5279 matches found
Motorola Solutions ACE1000 授权问题漏洞
The Motorola Solutions ACE1000 is a Remote Terminal Unit RTU from Motorola USA. The Motorola Solutions ACE1000 RTU version suffers from an authorization issue vulnerability that stems from the fact that the affected product's SSH service is controlled by five pre-configured accounts, all of which...
GitLab 11.3 < 14.9.5 / 14.10 < 14.10.4 / 15.0 < 15.0.1 (CVE-2022-1944)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - When the feature is configured, improper authorization in the Interactive Web Terminal in GitLab CE/EE affecting all versions from 11.3 prior to 14.9.5, 14.10 prior to 14.10.4, and 15.0 prior to 15.0....
Motorola Solutions ACE1000 数据伪造问题漏洞
The Motorola Solutions ACE1000 is a remote terminal unit RTU from Motorola Solutions USA. The Motorola Solutions ACE1000 RTU is vulnerable to a data forgery issue, which arises from an attacker communicating with the Motorola ACE1000 RTU via SSH or Web UI, who could push a malicious firmware imag...
CVE-2022-1741
The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged by an attacker to gain elevated privileges on a device and/or install malicious code...
CVE-2022-1741
The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged by an attacker to gain elevated privileges on a device and/or install malicious code...
Code injection
The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged by an attacker to gain elevated privileges on a device and/or install malicious code...
CVE-2022-1741 2.2.3 HIDDEN FUNCTIONALITY CWE-912
The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged by an attacker to gain elevated privileges on a device and/or install malicious code...
CVE-2022-1741 2.2.3 HIDDEN FUNCTIONALITY CWE-912
The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged by an attacker to gain elevated privileges on a device and/or install malicious code...
CVE-2022-1741
CVE-2022-1741: A Terminal Emulator in Dominion Voting Systems ImageCast X is identified as a hidden functionality that could be exploited to gain elevated privileges or install malicious code. Documents attribute this vulnerability to CWE-912 (Hidden Functionality) and describe it as part of a se...
PT-2022-3090 · Motorola · Motorola Moscad Toolbox
Name of the Vulnerable Software and Affected Versions: Motorola MOSCAD Toolbox software through 2022-05-02 Description: The issue concerns the use of a cleartext password in the Motorola MOSCAD Toolbox software. This password is stored in the wmdlcdrv.ini driver configuration file and is used for...
CLSA-2022-1655822512 Fixed 6 CVEs in kernel
net: qrtr: fix another OOB Read in qrtrendpointpost CVE-2021-3743 - vt: keyboard: avoid signed integer overflow in kascii CVE-2020-13974 - pNFS/flexfiles: fix incorrect size check in decodenfsfh CVE-2021-4157 - esp: Fix possible buffer overflow in ESP transformation CVE-2022-27666 - sock: remove...
Malicious code in js-lib-terminal-integration-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7503515ab3ea4e66d9467dc8c42af202ce8dd2018894ccd7c17399898d6a5f4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in js-lib-terminal-integration (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dcf2e5bf15d9675a00d7528be2775ff89da7335da5ba9321cdbb19d9cb9f76c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4058 Malicious code in js-lib-terminal-integration (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dcf2e5bf15d9675a00d7528be2775ff89da7335da5ba9321cdbb19d9cb9f76c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4059 Malicious code in js-lib-terminal-integration-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7503515ab3ea4e66d9467dc8c42af202ce8dd2018894ccd7c17399898d6a5f4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2022-19976
Name of the Vulnerable Software and Affected Versions Tenda ONT GPON AC1200 Dual band WiFi HG9 version 1.0.1 Description The issue is related to Command Injection via the Ping function. Recommendations For Tenda ONT GPON AC1200 Dual band WiFi HG9 version 1.0.1, consider disabling the Ping functio...
CVE-2019-9972
PhoneSystem Terminal in 3CX Phone System Debian based installation 16.0.0.1570 allows an authenticated attacker to run arbitrary commands with the phonesystem user privileges because of " followed by " mishandling...
CVE-2019-9971
PhoneSystem Terminal in 3CX Phone System Debian based installation 16.0.0.1570 allows an attacker to gain root privileges by using sudo with the tcpdump command, without a password. This occurs because the -z aka postrotate-command option to tcpdump can be unsafe when used in conjunction with sud...
Command injection
PhoneSystem Terminal in 3CX Phone System Debian based installation 16.0.0.1570 allows an attacker to gain root privileges by using sudo with the tcpdump command, without a password. This occurs because the -z aka postrotate-command option to tcpdump can be unsafe when used in conjunction with sud...
Command injection
PhoneSystem Terminal in 3CX Phone System Debian based installation 16.0.0.1570 allows an authenticated attacker to run arbitrary commands with the phonesystem user privileges because of " followed by " mishandling...