CVE-2019-10121

eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.15 use session IDs for authentication but lack authorization checks. An attacker can obtain a session ID via the user authentication dialogue, aka HMCCU-153. This leads to automatic login as admin...

Siemens SINAMICS S150 Converter cabinet unit

Binary data 764678.prm...

Siemens SINAMICS S150 Converter cabinet unit

Binary data 764679.prm...

Siemens SINAMICS S150 Converter cabinet unit

Binary data 764680.prm...

Siemens SINAMICS S120 Control Unit CU310-2 PN with PROFINET interface

Binary data 764676.prm...

Siemens SINAMICS S150 Converter cabinet unit

Binary data 764677.prm...

Design/Logic Flaw

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, under certain circumstances, attackers can decrypt configuration items that are encrypted because the vCMP configuration unit key is generated with insufficient randomness. The attack prerequisite is direct access to...

XXE Vulnerability

This is: - a bugfix - a new feature - X security Checklist: - X Changes are covered by unit tests - X Code style is respected - X Commit message explains why the change is made see https://github.com/erlang/otp/wiki/Writing-good-commit-messages - X CHANGELOG.md contains a short summary of the...

CVE-2018-17479

Incorrect object lifetime calculations in GPU code in Google Chrome prior to 70.0.3538.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

The vulnerability of the unit_deserialize component in Systemd allows a malicious actor to elevate their privileges to the root level.

The vulnerability of the unitdeserialize component in Systemd relates to the restoration of a dubious data structure in memory. Exploiting this vulnerability allows an attacker, operating remotely, to elevate their privileges to the root level...

New CB LiveOps Release Brings Recommended Queries to Users

Security & IT teams often have no reliable way to check on the current status of their endpoints across their enterprise. This forces these teams to piece together information from multiple management consoles in order to get answers about the health of their entire fleet. Even when they do have...

Kernel: FPU state information leakage via lazy FPU restore

A Floating Point Unit FPU state information leakage flaw was found in the way the Linux kernel saved and restored the FPU state during task switch. Linux kernels that follow the "Lazy FPU Restore" scheme are vulnerable to the FPU state information leakage issue. An unprivileged local attacker cou...

hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)

A flaw was found in the implementation of the "fill buffer", a mechanism used by modern CPUs when a cache-miss is made on L1 CPU cache. If an attacker can generate a load operation that would create a page fault, the execution will continue speculatively with incorrect data from the fill buffer...

Yokogawa AFV40 Field Control Unit Detection

Binary data 759085.prm...

Yokogawa ANS50 Node Unit Detection

Binary data 761278.prm...

Yokogawa A2NN20 Node Unit Detection

Binary data 760674.prm...

Yokogawa A2NN20 Node Unit Detection

Binary data 760628.prm...

Yokogawa AFV30 Field Control Unit Detection

Binary data 759066.prm...

Yokogawa A2NN20 Node Unit Detection

Binary data 760876.prm...

Yokogawa AFV40 Field Control Unit Detection

Binary data 759197.prm...