Lucene search
+L

584 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/20 12:0 a.m.11 views

The vulnerability of FTP servers for microprogrammed software controllers such as CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus allows a hacker to cause service failures or execute arbitrary codes.

The vulnerability of the FTP servers of the microprogrammed control devices CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus is related to errors during the verification of the PWD/XPWD command length. Exploiting this vulnerability can allow an attacke...

10CVSS8.1AI score0.02371EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:0 a.m.14 views

The vulnerability of FTP servers for microprogrammed software controllers such as CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of FTP servers for microprogrammed control devices such as CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus is related to errors during the verification of the MKD/XMKD command length. Exploiting this vulnerability can allow an attack...

10CVSS8.1AI score0.02371EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:0 a.m.15 views

The vulnerability of microprogrammed software for controllers CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus relates to errors in processing UDP packet headers. This vulnerability allows an attacker to gain access to protected information or cause a service failure.

The vulnerability of microprogrammed software for controllers CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus is related to errors in processing the UDP packet header. Exploiting this vulnerability can allow an attacker to gain access to protected...

9.4CVSS7.7AI score0.01578EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:0 a.m.17 views

The vulnerability of FTP servers for microprogrammed software controllers such as CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus allows a hacker to cause service failures or execute arbitrary codes.

The vulnerability of the FTP servers of the microprogrammed control devices CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus is related to errors during the verification of the USER command’s length. Exploiting this vulnerability can allow a remote...

10CVSS8.4AI score0.03031EPSS
SaveExploits0References4Affected Software1
Microsoft CVE
Microsoft CVE
added 2022/04/07 12:0 a.m.1 views

CVE-2022-1055

...

8.6CVSS6.6AI score0.005EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2022/03/31 12:0 a.m.6 views

The vulnerability in the implementation of the tc_new_tfilter() function in Linux operating systems allows a hacker to increase their privileges.

The vulnerability of the tcnewtfilter function in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges through user namespace...

7.8CVSS6.6AI score0.005EPSS
SaveExploits1References35Affected Software6
OSV
OSV
added 2022/03/29 3:15 p.m.1 views

DEBIAN-CVE-2022-1055

A use-after-free exists in the Linux Kernel in tcnewtfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5...

7.8CVSS6.4AI score0.005EPSS
SaveExploits1References1
OSV
OSV
added 2022/03/29 3:15 p.m.7 views

AZL-9218 CVE-2022-1055 affecting package kernel for versions less than 5.15.32.1-3

A use-after-free exists in the Linux Kernel in tcnewtfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5...

7.8CVSS6.6AI score0.005EPSS
SaveExploits1References1
OSV
OSV
added 2022/03/29 3:15 p.m.4 views

UBUNTU-CVE-2022-1055

A use-after-free exists in the Linux Kernel in tcnewtfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5...

8.6CVSS6.6AI score0.005EPSS
SaveExploits1References8
BDU FSTEC
BDU FSTEC
added 2022/03/09 12:0 a.m.13 views

The vulnerability of microprogrammed software for controllers CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus relates to errors in processing SACK TCP packets. This vulnerability allows an attacker to gain access to protected information or cause service interruptions.

The vulnerability of microprogrammed software for controllers CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus is related to errors in processing SACK TCP packets. Exploiting this vulnerability can allow a remote attacker to gain access to protected...

9.4CVSS7.8AI score0.02106EPSS
SaveExploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.24 views

Siemens Mentor Nucleus Networking Module Improper Input Validation (CVE-2019-13939)

A vulnerability has been identified in APOGEE MEC/MBC/PXC P2 All versions = V2.8.2 and = V2.3x and = V2.3x and = V2.3x and = V2.3x and = V2.3x and = V2.3x and = V2.3x and = V2.3x and = V2.3x and = V2.3x and = V2.3x and = V2.3x and = V2.3x and V6.00.327, Nucleus NET All versions, Nucleus RTOS All...

7.1CVSS6.9AI score0.00715EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.39 views

Siemens BACnet Field Panels Authentication Bypass Using an Alternate Path or Channel (CVE-2017-9946)

A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions V3.5. An attacker with network access to the integrated web server 80/tcp and 443/tcp could bypass the authentication and download sensitive information from the device. This plugi...

7.5CVSS7AI score0.24811EPSS
SaveExploits3References4
Positive Technologies
Positive Technologies
added 2022/01/31 12:0 a.m.10 views

PT-2022-2045 · Linux +10 · Linux Kernel +10

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to the version containing commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5 Description: A use-after-free exists in the Linux Kernel in the tc new tfilter function that could allow a local attacker to gain privilege...

9.8CVSS6.5AI score0.67994EPSS
SaveExploits206References1432
Openbugbounty
Openbugbounty
added 2022/01/06 5:29 a.m.11 views

tc-ismaning.de Cross Site Scripting vulnerability OBB-2325524

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Rapid7 Blog
Rapid7 Blog
added 2021/12/15 2:58 p.m.248 views

How to Protect Your Applications Against Log4Shell With tCell

By now, we’re sure you’re familiar with all things Log4Shell – but we want to make sure we share how to protect your applications. Applications are a critical part of any organization’s attack surface, and we’re seeing thousands of Log4Shell attack attempts in our customers' environments every...

9.3CVSS9.8AI score0.99999EPSS
SaveExploits359
BDU FSTEC
BDU FSTEC
added 2021/11/19 12:0 a.m.7 views

The vulnerability in the DHCP service of the microprogramming software for controllers APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus allows a perpetrator to trigger read errors, write errors, and service failures.

The vulnerability in the DHCP service of the microprogramming software for APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause read errors, write errors,...

10CVSS7.9AI score0.01451EPSS
SaveExploits0References4
NVD
NVD
added 2021/11/09 12:15 p.m.31 views

CVE-2021-31884

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and...

9.8CVSS0.01451EPSS
SaveExploits0References3
NVD
NVD
added 2021/11/09 12:15 p.m.31 views

CVE-2021-31890

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, PLUSCONTROL 1st Gen All versions, SIMOTICS CONNECT 400 All versions V0.5.0.0, SIMOTICS CONNECT 400 All versions V1.0.0.0. The total length of an TCP...

9.1CVSS0.0215EPSS
SaveExploits0References10
OSV
OSV
added 2021/11/09 12:15 p.m.6 views

CVE-2021-31888

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and...

8.8CVSS7.8AI score0.02371EPSS
SaveExploits0References2
NVD
NVD
added 2021/11/09 12:15 p.m.30 views

CVE-2021-31883

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303. When processing a DHCP ACK message, the DHCP client application does not validate the length of the Vendor options, leading to Denial-of-Service...

7.5CVSS0.01477EPSS
SaveExploits0References6
Rows per page
Query Builder