3118 matches found
CVE-2024-39874
Summary: Siemens SINEMA Remote Connect Server (all versions
CVE-2024-39874
A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. The affected application does not properly implement brute force protection against user credentials in its Client Communication component. This could allow an attacker to learn user credentials that are...
CVE-2024-39874
A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. The affected application does not properly implement brute force protection against user credentials in its Client Communication component. This could allow an attacker to learn user credentials that are...
CVE-2024-39873
A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. The affected application does not properly implement brute force protection against user credentials in its web API. This could allow an attacker to learn user credentials that are vulnerable to brute force...
CVE-2024-39873
Summary: CVE-2024-39873 affects Siemens SINEMA Remote Connect Server (all versions before V3.2 SP1). The security issue is a failure to properly implement brute-force protection on the web API authentication, which could allow an attacker to learn user credentials vulnerable to brute force attack...
CVE-2024-39873
A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. The affected application does not properly implement brute force protection against user credentials in its web API. This could allow an attacker to learn user credentials that are vulnerable to brute force...
CVE-2024-5631
Longse NVR Network Video Recorder model NVR3608PGE2W, as well as products based on this device, are transmitting user's login and password to a remote control service without using any encryption. This enables an on-path attacker to eavesdrop the credentials and subsequently obtain access to the...
Siemens SIMATIC WinCC和Siemens SIMATIC PCS 安全漏洞
Siemens SIMATIC PCS 7 is a process control system from Siemens, Germany.SIMATIC WinCC is an automated data acquisition and monitoring SCADA system.SIMATIC WinCC Runtime Professional is a runtime platform for operator visualization, machine and device control and monitoring. equipment control and...
PT-2024-4863 · Siemens · Simatic Pcs 7 +2
Name of the Vulnerable Software and Affected Versions: SIMATIC PCS 7 versions prior to V9.1 SP2 UC05 SIMATIC WinCC Runtime Professional V18 versions prior to V18 Update 5 SIMATIC WinCC Runtime Professional V19 versions prior to V19 Update 2 SIMATIC WinCC V7.4 versions prior to V7.4 SP1 Update 23...
CVE-2024-32932
Under certain circumstances the web interface users credentials may be recovered by an authenticated user...
CVE-2024-32932 American Dynamics Illustra Essentials Gen 4 - Reversible User Credential - stored web interface
Under certain circumstances the web interface users credentials may be recovered by an authenticated user...
CVE-2024-32756
CVE-2024-32756 affects Johnson Controls Illustra Essentials Gen 4. Affected products: Illustra Essentials Gen 4, versions up to Illustra.Ess4.01.02.10.5982. Root cause: credentials are stored in a recoverable format, enabling an authenticated user to recover Linux user credentials under certain c...
CVE-2024-32756 American Dynamics Illustra Essentials Gen 4 - Reversible User Credential - Linux
Under certain circumstances the Linux users credentials may be recovered by an authenticated user...
CVE-2024-32756 American Dynamics Illustra Essentials Gen 4 - Reversible User Credential - Linux
Under certain circumstances the Linux users credentials may be recovered by an authenticated user...
CVE-2023-41926
CVE-2023-41926 affects Kiloview P1/P2 devices with a web server that uses basic authentication over HTTP (port 80). Lack of encryption allows eavesdropping of credentials and potentially unauthorized access to the configuration interface. The CVSSv3.1 vector indicates network access, low attack c...
The vulnerability of the Python package for creating Gradio applications, related to insufficient protection of sensitive data, allows attackers to gain access to user credentials.
The vulnerability of the Python package used for creating Gradio applications for machine learning models is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to user credentials...
Johnson Controls Illustra Essentials Gen 4 (Update A)
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Johnson Controls, Inc. Equipment : Illustra Essentials Gen 4 Vulnerability : Insertion of Sensitive Information into Log File 2. RISK EVALUATION Successful exploitation of this vulnerability...
Account Takeover
silverstripe/framework is vulnerable to Account Takeover. The vulnerability is due to plain text storage of user login attempts, which may include sensitive data like passwords mistyped into the username field. The vulnerability allows an attacker could gain unauthorized access to user credential...
CVE-2024-36115 Stored Cross site scripting in Reposilite artifacts
Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM ecosystem. As a Maven repository manager, Reposilite provides the ability to view the artifacts content in the browser, as well as perform administrative tasks via API. The problem lies i...