Lucene search
+L

6583 matches found

Tenable Nessus
Tenable Nessus
added 2023/04/20 12:0 a.m.35 views

CBL Mariner 2.0 Security Update: cmake / curl / mysql / rust / tensorflow (CVE-2023-27533)

The version of cmake / curl / mysql / rust / tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-27533 advisory. - A vulnerability in input validation exists in curl 8.0 during communicatio...

9.8CVSS7.3AI score0.01993EPSS
SaveExploits1References2
OSV
OSV
added 2023/04/19 11:15 p.m.8 views

CVE-2023-23451

The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number =2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERNET GATEW. with serial number =2311xxxx all Firmware versions, SICK UE410-EN3S04 FLEXI ETHERNET GATEW. with serial number =2311xxxx all...

9.8CVSS7.3AI score0.00621EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/19 11:15 p.m.28 views

CVE-2023-23451

The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number =2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERNET GATEW. with serial number =2311xxxx all Firmware versions, SICK UE410-EN3S04 FLEXI ETHERNET GATEW. with serial number =2311xxxx all...

9.8CVSS9.6AI score0.00621EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/19 11:15 p.m.23 views

Default credentials

The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number =2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERNET GATEW. with serial number =2311xxxx all Firmware versions, SICK UE410-EN3S04 FLEXI ETHERNET GATEW. with serial number =2311xxxx all...

7.5CVSS9.5AI score0.00621EPSS
SaveExploits0References1Affected Software4
Cvelist
Cvelist
added 2023/04/19 12:0 a.m.35 views

CVE-2023-23451

The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number =2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERNET GATEW. with serial number =2311xxxx all Firmware versions, SICK UE410-EN3S04 FLEXI ETHERNET GATEW. with serial number =2311xxxx all...

9.7AI score0.00621EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/04/19 12:0 a.m.8 views

多款SICK产品访问控制错误漏洞

The SICK FX0-GPNT00000 is a security control module from SICK with a built-in Ethernet switch. An access control error vulnerability exists in SICK Flexi Classic, Flexi Soft Gateways. The vulnerability stems from Telnet being enabled by factory default and no password is set in the default...

9.8CVSS8.3AI score0.00621EPSS
SaveExploits0References2
CVE
CVE
added 2023/04/19 12:0 a.m.72 views

CVE-2023-23451

CVE-2023-23451 affects SICK Flexi Classic and Flexi Soft Gateways (e.g., UE410-EN1/EN3/EN3S04/EN4 and FX0-GENT00000/FX0-GMOD00000/FX0-GPNT00000, including V2 variants) where Telnet is enabled by factory default and no password is set in the default configuration. This creates potential unauthoriz...

9.8CVSS9.4AI score0.00621EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/19 12:0 a.m.12 views

CVE-2023-23451

The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number =2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERNET GATEW. with serial number =2311xxxx all Firmware versions, SICK UE410-EN3S04 FLEXI ETHERNET GATEW. with serial number =2311xxxx all...

9.6AI score0.00621EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/04/19 12:0 a.m.9 views

PT-2023-18961 · Sick · Sick Fx0-Gpnt00000 Flexisoft Pnet Gatew. +9

Name of the Vulnerable Software and Affected Versions: SICK UE410-EN3 FLEXI ETHERNET GATEW. versions all SICK UE410-EN1 FLEXI ETHERNET GATEW. versions all SICK UE410-EN3S04 FLEXI ETHERNET GATEW. versions all SICK UE410-EN4 FLEXI ETHERNET GATEW. versions all SICK FX0-GENT00000 FLEXISOFT EIP GATEW...

9.8CVSS9.2AI score0.00621EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/04/17 12:0 a.m.7 views

The vulnerability of the curl command-line utility relates to its inability to clean up special elements in another plane, allowing a malicious actor to execute arbitrary code within the system.

The vulnerability of the curl command-line utility is related to data exchange using the TELNET protocol. This allows a malicious individual to send a specially created username and “telnet parameters” during server authentication. Exploiting this vulnerability enables a remote attacker to send...

3.1CVSS6.7AI score0.01993EPSS
SaveExploits1References20Affected Software15
OSV
OSV
added 2023/04/14 5:2 p.m.12 views

CLSA-2023-1681491763 curl: Fix of 3 CVEs

CVE-2023-27533: prevent TELNET option from IAC injection - CVE-2023-27535: fix behavior when FTP too eager connection reuse - CVE-2023-27536: do not reuse connections with different GSS delegations...

