Lucene search
+L

1200 matches found

Cvelist
Cvelist
•added 2023/10/25 11:18 p.m.•41 views

CVE-2023-30967 Gotham Orbital Simulator path traversal

Gotham Orbital-Simulator service prior to 0.692.0 was found to be vulnerable to a Path traversal issue allowing an unauthenticated user to read arbitrary files on the file system...

9.8CVSS9.6AI score0.00736EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/10/25 11:18 p.m.•24 views

CVE-2023-30967 Gotham Orbital Simulator path traversal

Gotham Orbital-Simulator service prior to 0.692.0 was found to be vulnerable to a Path traversal issue allowing an unauthenticated user to read arbitrary files on the file system...

9.8CVSS7.2AI score0.00736EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/10/25 12:00 a.m.•15 views

Palantir Gotham Orbital-Simulator Path Traversal Vulnerability

Palantir Gotham Orbital-Simulator is a software tool from Palantir, Inc. designed to provide advanced data analysis and visualization for working with a variety of different types of data, including large-scale geospatial data. A security vulnerability exists in Palantir Gotham Orbital-Simulator...

9.8CVSS6.7AI score0.00736EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/25 12:00 a.m.•9 views

CVE-2023-30967: Improper Limitation of a Pathname to a Restricted Directory

Gotham Orbital-Simulator service prior to 0.692.0 was found to be vulnerable to a Path traversal issue allowing an unauthenticated user to read arbitrary files on the file system...

9.8CVSS7.3AI score0.00736EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2023/10/15 12:00 a.m.•28 views

Simulator Privilege Escalation

The vulnerability of the Simulator component for operating systems such as watchOS, tvOS, iPadOS, and iOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.00299EPSS
SaveExploits0References6Affected Software4
Positive Technologies
Positive Technologies
•added 2023/08/03 12:00 a.m.•21 views

PT-2023-7337 · Fuji Electric · Fuji Electric Tellus Lite V-Simulator

Name of the Vulnerable Software and Affected Versions: Fuji Electric Tellus Lite V-Simulator affected versions not specified Description: The issue is related to the parsing of a specially-crafted input file by Fuji Electric Tellus Lite V-Simulator, which may lead to an out of bounds write. This...

7.8CVSS7.6AI score0.00335EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
•added 2023/06/13 12:00 a.m.•22 views

Fuji Electric Tellus Lite V-Simulator Buffer Overflow

The vulnerability of the monitoring software for PLCCs from Fuji Electric, Tellus Lite V-Simulator, is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.0026EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/06/13 12:00 a.m.•19 views

Fuji Electric Tellus Lite V-Simulator Buffer Overflow

The vulnerability of the monitoring software for PLCCs from Fuji Electric, Tellus Lite V-Simulator, lies in the ability to write data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00314EPSS
SaveExploits0References5Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2023/06/08 12:00 a.m.•34 views

Fuji Electric Tellus Lite V-Simulator 6 X1 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.0026EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/06/08 12:00 a.m.•31 views

Fuji Electric Tellus Lite V-Simulator 6 X1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00314EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/06/08 12:00 a.m.•35 views

Fuji Electric Tellus Lite V-Simulator 6 X1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00314EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/06/08 12:00 a.m.•43 views

Fuji Electric Tellus Lite V-Simulator 6 X1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00314EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/06/08 12:00 a.m.•42 views

Fuji Electric Tellus Lite V-Simulator 6 X1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00314EPSS
SaveExploits0References1
NVD
NVD
•added 2023/06/06 7:15 p.m.•42 views

CVE-2023-33651

An issue in the MVC Device Simulator of Sitecore Experience Platform XP, Experience Manager XM, and Experience Commerce XC v9.0 Initial Release to v13.0 Initial Release allows attackers to bypass authorization rules...

7.5CVSS7.5AI score0.01427EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2023/06/06 7:15 p.m.•21 views

CVE-2023-33651

An issue in the MVC Device Simulator of Sitecore Experience Platform XP, Experience Manager XM, and Experience Commerce XC v9.0 Initial Release to v13.0 Initial Release allows attackers to bypass authorization rules...

7.5CVSS7.1AI score0.01427EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/06/06 7:15 p.m.•13 views

CVE-2023-33651

An issue in the MVC Device Simulator of Sitecore Experience Platform XP, Experience Manager XM, and Experience Commerce XC v9.0 Initial Release to v13.0 Initial Release allows attackers to bypass authorization rules...

7.5CVSS7.2AI score0.01427EPSS
SaveExploits1References3
Prion
Prion
•added 2023/06/06 7:15 p.m.•29 views

Authorization

An issue in the MVC Device Simulator of Sitecore Experience Platform XP, Experience Manager XM, and Experience Commerce XC v9.0 Initial Release to v13.0 Initial Release allows attackers to bypass authorization rules...

5CVSS7.5AI score0.01427EPSS
SaveExploits1References2Affected Software3
Cvelist
Cvelist
•added 2023/06/06 12:00 a.m.•52 views

CVE-2023-33651

An issue in the MVC Device Simulator of Sitecore Experience Platform XP, Experience Manager XM, and Experience Commerce XC v9.0 Initial Release to v13.0 Initial Release allows attackers to bypass authorization rules...

7.7AI score0.01427EPSS
SaveExploits1References2
CVE
CVE
•added 2023/06/06 12:00 a.m.•83 views

CVE-2023-33651

CVE-2023-33651 affects Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) from 9.0 Initial Release through 13.0 Initial Release. The vulnerability is in the MVC Device Simulator and allows attackers to bypass authorization rules. The connected PT-Security rep...

7.5CVSS7.5AI score0.01427EPSS
SaveExploits1References2Affected Software4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/06 12:00 a.m.•9 views

CVE-2023-33651: Incorrect Authorization

An issue in the MVC Device Simulator of Sitecore Experience Platform XP, Experience Manager XM, and Experience Commerce XC v9.0 Initial Release to v13.0 Initial Release allows attackers to bypass authorization rules...

7.5CVSS5.8AI score0.01427EPSS
SaveExploits1References3
Rows per page
Query Builder