noise. We demonstrate that in adversarial environments this assumption induces performance vulnerabilities for computationally bounded repeater nodes. We show th...

5.9AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/02/26 12:00 a.m.•13 views

Strengthening Security and Noise Resistance in One-Way Quantum Key Distribution Protocols through Hypercube-Based Quantum Walks

Quantum Key Distribution QKD is a foundational cryptographic protocol that ensures information-theoretic security. However, classical protocols such as BB84, though favored for their simplicity, offer limited resistance to eavesdropping, and perform poorly under realistic noise conditions. Recent...

6AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/02/26 12:00 a.m.•26 views

Eve'S Forgery Probability from Her False Acceptance Probability: Interactive Authentication, Holevo Information and the Min-Entropy

We obtain estimates for Eve's forgery probability, namely the probability that she is able to forge a message which Alice or Bob mistakenly accept over a noisy Quantum channel for generating a shared Quantum secret key. This probability is related to Eve's success probability obtained in a previo...

5.8AI score
SaveExploits0
OSV
OSV
•added 2026/02/25 11:07 p.m.•23 views

GO-2026-4532 New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api...

7.6CVSS7.4AI score0.00273EPSS
SaveExploits1References3
OSV
OSV
•added 2026/02/25 11:07 p.m.•24 views

GO-2026-4546 FileBrowser Quantum: Password Protection Not Enforced on Shared File Links in github.com/gtsteffaniak/filebrowser/backend

FileBrowser Quantum: Password Protection Not Enforced on Shared File Links in github.com/gtsteffaniak/filebrowser/backend...

7.1CVSS8.1AI score0.00433EPSS
SaveExploits1References4
EUVD
EUVD
•added 2026/02/25 4:00 p.m.•29 views

EUVD-2026-8594

FileBrowser Quantum: Password Protection Not Enforced on Shared File Links...

7.1CVSS5.2AI score0.00433EPSS
SaveExploits1References4
OSV
OSV
•added 2026/02/25 4:00 p.m.•21 views

GHSA-8VRH-3PM2-V4V6 FileBrowser Quantum: Password Protection Not Enforced on Shared File Links

Summary When users share password-protected files, the recipient can completely bypass the password and still download the file. Details This happens because the API returns a direct download link in the details of the share, which is accessible to anyone with JUST THE SHARE LINK, even without th...

7.1CVSS5.6AI score0.00433EPSS
SaveExploits1References6
Rows per page
Query Builder