2452 matches found
CVE-2022-29831
CVE-2022-29831 affects Mitsubishi Electric GX Works3, specifically versions 1.015R–1.095Z, with a vulnerability in hard-coded passwords that could allow a remote, unauthenticated attacker to obtain information about the MELSEC safety CPU module project file. The vulnerability is documented with a...
CVE-2022-29828
The CVE-2022-29828 issue affects Mitsubishi Electric GX Works3, with versions starting at 1.000A and later; the root cause is a hard-coded cryptographic key that could allow remote, unauthenticated attackers to disclose sensitive information and potentially view or execute programs. According to ...
CVE-2022-29827
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated attackers may view programs and project files or execute programs illegally...
Design/Logic Flaw
A vulnerability has been identified in Micro Focus Filr in versions prior to 4.3.1.1. The vulnerability could be exploited to allow a remote unauthenticated attacker to enumerate valid users of the system. Remote unauthenticated user enumeration. This issue affects: Micro Focus Filr versions prio...
CVE-2022-38755
Vulnerability summary (CVE-2022-38755) : Micro Focus Filr versions prior to 4.3.1.1 are affected by a remote, unauthenticated user-enumeration flaw. Attackers can enumerate valid user accounts without authentication. The issue is confirmed across multiple sources (NVD/Red Hat/ CVE listings). Impa...
Mitsubishi (CVE-2022-33322)
Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapter, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator...
CVE-2022-38201
An unvalidated redirect vulnerability exists in Esri Portal for ArcGIS Quick Capture Web Designer versions 10.8.1 to 10.9.1. A remote, unauthenticated attacker can potentially induce an unsuspecting authenticated user to access an an attacker controlled domain...
CVE-2022-38650
A remote unauthenticated insecure deserialization vulnerability exists in VMware Hyperic Server 5.8.6. Exploitation of this vulnerability enables a malicious party to run arbitrary code or malware within Hyperic Server and the host operating system with the privileges of the Hyperic server proces...
CVE-2022-38650
A remote unauthenticated insecure deserialization vulnerability exists in VMware Hyperic Server 5.8.6. Exploitation of this vulnerability enables a malicious party to run arbitrary code or malware within Hyperic Server and the host operating system with the privileges of the Hyperic server proces...
PT-2022-24500 · Vmware · Vmware Hyperic Server
Name of the Vulnerable Software and Affected Versions: VMware Hyperic Server version 5.8.6 Description: A remote unauthenticated insecure deserialization vulnerability exists, enabling a malicious party to run arbitrary code or malware within Hyperic Server and the host operating system with the...
CVE-2022-34822
Path traversal vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote unauthenticated attacker to overwrite...
CVE-2022-34823
Buffer overflow vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote unauthenticated attacker to overwrite...
CVE-2022-33322
Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapter, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator...
PT-2022-21770 · Mitsubishi · Mitsubishi Electric Consumer Electronics Products
Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric consumer electronics products affected versions not specified Description: A cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products allows a remote unauthenticated attacker to execute a...
NEC Expresscluster X 路径遍历漏洞
NEC Expresscluster X is a specialized high availability cluster software from Nippon Electric NEC. It is used to enable fast restore functions and continuously protect critical applications and data. A security vulnerability exists in NEC Expresscluster X 5.0 for Windows and prior, Expresscluster...
CVE-2022-33322
Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapter, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator...
Directory traversal
A remote, unauthenticated, directory traversal vulnerability was identified within the web interface used by IND780 Advanced Weighing Terminals Build 8.0.07 March 19, 2018 SS Label 'IND7808.0.07', Version 7.2.10 June 18, 2012 SS Label 'IND7807.2.10'. It was possible to traverse the folders of the...
CVE-2022-34439
Dell PowerScale OneFS, versions 8.2.0.x-9.4.0.x contain allocation of Resources Without Limits or Throttling vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service and performance issue on that node...
D-Link DSL-2750B 命令注入漏洞
The D-Link DSL-2750B is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DSL-2750B prior to version 1.05. An attacker can exploit this vulnerability to perform remote unauthenticated command injection via the login.cgi-cli parameter...
