Lucene search
+L

1200 matches found

ICS
ICS
•added 2022/12/20 12:00 a.m.•69 views

Fuji Electric Tellus Lite V-Simulator

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Fuji Electric Equipment: Tellus Lite V-Simulator Vulnerabilities: Out-of-bounds Write, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute...

7.8CVSS8.5AI score0.00314EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/12/20 12:00 a.m.•22 views

Fuji Electric Tellus Lite V-Simulator buffer error vulnerability

Fuji Electric Tellus Lite V-Simulator is a remote monitoring software for industrial environments from Fuji Electric Japan. A buffer error vulnerability exists in Fuji Electric Tellus Lite V-Simulator version 4.0.12.0 and prior versions, which stems from vulnerability to out-of-bounds writes, whi...

7.8CVSS8AI score0.00314EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/12/20 12:00 a.m.•24 views

Fuji Electric Tellus Lite V-Simulator security vulnerability

Fuji Electric Tellus Lite V-Simulator is a remote monitoring software for industrial environments developed by FujiElectric Japan, which is mainly used to collect real-time data from PLCs Programmable Logic Controllers, temperature controllers, inverters, and other devices. Fuji Electric Tellus...

7.8CVSS7.8AI score0.0026EPSS
SaveExploits0References5
vulnersOsv
vulnersOsv
•added 2022/11/30 12:00 a.m.•4 views

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +67 more potentially affected by CVE-2022-22984 via snyk-sbt-plugin (>=1.0.2, <=2.15.0)

snyk-sbt-plugin NPM version =1.0.2, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =0.0.2, =0.0.7, =1.0.1 - @ericblade/quagga2-redux-middleware 1.0.1 and more Source cves: CVE-2022-22984 Source advisory: MEND:CVE-2022-22984...

6.3CVSS6.4AI score0.03115EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/11/30 12:00 a.m.•5 views

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +84 more potentially affected by CVE-2022-22984 via snyk (>=0.5.0, <=1.954.0)

snyk NPM version =0.5.0, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =1.6.0, =1.1.0, =1.0.1, =1.0.2, =1.0.16 and more Source cves: CVE-2022-22984 Source advisory: MEND:CVE-2022-22984...

6.3CVSS0.03115EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2022/10/26 12:00 a.m.•15 views

PT-2025-40734

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified within the netdevsim module of the Linux kernel, specifically in the nsim drv probe function. This leak occurs when nsim dev resources register fails during...

5.5CVSS5.5AI score0.0014EPSS
SaveExploits0References19
Snyk
Snyk
•added 2022/10/18 9:46 p.m.•13 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64 to version 6.0.3 or higher. References - Dotnet Announcement -...

8.8CVSS7.3AI score0.01608EPSS
SaveExploits0References2
Snyk
Snyk
•added 2022/10/18 9:46 p.m.•14 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64 to version 6.0.3 or higher. References - Dotnet Announcement...

8.8CVSS7.3AI score0.01608EPSS
SaveExploits0References2
Snyk
Snyk
•added 2022/10/18 9:46 p.m.•16 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86 to version 6.0.3 or higher. References - Dotnet Announcement -...

8.8CVSS7.3AI score0.01608EPSS
SaveExploits0References2
Pen Test Partners Blog
Pen Test Partners Blog
•added 2022/09/08 5:04 a.m.•32 views

DEF CON 30. Hacking EFBs. Engine Performance

At DEF CON 30 this year we demonstrated some vulnerabilities in electronic flight bags and the potential impact on flight safety. There’s plenty more detail of EFB security issues here. As part of the Aerospace Village at DEF CON 30, we invited people to fly our flight sim under instruction from...

0.5AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/08/11 2:49 p.m.•5 views

searchstax-simulator-crawler (>=0.0.1a22, <=0.0.1a23) potentially affected by CVE-2022-36359 +1 more via django (1.8.13)

django PYPI version 1.8.13 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - searchstax-simulator-crawler =0.0.1a22, =0.0.1a23 Source cves: CVE-2022-36359, CVE-2022-45442 Source advisory: OSV:GHSA-8X94-HMJH-97HQ...

8.8CVSS0.00935EPSS
SaveExploits1
Snyk
Snyk
•added 2022/07/22 8:09 a.m.•10 views

Malicious Package

Overview amplify-category-api-dynamodb-simulator is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only...

9.8CVSS7.1AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2022/07/20 11:21 a.m.•4 views

Malware in amplify-category-api-dynamodb-simulator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/07/20 11:21 a.m.•10 views

Malicious code in amplify-category-api-dynamodb-simulator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8891bc9b89c5f04d865d23a8aaaa496f59bde6cca82becce21df120ddd894b9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2022/07/20 11:21 a.m.•23 views

MAL-2022-976 Malicious code in amplify-category-api-dynamodb-simulator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8891bc9b89c5f04d865d23a8aaaa496f59bde6cca82becce21df120ddd894b9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_cve
osv_cve
•added 2022/07/18 11:15 p.m.•15 views

CVE-2022-34642

The component mcontrol.action in RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 contains the incorrect mask which can cause a Denial of Service DoS...

5.5CVSS6.1AI score0.00221EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/07/18 11:15 p.m.•10 views

CVE-2022-34643

RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 implements the incorrect exception priotrity when accessing memory...

5.5CVSS5.9AI score0.00223EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/07/18 11:15 p.m.•20 views

CVE-2022-34643

RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 implements the incorrect exception priotrity when accessing memory...

5.5CVSS5.8AI score0.00223EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/07/11 1:15 a.m.•9 views

CVE-2022-31537

The jmcginty15/Solar-system-simulator repository through 2021-07-26 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01337EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/07/11 1:15 a.m.•17 views

CVE-2022-31537

The jmcginty15/Solar-system-simulator repository through 2021-07-26 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01337EPSS
SaveExploits1References1
Rows per page
Query Builder