9.8CVSS6.8AI score0.01993EPSS
SaveExploits3References1
OSV
OSV
added 2023/04/14 4:59 p.m.12 views

CLSA-2023-1681491543 curl: Fix of 3 CVEs

CVE-2023-27533: prevent TELNET option from IAC injection - CVE-2023-27535: fix behavior when FTP too eager connection reuse - CVE-2023-27536: do not reuse connections with different GSS delegations...

9.8CVSS5.8AI score0.01993EPSS
SaveExploits3References1
OSV
OSV
added 2023/04/14 4:55 p.m.10 views

CLSA-2023-1681491348 Fix CVE(s): CVE-2023-27536, CVE-2023-27535, CVE-2023-27533

SECURITY UPDATE: Telnet option IAC injection - debian/patches/CVE-2023-27533.patch: only accept option arguments in ascii to avoid embedded telnet negotiation commands - CVE-2023-27533 SECURITY UPDATE: FTP too eager connection reuse - debian/patches/CVE-2023-27535.patch: add more conditions for...

9.8CVSS6.8AI score0.01993EPSS
SaveExploits3References1
OSV
OSV
added 2023/04/14 4:52 p.m.11 views

CLSA-2023-1681491163 curl: Fix of 3 CVEs

CVE-2023-27533: prevent TELNET option from IAC injection - CVE-2023-27535: fix behavior when FTP too eager connection reuse - CVE-2023-27536: do not reuse connections with different GSS delegations...

9.8CVSS6.8AI score0.01993EPSS
SaveExploits3References1
CloudLinux
CloudLinux
added 2023/04/14 4:45 p.m.57 views

curl: Fix of 3 CVEs

CVE-2023-27533: prevent TELNET option from IAC injection - CVE-2023-27535: fix behavior when FTP too eager connection reuse - CVE-2023-27536: do not reuse connections with different GSS delegations...

9.8CVSS8.7AI score0.01993EPSS
SaveExploits3
OSV
OSV
added 2023/04/14 4:45 p.m.11 views

CLSA-2023-1681490707 curl: Fix of 3 CVEs

CVE-2023-27533: prevent TELNET option from IAC injection - CVE-2023-27535: fix behavior when FTP too eager connection reuse - CVE-2023-27536: do not reuse connections with different GSS delegations...

9.8CVSS6.8AI score0.01993EPSS
SaveExploits3References1
IBM Security Bulletins
IBM Security Bulletins
added 2023/04/14 2:32 p.m.17 views

Security Bulletin: BladeCenter SAS Connectivity Module (NSSM) are affected by two vulnerabilities (CVE-2014-3018, CVE-2014-3019)

Summary Two vulnerabilities affect BladeCenter SAS Connectivity Module Vulnerability Details Abstract Two vulnerabilities affect BladeCenter SAS Connectivity Module Content Vulnerability Details: CVE-ID: CVE-2014-3018 Description: IBM SAS Connectivity Module NSSM contain a denial of service when ...

7.8CVSS6.8AI score0.01333EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2023/04/14 2:32 p.m.26 views

Security Bulletin: BladeCenter SAS RAID Module (RSSM) are affected by two vulnerabilities (CVE-2014-3018, CVE-2014-3019)

Summary Two vulnerabilities affect BladeCenter SAS RAID Module. Vulnerability Details Abstract Two vulnerabilities affect BladeCenter SAS RAID Module. Content Vulnerability Details: CVE-ID: CVE-2014-3018 Description: IBM SAS Connectivity Module NSSM and SAS RAID Module RSSM contain a denial of...

7.8CVSS6.8AI score0.01333EPSS
SaveExploits0
Talos
Talos
added 2023/04/13 12:0 a.m.43 views

Lenovo Group Ltd. Smart Clock Essential SSH hard-coded password vulnerability

Talos Vulnerability Report TALOS-2023-1692 Lenovo Group Ltd. Smart Clock Essential SSH hard-coded password vulnerability April 13, 2023 CVE Number CVE-2023-0896 SUMMARY A hard-coded password vulnerability exists in the SSH, telnet functionality of Lenovo Group Ltd. Smart Clock Essential 4.9.113. ...

8.8CVSS8.9AI score0.00405EPSS
SaveExploits0
NVD
NVD
added 2023/04/11 9:15 p.m.17 views

CVE-2023-25413

Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. The device allows unauthenticated access to Telnet and SNMP credentials...

7.5CVSS7.6AI score0.00697EPSS
SaveExploits1References1
Rows per page
Query Builder