999 matches found
CVE-2024-2097
An authenticated malicious client can send a special LINQ query to execute arbitrary code remotely RCE on the SCM server from List control, and execute the arbitrary code on the same system where SCMArchivedEventViewerTool is installed in the case of SCM Tools...
CVE-2024-2097
An authenticated malicious client can send a special LINQ query to execute arbitrary code remotely RCE on the SCM server from List control, and execute the arbitrary code on the same system where SCMArchivedEventViewerTool is installed in the case of SCM Tools...
CVE-2024-0400
SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the SCM server, for customized filtering. An Authenticated malicious client can send a specially crafted code to skip the validation and execute arbitrary code RCE on the SCM Server...
CVE-2024-0400
SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the SCM server, for customized filtering. An Authenticated malicious client can send a specially crafted code to skip the validation and execute arbitrary code RCE on the SCM Server...
CVE-2024-0400
CVE-2024-0400 affects Hitachi Energy MACH SCM (versions 4.0 to 4.38; advice also references 4.6 to 4.38.0 with 4.38.1 as fix). The vulnerability involves improper generation of code (CWE-94) and improper neutralization of directives in dynamically evaluated code (CWE-95), enabling an authenticate...
CVE-2024-0400: Improper Control of Generation of Code
SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the SCM server, for customized filtering. An Authenticated malicious client can send a specially crafted code to skip the validation and execute arbitrary code RCE on the SCM Server...
CVE-2024-2097: Improper Control of Generation of Code
An authenticated malicious client can send a special LINQ query to execute arbitrary code remotely RCE on the SCM server from List control, and execute the arbitrary code on the same system where SCMArchivedEventViewerTool is installed in the case of SCM Tools...
Hitachi Energy MACH System Software 安全漏洞
Hitachi Energy MACH System Software is a MACH real-time high-performance control system platform from Hitachi, Japan. A security vulnerability exists in Hitachi Energy MACH System Software that originates from an authenticated malicious client that can send a special LINQ query to remotely execut...
Hitachi Energy MACH SCM (Update A)
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.9 ATTENTION : Exploitable remotely Vendor : Hitachi Energy Equipment : MACH SCM Vulnerabilities : Improper Control of Generation of Code, Improper Neutralization of Directives in Dynamically Evaluated Code 2. RISK EVALUATION Successful exploitation of...
PT-2024-15527
Name of the Vulnerable Software and Affected Versions SCM Software affected versions not specified Description The issue allows an authenticated malicious client to send specially crafted code to skip validation and execute arbitrary code remotely on the SCM Server. This can be achieved by...
Fedora: Security Advisory for maven-wagon (FEDORA-2024-129d8ca6fc)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: maven-wagon-3.5.3-7.fc40
Maven Wagon is a transport abstraction that is used in Maven's artifact and repository handling code. Currently wagon has the following providers: File HTTP FTP SSH/SCP WebDAV SCM in progress...
PT-2024-18819
Name of the Vulnerable Software and Affected Versions SCM Server affected versions not specified Description The issue allows an authenticated malicious client to send a special LINQ query to execute arbitrary code remotely on the SCM Server, which an attacker would not otherwise have authorizati...
Hands-on Review: Myrror Security Code-Aware and Attack-Aware SCA
Introduction The modern software supply chain represents an ever-evolving threat landscape, with each package added to the manifest introducing new attack vectors. To meet industry requirements, organizations must maintain a fast-paced development process while staying up-to-date with the latest...
The vulnerability of the io_uring component in the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the iouring component in the Linux operating system’s kernel is related to the reutilization of previously freed memory due to competitive access to resources in the scmfpcopy function within the net/core/scm.c module. Exploiting this vulnerability can allow an attacker to...
CVE-2022-2602
iouring UAF, Unix SCM garbage collection...
CVE-2022-2602
iouring UAF, Unix SCM garbage collection...
CVE-2022-2602
iouring UAF, Unix SCM garbage collection...
CVE-2022-2602
CVE-2022-2602 is a Linux kernel vulnerability in io_uring related to a use-after-free in the Unix garbage collection path. Multiple connected sources confirm a local, kernel-side issue (io_uring UAF) that can be exploited to crash the kernel and, in PoC scenarios, enable privilege escalation by r...
