Lucene search
+L

4596 matches found

attackerkb
attackerkb
•added 2023/05/12 1:15 p.m.•17 views

CVE-2023-23444

Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to...

8.2CVSS7.3AI score0.0117EPSS
SaveExploits0References4
Prion
Prion
•added 2023/05/12 1:15 p.m.•29 views

Authentication flaw

Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to...

6.4CVSS8.2AI score0.0117EPSS
SaveExploits0References3
CVE
CVE
•added 2023/05/12 12:39 p.m.•76 views

CVE-2023-23444

CVE-2023-23444 affects SICK Flexi Classic and Flexi Soft Gateways with partnumbers: 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597. The issue is a missing authentication for a critical function that al...

8.2CVSS8.2AI score0.0117EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/12 12:39 p.m.•14 views

CVE-2023-23444

Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to...

7.5CVSS8.3AI score0.0117EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/05/12 12:00 a.m.•15 views

SICK Flexi Classic 访问控制错误漏洞

SICK FX0-GENT00000 is a security control module from SICK with a built-in Ethernet switch. A security vulnerability exists in SICK Flexi Classic, Flexi Soft Gateways that originates from a vulnerability that could allow an unauthenticated, remote attacker to change the IP settings of the device v...

8.2CVSS7.8AI score0.0117EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2023/05/12 12:00 a.m.•34 views

CVE-2023-25428

A DLL Hijacking issue discovered in Soft-o Free Password Manager 1.1.20 allows attackers to create arbitrary DLLs leading to code execution...

8AI score0.00466EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/12 12:00 a.m.•9 views

CVE-2023-23444: Missing Authentication for Critical Function

Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to...

8.2CVSS5.9AI score0.0117EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/12 12:00 a.m.•6 views

CVE-2023-25428: Uncontrolled Search Path Element

A DLL Hijacking issue discovered in Soft-o Free Password Manager 1.1.20 allows attackers to create arbitrary DLLs leading to code execution...

7.8CVSS6.2AI score0.00466EPSS
SaveExploits1References3
CVE
CVE
•added 2023/05/12 12:00 a.m.•70 views

CVE-2023-25428

Soft-o Free Password Manager 1.1.20 is affected by a DLL hijacking flaw (PMHook.dll) that can lead to arbitrary code execution when a malicious DLL is loaded from the system directory. Details cited across CVE-2023-25428 entries (NVD/Red Hat/EUVD/PRION/CVE records) describe the vulnerability as a...

7.8CVSS7.8AI score0.00466EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/12 12:00 a.m.•11 views

CVE-2023-25428

A DLL Hijacking issue discovered in Soft-o Free Password Manager 1.1.20 allows attackers to create arbitrary DLLs leading to code execution...

7.4AI score0.00466EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/05/12 12:00 a.m.•7 views

PT-2023-20056

Name of the Vulnerable Software and Affected Versions Soft-o Free Password Manager version 1.1.20 Description A DLL Hijacking issue allows attackers to create arbitrary DLLs, leading to code execution. Recommendations For Soft-o Free Password Manager version 1.1.20, consider disabling the loading...

7.8CVSS0.00466EPSS
SaveExploits1References5
NVD
NVD
•added 2023/05/10 6:15 a.m.•23 views

CVE-2023-27527

Shinseiyo Sogo Soft 7.9A and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker...

7.5CVSS7.6AI score0.00343EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/05/10 6:15 a.m.•13 views

CVE-2023-27527

Shinseiyo Sogo Soft 7.9A and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker...

7.5CVSS6.3AI score0.00343EPSS
SaveExploits0References2
Prion
Prion
•added 2023/05/10 6:15 a.m.•28 views

Xxe

Shinseiyo Sogo Soft 7.9A and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker...

5CVSS7.6AI score0.00343EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2023/05/10 12:00 a.m.•17 views

Soft-o Free Password Manager 代码问题漏洞

Soft-o Free Password Manager is a password manager from Soft-o. A security vulnerability exists in Soft-o Free Password Manager version 1.1.20. An attacker could exploit this vulnerability to conduct a DLL hijacking attack...

7.8CVSS7.4AI score0.00466EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/10 12:00 a.m.•5 views

CVE-2023-27527: Improper Restriction of XML External Entity Reference

Shinseiyo Sogo Soft 7.9A and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker...

7.5CVSS5.9AI score0.00343EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/05/10 12:00 a.m.•6 views

PT-2023-21194

Name of the Vulnerable Software and Affected Versions Shinseiyo Sogo Soft versions 7.9A and earlier Description The issue improperly restricts XML external entity references XXE. By processing a specially crafted XML file, an attacker may access arbitrary files on the PC. Recommendations For...

7.5CVSS5.8AI score0.00343EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2023/05/10 12:00 a.m.•30 views

CVE-2023-27527

Shinseiyo Sogo Soft 7.9A and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker...

7.8AI score0.00343EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2023/05/10 12:00 a.m.•295 views

Soft-o Free Password Manager 1.1.20 DLL Hijacking

Title: Soft-o Free Password Manager 1.1.20 DLL hijacking Credit: Christian Bortone CVE: CVE-2023-25428 Date: 08/05/2023 dd/mm/yyyy Details: PMHook.dll is vulnerable to DLL hijacking attacks. An attacker can launch a DLL hijacking attack by placing a malicious DLL named PMHook.dll in the target...

7.1AI score0.00466EPSS
SaveExploits1
Vulnrichment
Vulnrichment
•added 2023/05/10 12:00 a.m.•16 views

CVE-2023-27527

Shinseiyo Sogo Soft 7.9A and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker...

7.6AI score0.00343EPSS
SaveExploits0References2
Rows per page
Query Builder