Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to incorrect handling of exceptional states, allowing a violator to execute arbitrary code.

The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to incorrect processing of exceptional states during syntax analysis of DWG files. Exploiting this vulnerability can allow attackers to execute arbitrary code using a specially created malicious DWG file...

Prism 安全漏洞

Prism is an application from the US-based individual developers of Prism. It is a lightweight, extensible syntax highlighting tool. Prism suffers from a security vulnerability that stems from Prism's susceptibility to inefficient regular expression complexity...

The vulnerability of TCP/IP NicheLite and InterNiche, related to improper handling of exceptional states, allows attackers to trigger a service failure.

The vulnerability of TCP/IP NicheLite and InterNiche relates to improper handling of exceptional states during HTTP requests processing. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium lies in the insufficient checking of unusual or exceptional states. This allows a intruder to trigger a malfunction in maintenance by using a specially crafted HTTP packet.

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium lies in the insufficient testing of unusual or exceptional states. Exploiting this vulnerability can allow an attacker operating remotely...

The vulnerability of the microprogrammed logic controller Quantum 140 NOE771x1, related to insufficient checking of unusual or exceptional states, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed logic controller Quantum 140 NOE771x1 software is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause malfunctions in the system...

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium lies in insufficient testing for unusual or exceptional states. This allows a intruder to trigger malfunctions during maintenance.

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium lies in insufficient testing for unusual or exceptional states. Exploiting this vulnerability can allow an attacker operati...

The vulnerability of the Vijeo Designer software lies in the insufficient checking of unusual or exceptional states, which allows a perpetrator to trigger a service failure.

The vulnerability of the Vijeo Designer software is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the programming software for PLCs (programmable logic controllers), EcoStruxure Control Expert, allows a intruder to trigger a service failure.

The vulnerability of the EcoStruxure Control Expert programming tool for programmable logic controllers is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to trigger a service failure remotely...

Baker Hughes Bently Nevada 3500

1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: Bently Nevada, a Baker Hughes subsidiary Equipment: 3500 Vulnerability: Use of Password Hash with Insufficient Computational Effort 2. REPOSTED INFORMATION This advisory was originally posted to the...

Dell EMC iDRAC9 and EMC iDRAC8 Spoofing Vulnerability

Dell EMC iDRAC9 is the United States Dell DELL company's set of hardware and software system management solutions. The solution provides remote management, crash system recovery and power control for Dell PowerEdge systems.Dell EMC iDRAC8 versions prior to 2.80.80.80 and Dell EMC iDRAC9 versions...

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns stems from deficiencies in handling exceptional states, which allows attackers to disclose protected information.

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information that is protected by the...

The vulnerability of Juniper Networks Junos OS routers of the MX, EX9200, and SRX4600 series lies in deficiencies in handling exceptional states, which allows an attacker to trigger a service failure.

The vulnerability of Juniper Networks Junos OS routers of the MX, EX9200, and SRX4600 series is related to deficiencies in handling exceptional states during packet processing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Junos operating system lies in the insufficient checking of unusual or exceptional states, which allows a perpetrator to trigger an emergency failure and restart the device.

The vulnerability of the Junos operating system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause an emergency failure and restart the device through the routing of the event management...

CASAP Automated Enrollment SQL Injection Vulnerability (CNVD-2021-57774)

CASAP Automated Enrollment is an automated enrollment system for the CASAP organization in the United States. The purpose of the project is to provide CASAP with an automated enrollment system to streamline the school process and make it more effective, efficient and easy to retrieve...

CASAP Automated Enrollment Cross-Site Scripting Vulnerability (CNVD-2021-57776)

CASAP Automated Enrollment is an automated enrollment system for the CASAP organization in the United States. The purpose of the project is to provide CASAP with an automated enrollment system to streamline the school process and make it more effective, efficient and easy to retrieve...

CASAP Automated Enrollment SQL Injection Vulnerability (CNVD-2021-57782)

CASAP Automated Enrollment is an automated enrollment system for the CASAP organization in the United States. The purpose of the project is to provide CASAP with an automated enrollment system to streamline the school process and make it more effective, efficient and easy to retrieve...

IBM Power HMC Elevation of Privilege Vulnerability

IBM Power HMC is a set of graphical interface software for configuring and managing the Power System family of servers from IBM in the United States. The software is primarily used to manage hardware such as servers. IBM Power HMC has an elevation of privilege vulnerability that could be exploite...

IBM Security Access Manager Appliance Privilege License and Access Control Issues Vulnerability

IBM Security Access Manager Appliance ISAM Appliance is a network appliance-based security solution from IBM, USA. The product is mainly used for access control and Web-based threat protection, providing system performance monitoring, log analysis and diagnosis. IBM Security Access Manager...

IBM Security Access Manager Encryption Issue Vulnerability

IBM Security Access Manager is a product for information security management applications from IBM, USA. The product enables access management control through integrated devices for web, mobile and cloud computing. IBM Security Access Manager Docker suffers from a cryptographic issue vulnerabilit...

Kaseya VSA 安全漏洞

Kaseya VSA is the RMM Remote Monitoring and Management software commonly used by Kaseya's Managed Service Providers MSPs in the United States to manage their customers' networks. A security vulnerability exists in Kaseya VSA that stems from a 2FA bypass. No details of the vulnerability are provid...