Lucene search
K

684 matches found

CNVD
CNVD
added 2021/09/09 12:0 a.m.28 views

Hitachi ABB Power Grids System Data Manager Encryption Issue Vulnerability

Hitachi ABB Power Grids System Data Manager is a system data manager from Hitachi, Japan. Hitachi ABB Power Grids System Data Manager is vulnerable to an encryption issue that stems from the fact that the application does not encrypt backup files. A local operating system user can modify the back...

7.8CVSS2.5AI score0.0012EPSS
Exploits0References1
OSV
OSV
added 2021/09/08 4:15 p.m.2 views

CVE-2021-35526

Backup file without encryption vulnerability is found in Hitachi ABB Power Grids System Data Manager – SDM600 allows attacker to gain access to sensitive information. This issue affects: Hitachi ABB Power Grids System Data Manager – SDM600 1.2 versions prior to FP2 HF6 Build Nr. 1.2.14002.257...

7.8CVSS5.8AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2021/09/08 12:0 a.m.3 views

PT-2021-20952 · Hitachi Abb Power Grids · Hitachi Abb Power Grids System Data Manager – Sdm600

Name of the Vulnerable Software and Affected Versions: Hitachi ABB Power Grids System Data Manager – SDM600 versions prior to 1.2 FP2 HF6 Build Nr. 1.2.14002.257 Description: A backup file without encryption vulnerability is found in Hitachi ABB Power Grids System Data Manager – SDM600, allowing ...

7.8CVSS7.6AI score0.0012EPSS
Exploits0References6
CNNVD
CNNVD
added 2021/09/07 12:0 a.m.2 views

Hitachi ABB Power Grids System Data Manager 加密问题漏洞

Hitachi ABB Power Grids System Data Manager is a system data manager from Hitachi, Japan. Hitachi ABB Power Grids System Data Manager is vulnerable to an encryption issue that stems from the fact that the application does not encrypt backup files. A local operating system user can modify the back...

7.8CVSS5.7AI score0.0012EPSS
Exploits0References5
ICS
ICS
added 2021/09/07 12:0 a.m.50 views

Hitachi ABB Power Grids System Data Manager

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION: Low attack complexity Vendor: Hitachi ABB Power Grids Equipment: System Data Manager Vulnerability: Cleartext Storage of Sensitive Information 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker access to sensitive...

7.8CVSS7.1AI score0.0012EPSS
Exploits0References5
NCSC
NCSC
added 2021/08/30 12:0 a.m.13 views

Vulnerabilities fixed in Wind River Linux

Wind River has found and fixed vulnerabilities in Wind River Linux. The vulnerabilities potentially enable a malicious person to able to perform attacks that result in the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Access to sensitive data Access to...

9.8CVSS7.7AI score0.87816EPSS
Exploits64
NCSC
NCSC
added 2021/08/19 12:0 a.m.3 views

Vulnerability fixed in Atlassian Jira

A vulnerability has been fixed in Atlassian Jira. The vulnerability allows a remote malicious party to obtain obtain system data by performing a path-traversal. Atlassian has released updates to fix the vulnerability. fix. More information can be found on the page below:...

5.3CVSS6.7AI score0.99999EPSS
Exploits6
NCSC
NCSC
added 2021/08/16 12:0 a.m.4 views

Vulnerability fixed in Atlassian Jira

A vulnerability has been fixed in Atlassian Jira. The vulnerability allows a remote malicious party to obtain to obtain system data. Atlassian has released updates to fix the vulnerability. fix. More information can be found on the page below: https://jira.atlassian.com/browse/JRASERVER-72695...

5.3CVSS6.6AI score0.99999EPSS
Exploits6
OSV
OSV
added 2021/08/13 4:15 p.m.2 views

CVE-2021-32067

The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to view sensitive system information through an HTTP response due to insufficient output sanitization...

6.5CVSS6.6AI score0.00672EPSS
Exploits0References2
NCSC
NCSC
added 2021/08/11 12:0 a.m.4 views

Vulnerabilities fixed in Adobe Connect and Magento

Adobe has fixed vulnerabilities in Adobe Connect and Magento. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Circumvention of security measure. Remote code executio...

