288 matches found
Weak Password Vulnerability in CGW9000 of Shanghai Huanchuang Communication Technology Co.
Shanghai Huanchuang Communication Technology Co., Ltd. is a high-tech enterprise focusing on the research and development of wireless communication products for private network with the core of wireless communication technology, providing solutions for private network in rail transportation, fire...
SUSE CVE-2012-3436
OpenTTD 0.6.0 through 1.2.1 does not properly validate requests to clear a water tile, which allows remote attackers to cause a denial of service NULL pointer dereference and server crash via a certain sequence of steps related to "the water/coast aspect of tiles which also have railtracks on one...
Rails 跨站脚本漏洞
Rails is a Ruby-based open source web application framework from the Rails team. A cross-site scripting vulnerability exists in Rails rails-html-sanitizer versions prior to 1.4.4, which stems from a possible XSS vulnerability in certain configurations of Rails::Html::Sanitizer, where...
CVE-2022-37177
HireVue Hiring Platform V1.0 suffers from Use of a Broken or Risky Cryptographic Algorithm. NOTE: this is disputed by the vendor for multiple reasons, e.g., it is inconsistent with CVE ID assignment rules for cloud services, and no product with version V1.0 exists. Furthermore, the rail-fence...
PT-2022-23857 · Hirevue · Hirevue Hiring Platform
Name of the Vulnerable Software and Affected Versions: HireVue Hiring Platform version V1.0 Description: The issue concerns the use of a broken or risky cryptographic algorithm. However, this is disputed by the vendor due to inconsistencies with CVE ID assignment rules for cloud services and the...
SourceCodester Online Railway Reservation System SQL注入漏洞（CNVD-2022-53357）
Sourcecodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or would-be passengers to view their schedules and reserve seats. Online Railway Reservation System v1.0 version contains a SQL injection vulnerability...
chessierail.org Improper Access Control vulnerability OBB-2443789
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
delhimetrorail.info Cross Site Scripting vulnerability OBB-2361879
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
January 25, 2022—KB5009608 (OS Build 20348.502) Preview
None None...
Siemens Industrial Products LLDP (Update D)
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...
CVE-2020-25011
A sensitive information disclosure vulnerability in Kyland KPS2204 6 Port Managed Din-Rail Programmable Serial Device Servers Software Version:R0002.P05 allows remote attackers to get username and password by request /cgi-bin/webadminget.cgi script via the browser...
CVE-2020-25010
An arbitrary code execution vulnerability in Kyland KPS2204 6 Port Managed Din-Rail Programmable Serial Device Servers Software Version:R0002.P05 allows remote attackers to upload a malicious script file by constructing a POST type request and writing a payload in the request parameters as an...
Information disclosure
A sensitive information disclosure vulnerability in Kyland KPS2204 6 Port Managed Din-Rail Programmable Serial Device Servers Software Version:R0002.P05 allows remote attackers to get username and password by request /cgi-bin/webadminget.cgi script via the browser...
File upload vulnerability in high-speed rail wifi system
The high-speed rail WiFi system provides an integrated wireless information application platform, which can provide passengers with rich information and entertainment applications, as well as a management platform for on-board staff to the passenger transportation management. There is a file uplo...
Buffer Overflow Vulnerability in IEC104
The IEC104 statute is an international standard widely used in industries such as electric power and urban rail transit. A buffer overflow vulnerability exists in IEC104, which can be exploited by an attacker to trigger a stack buffer overflow and cause a program exit...
Siemens SCALANCE WLC711 6GK571-10XC00-1AB0 IWLAN Controller Detection
Binary data 765311.prm...
Siemens SIPLUS CPU 1511-1 PN RAIL PLC Detection
Binary data 750194.prm...
Siemens SIPLUS CPU 1516-3 PN/DP RAIL PLC Detection
Binary data 750195.prm...