2603 matches found
CVE-2022-34848
Intel NUC Pro Software Suite before version 2.0.0.3 is affected by CVE-2022-34848 due to an uncontrolled search path that may allow an authenticated local user to escalate privileges. The affected product is Intel NUC Pro Software Suite; the root cause is improper search path handling in the soft...
CVE-2023-27382
The CVE-2023-27382 issue affects Intel NUC P14E Laptop Element software for Windows 10, specifically the Audio Service. The root cause is incorrect default permissions that could allow an authenticated local user to escalate privileges. The vulnerable component is the Audio Service (and related a...
PT-2023-35815 · Git +1 · Harfbuzz
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash occurs in the sort r simple function and involves the...
r-tsushin.com Cross Site Scripting vulnerability OBB-3269455
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ABB M2M ETHERNET Improper Authentication (CVE-2018-17926)
The product M2M ETHERNET FW Versions 2.22 and prior, ETH-FW Versions 1.01 and prior is vulnerable in that an attacker can upload a malicious language file by bypassing the user authentication mechanism. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-...
CISA Releases Four Industrial Control Systems Advisories
CISA released four Industrial Control Systems ICS advisories on April 18, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for...
CVE-2023-1617
Improper Authentication vulnerability in B&R Industrial Automation B&R VC4 VNC-Server modules. This vulnerability may allow an unauthenticated network-based attacker to bypass the authentication mechanism of the VC4 visualization on affected devices. The impact of this vulnerability depends on th...
Authentication flaw
Improper Authentication vulnerability in B&R Industrial Automation B&R VC4 VNC-Server modules. This vulnerability may allow an unauthenticated network-based attacker to bypass the authentication mechanism of the VC4 visualization on affected devices. The impact of this vulnerability depends on th...
CVE-2023-1617 Improper Authentication Mechanism in B&R VC4 Visualization
Improper Authentication vulnerability in B&R Industrial Automation B&R VC4 VNC-Server modules. This vulnerability may allow an unauthenticated network-based attacker to bypass the authentication mechanism of the VC4 visualization on affected devices. The impact of this vulnerability depends on th...
CVE-2023-1617
CVE-2023-1617 concerns the B&R VC4 visualization (VNC-Server modules) where an unauthenticated network attacker can bypass authentication. Affected are B&R VC4 versions across multiple series: 3.* (to 3.96.7), 4.0* (to 4.06.7), 4.1* (to 4.16.3), 4.2* (to 4.26.8), 4.3* (to 4.34.6), 4.4* (to 4.45.1...
CVE-2023-1617 Improper Authentication Mechanism in B&R VC4 Visualization
Improper Authentication vulnerability in B&R Industrial Automation B&R VC4 VNC-Server modules. This vulnerability may allow an unauthenticated network-based attacker to bypass the authentication mechanism of the VC4 visualization on affected devices. The impact of this vulnerability depends on th...
B&R Systems Diagnostics Manager
1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: B&R Industrial Automation Equipment: Systems Diagnostics Manager SDM Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability...
Mitsubishi Electric MELSEC iQ-R, iQ-L Series and MELIPC Series Improper Resource Shutdown or Release (CVE-2022-33324)
Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions 32 and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120ENCPU Firmware versions 65 and prior, Mitsubishi Electric Corporation MELSEC iQ...
Exploit for Untrusted Pointer Dereference in Microsoft
CVE-2023-21768 Local Privilege Escalation POC authors: chomp...
Exploit for Untrusted Pointer Dereference in Microsoft
CVE-2023-21768 Local Privilege Escalation POC authors: chomp...
CVE-2023-0457
CVE-2023-0457 affects Mitsubishi Electric MELSEC iQ-F/R/Q/L series (including FX5U, FX5UJ, FX5S, FX5-ENET, FX5-ENET/IP and related iQ-R/Q/L variants). The vulnerability is a plaintext storage of a password in project files, enabling a remote, unauthenticated attacker to disclose plaintext credent...
PT-2023-12372 · Unknown · Coslat Firewall
Name of the Vulnerable Software and Affected Versions: COSLAT Firewall versions 5.24.0.R.20180630 through 5.24.0.R.20210727 Description: The issue is related to improper handling of parameters, allowing remote code inclusion. This can be exploited, potentially leading to unauthorized access or co...
Improper access control
Improper access control in the IntelR SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable escalation of privilege via network access...
Input validation
Improper neutralization in the IntelR EMA software before version 1.8.1.0 may allow a privileged user to potentially enable escalation of privilege via network access...
Improper access control
Improper access control in the Crypto API Toolkit for IntelR SGX before version 2.0 commit ID 91ee496 may allow an authenticated user to potentially enable escalation of privilege via local access...