9.8CVSS6.8AI score0.0333EPSS
Exploits0
NCSC
NCSC
added 2021/08/09 12:0 a.m.3 views

Vulnerabilities fixed in Ansible

Vulnerabilities have been fixed in Ansible. The vulnerabilities potentially enable an authenticated malicious person to perform attacks that result in the following categories of damage: Remote code execution User Rights Access to sensitive data Access to system data Increased user privileges -=...

7.9CVSS9.5AI score0.02043EPSS
Exploits6
Microsoft CVE
Microsoft CVE
added 2021/07/30 7:0 a.m.4 views

psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object.

...

7.5CVSS9.6AI score0.02676EPSS
Exploits0
CNNVD
CNNVD
added 2021/07/23 12:0 a.m.3 views

IBM i2 Analysts Notebook Premium 代码问题漏洞

IBM i2 Analyst's Notebook Premium is a premium version of IBM i2 Analyst's Notebook from IBM USA. IBM i2 Analyst's Notebook Premium has an information disclosure vulnerability that could be exploited by an attacker to obtain sensitive information from the system...

6.5CVSS5.6AI score0.00935EPSS
Exploits0References4
NCSC
NCSC
added 2021/07/19 12:0 a.m.1 views

Vulnerabilities fixed in IBM Tivoli Monitoring

Vulnerabilities have been fixed in the IBM WebSphere Application Server as part of IBM Tivoli Monitoring. The vulnerabilities allow a malicious party to launch attacks that lead to the following categories of damage: Denial-of-Service DoS Spoofing Access to sensitive data Access to system data IB...

8.2CVSS8.4AI score0.19312EPSS
Exploits5
OSV
OSV
added 2021/07/15 8:15 p.m.2 views

CVE-2021-0291

An Exposure of System Data vulnerability in Juniper Networks Junos OS and Junos OS Evolved, where a sensitive system-level resource is not being sufficiently protected, allows a network-based unauthenticated attacker to send specific traffic which partially reaches this resource. A high rate of...

6.5CVSS5.8AI score0.01008EPSS
Exploits0References1
NVD
NVD
added 2021/07/15 8:15 p.m.14 views

CVE-2021-0291

An Exposure of System Data vulnerability in Juniper Networks Junos OS and Junos OS Evolved, where a sensitive system-level resource is not being sufficiently protected, allows a network-based unauthenticated attacker to send specific traffic which partially reaches this resource. A high rate of...

6.5CVSS0.01008EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/07/15 8:1 p.m.14 views

CVE-2021-0291 Junos OS and Junos OS Evolved: A vulnerability allows a network based unauthenticated attacker which sends a high rate of specific traffic to cause a partial Denial of Service

An Exposure of System Data vulnerability in Juniper Networks Junos OS and Junos OS Evolved, where a sensitive system-level resource is not being sufficiently protected, allows a network-based unauthenticated attacker to send specific traffic which partially reaches this resource. A high rate of...

6.5CVSS6.4AI score0.01008EPSS
Exploits0References1
NCSC
NCSC
added 2021/07/15 12:0 a.m.3 views

Vulnerabilities fixed in Linux kernel

Vulnerabilities have been fixed in the Linux kernel. The vulnerabilities potentially enable a malicious person to launch attacks execute attacks that lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Access to sensitive data Access to system data Increased use...

7.8CVSS7.2AI score0.03537EPSS
Exploits8
CNNVD
CNNVD
added 2021/07/14 12:0 a.m.2 views

Juniper Networks Junos OS 信息泄露漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. The Junos OS is vulnerable to an information disclosure vulnerability that arises from the exposure of a...

6.5CVSS6.5AI score0.01008EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2021/07/14 12:0 a.m.30 views

Juniper Junos OS Vulnerability (JSA11193)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11193 advisory. - An Exposure of System Data vulnerability in Juniper Networks Junos OS and Junos OS Evolved, where a sensitive system-level resource is not being sufficiently protected,...

6.5CVSS6.6AI score0.01008EPSS
Exploits0References3
Rows per page
Query Builder