3517 matches found
CVE-2022-22148
'Root Service' service implemented in the following Yokogawa Electric products creates some named pipe with improper ACL configuration. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc...
CVE-2022-22151
CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, and Exaopc versions fr...
CVE-2022-22141
'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products creates some named pipe with imporper ACL configuration. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 t...
Yokogawa Exaopc 路径遍历漏洞
Yokogawa Electric is a server of Yokogawa Electric Yokogawa Japan. A path traversal vulnerability exists in CAMS for HIS Server in Yokogawa Electric. The following products and versions are affected: CENTUM CS 3000 version R3.08.10 through R3.09.00, CENTUM VP version R4.01.00 through R4.03.00,...
CVE-2022-25821
Improper use of SMS buffer pointer in Shannon baseband prior to SMR Mar-2022 Release 1 allows OOB read...
CVE-2022-24396
The Simple Diagnostics Agent - versions 1.0 up to version 1.57, does not perform any authentication checks for functionalities that can be accessed via localhost on http port 3005. Due to lack of authentication checks, an attacker could access administrative or other privileged functionalities an...
CVE-2022-0001
creationtimestamp| type| source ---|---|--- 2022-03-10 11:08:32+00:00| seen| https://t.me/sysodmins/14260 2022-03-11 07:04:29+00:00| published-proof-of-concept| https://t.me/SecLabNews/11732 2022-03-11 16:40:00+00:00| published-proof-of-concept| https://t.me/truesecator/2723 2022-06-16...
PT-2022-16671 · Unknown · Simple Diagnostics Agent
Name of the Vulnerable Software and Affected Versions: The Simple Diagnostics Agent versions 1.0 up to version 1.57 Description: The issue concerns the lack of authentication checks for functionalities accessible via localhost on http port 3005. This allows an attacker to access administrative or...
HPESBST04258 rev.1 - HPE Nimble Storage and HPE Alletra 6000 Peer Persistence Witness OVA Using Polkit's Pkexec, Local Elevated Privileges
Potential Security Impact: Local: Elevated Privileges SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 6000 v5.2.1.0, v5.3.x, v6.0.0.0 HPE Nimble Storage Hybrid Flash Arrays v5.2.1.0, v5.3.x, v6.0.0.0 Nimble Storage All Flash Arrays v5.2.1.0, v5.3.x, v6.0.0.0 CVSS Score...
CVE-2022-21828
creationtimestamp| type| source ---|---|--- 2022-03-04 20:30:11+00:00| seen| https://t.me/cibsecurity/38446...
CVE-2022-22700
creationtimestamp| type| source ---|---|--- 2022-03-03 22:26:25+00:00| seen| https://t.me/cibsecurity/38383...
CVE-2021-3602
creationtimestamp| type| source ---|---|--- 2022-03-03 22:26:16+00:00| seen| https://t.me/cibsecurity/38376 2023-11-15 16:53:03+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5977...
CVE-2022-24447
creationtimestamp| type| source ---|---|--- 2022-03-02 18:25:12+00:00| seen| https://t.me/cibsecurity/38306...
CVE-2022-22908
creationtimestamp| type| source ---|---|--- 2022-02-27 00:21:47+00:00| seen| https://t.me/cibsecurity/38165...
In the Linux kernel through 5.16.10 certain binary files may have the exec-all attribute if they were built in approximately 2003 (e.g. with GCC 3.2.2 and Linux kernel 2.4.20). This can cause execution of bytes located in supposedly non-executable regions of a file.
...
CVE-2022-25096
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /members/viewmember.php...
CVE-2022-0633
creationtimestamp| type| source ---|---|--- 2022-02-21 17:11:04+00:00| seen| https://t.me/truesecator/2655...
CVE-2022-25130
creationtimestamp| type| source ---|---|--- 2022-02-19 02:38:34+00:00| seen| https://t.me/cibsecurity/37804...