436 matches found
CVE-2023-37213
Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'...
CVE-2023-32227
Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials...
CVE-2023-32227
Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials...
Command injection
Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'...
Hardcoded credentials
Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials...
CVE-2023-37213
CVE-2023-37213 affects Synel SYnergy Fingerprint Terminals. The connected documents describe an OS Command Injection vulnerability (CWE-78) in the devices, with the issue enabling potential remote command execution via the OS shell. CVSS metrics from NVD/CNA indicate high impact on confidentialit...
CVE-2023-37213 Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'
Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'...
CVE-2023-37213 Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'
Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'...
CVE-2023-32227
The CVE-2023-32227 entry concerns Synel SYnergy Fingerprint Terminals with CWE-798 (Use of Hard-coded Credentials). Connected sources confirm a vulnerability in the Synel SYnergy line where credentials are hard-coded, enabling high-impact exposure (CVE metrics show CVSS v3.1 base score 9.8, netwo...
CVE-2023-32227 Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials
Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials...
CVE-2023-32227 Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials
Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials...
PT-2023-23671 · Synel · Synel Synergy Fingerprint Terminals
Name of the Vulnerable Software and Affected Versions: Synel SYnergy Fingerprint Terminals affected versions not specified Description: The issue concerns the use of hard-coded credentials, which is a security risk. There is no information provided about the estimated number of potentially affect...
Synel Industries SYnergy Fingerprint Terminals 信任管理问题漏洞
Synel Industries SYnergy Fingerprint Terminals are a series of fingerprint recognition terminals from Synel Industries. These terminals are designed to provide an efficient employee time and attendance and access control solution that utilizes fingerprint recognition technology for fast and...
Synel Industries SYnergy Fingerprint Terminals 操作系统命令注入漏洞
Synel Industries SYnergy Fingerprint Terminals are a series of fingerprint recognition terminals from Synel Industries. These terminals are designed to provide an efficient employee time and attendance and access control solution that utilizes fingerprint recognition technology for fast and...
CVE-2023-36607
The affected TBox RTUs are missing authorization for running some API commands. An attacker running these commands could reveal sensitive information such as software versions and web server file contents...
CVE-2023-32712
In Splunk Enterprise versions below 9.1.0.2, 9.0.5.1, and 8.2.11.2, an attacker can inject American National Standards Institute ANSI escape codes into Splunk log files that, when a vulnerable terminal application reads them, can potentially, at worst, result in possible code execution in the...
PT-2023-22999 · Mutagen +1 · Mutagen +1
Name of the Vulnerable Software and Affected Versions: Mutagen versions prior to 0.16.6 Mutagen versions prior to 0.17.1 mutagen-compose versions prior to 0.17.1 Description: The issue affects Mutagen's list and monitor commands, making them susceptible to control characters provided by remote...
K28280935: Linux kernel vulnerability CVE-2018-18386
Security Advisory Description drivers/tty/ntty.c in the Linux kernel before 4.14.11 allows local attackers who are able to access pseudo terminals to hang/block further usage of any pseudo terminal devices due to an EXTPROC versus ICANON confusion in TIOCINQ. CVE-2018-18386 Impact There is no...
SUSE CVE-2004-2658
resmgr in SUSE CORE 9 does not properly identify terminal names, which allows local users to spoof terminals and login types...
SUSE CVE-2005-3257
The VT implementation vtioctl.c in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys...