2603 matches found
CVE-2022-38076
Improper input validation in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow an authenticated user to potentially enable escalation of privilege via local access...
Malicious code in puppet-module-posix-system-r (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2ad3a13f7c087320a9f4bf76203fd40172a2b55172dec3ac957ad4d265c01425 The OpenSSF Package Analysis project identified 'puppet-module-posix-system-r' @ 1.0.0 rubygems as malicious. It is considered malicious because...
CVE-2023-37860
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote unauthenticated attacker can obtain the r/w community string of the SNMPv2 daemon...
Fujitsu network devices Si-R series and SR-M series vulnerable to authentication bypass
Overview The web management interface of Fujitsu network devices Si-R series and SR-M series contains an authentication bypass vulnerability CWE-287,CVE-2023-38555. Katsuhiko Sato a.k.a. gorohkun of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer...
CVE-2023-3242
Improper initialization implementation in Portmapper used in B&R Industrial Automation Automation Runtime G4.93 allows unauthenticated network-based attackers to cause permanent denial-of-service conditions...
Design/Logic Flaw
Allocation of Resources Without Limits or Throttling, Improper Initialization vulnerability in B&R Industrial Automation B&R Automation Runtime allows Flooding, Leveraging Race Conditions.This issue affects B&R Automation Runtime: G4.93...
CVE-2023-3242
Improper initialization implementation in Portmapper used in B&R Industrial Automation Automation Runtime G4.93 allows unauthenticated network-based attackers to cause permanent denial-of-service conditions...
CVE-2023-3242
The CVE-2023-3242 issue concerns B&R Automation Runtime’s Portmapper. Affected product: B&R Industrial Automation Automation Runtime (prior to G4.93). Vulnerable component: Portmapper service with improper initialization. Impact: unauthenticated network-based attackers can cause permanent denial-...
CVE-2023-38555
Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated attacker to obtain, change, and/or reset configuration settings of the affected products. Affected products and versions are as follows: Si-R 30B all versions, Si-R...
CVE-2023-38555
Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated attacker to obtain, change, and/or reset configuration settings of the affected products. Affected products and versions are as follows: Si-R 30B all versions, Si-R...
Authentication flaw
Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated attacker to obtain, change, and/or reset configuration settings of the affected products. Affected products and versions are as follows: Si-R 30B all versions, Si-R...
CVE-2023-38555
Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated attacker to obtain, change, and/or reset configuration settings of the affected products. Affected products and versions are as follows: Si-R 30B all versions, Si-R...
CVE-2023-38555
Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated attacker to obtain, change, and/or reset configuration settings of the affected products. Affected products and versions are as follows: Si-R 30B all versions, Si-R...
PT-2023-8778 · Fujitsu · Fujitsu Sr-M 50Ap1 +13
Name of the Vulnerable Software and Affected Versions: Fujitsu Si-R 30B all versions Fujitsu Si-R 130B all versions Fujitsu Si-R 90brin all versions Fujitsu Si-R570B all versions Fujitsu Si-R370B all versions Fujitsu Si-R220D all versions Fujitsu Si-R G100 versions V02.54 and earlier Fujitsu Si-R...
Fujitsu network devices Si-R series 授权问题漏洞
The Fujitsu network devices Si-R series is a router from Fujitsu, Japan. A security vulnerability exists in the Fujitsu Si-R series and SR-M series, which originates from an authentication bypass vulnerability. An attacker could exploit this vulnerability to obtain, change, or reset the...
Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1613)
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker coul...
Cisco NX-OS Software Bash Shell Privilege Escalation (CVE-2019-1596)
A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to escalate their privilege level to root. The attacker must authenticate with valid user credentials. The vulnerability is due to incorrect permissions of a system executable. A...
Fedora: Security Advisory for R-jsonlite (FEDORA-2023-0b0bb84049)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 38 Update: R-jsonlite-1.8.5-2.fc38
A reasonably fast JSON parser and generator, optimized for statistical data a nd the web. Offers simple, flexible tools for working with JSON in R, and is particularly powerful for building pipelines and interacting with a web API. The implementation is based on the mapping described in the...
Fedora 38 : R-jsonlite (2023-0b0bb84049)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-0b0bb84049 advisory. Security fix for CVE-2023-33460a Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...