PT-2024-29035 · Apple · Visionos +6

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.6 iPadOS versions prior to 17.6 watchOS versions prior to 10.6 tvOS versions prior to 17.6 visionOS versions prior to 1.3 macOS Sonoma versions prior to 14.6 Description: The issue is related to an out-of-bounds acces...

PT-2024-29066 · Apple · Visionos +7

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 16.7.9 Apple iOS versions prior to 17.6 Apple iPadOS versions prior to 16.7.9 Apple iPadOS versions prior to 17.6 Apple macOS Ventura versions prior to 13.6.8 Apple macOS Monterey versions prior to 12.7.6 Apple...

PT-2024-29043 · Apple +2 · Visionos +9

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.7.9 iPadOS versions prior to 16.7.9 Safari versions prior to 17.6 iOS versions prior to 17.6 iPadOS versions prior to 17.6 watchOS versions prior to 10.6 tvOS versions prior to 17.6 visionOS versions prior to 1.3 macO...

PT-2024-29046 · Apple · Macos Monterey +8

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.7.9 iPadOS versions prior to 16.7.9 macOS Ventura versions prior to 13.6.8 macOS Monterey versions prior to 12.7.6 iOS versions prior to 17.6 iPadOS versions prior to 17.6 watchOS versions prior to 10.6 tvOS versions...

PT-2024-31039 · Apple · Macos Sonoma +7

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 17.6 tvOS versions prior to 17.6 visionOS versions prior to 1.3 watchOS versions prior to 10.6 iOS versions prior to 17.6 iPadOS versions prior to 17.6 macOS Sonoma versions prior to 14.6 Description: An issue in the...

PT-2024-31018

Name of the Vulnerable Software and Affected Versions Safari versions prior to 17.6 tvOS versions prior to 17.6 visionOS versions prior to 1.3 watchOS versions prior to 10.6 iOS versions prior to 17.6 iPadOS versions prior to 17.6 macOS Sonoma versions prior to 14.6 Description The issue arises...

CVE-2024-38435

Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service...

CVE-2024-38435

Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service...

CVE-2024-38434

Unitronics Vision PLC – CWE-676: Use of Potentially Dangerous Function may allow security feature bypass...

CVE-2024-38435 Unitronics Vision PLC - CWE-703: Improper Check or Handling of Exceptional Conditions

Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service...

CVE-2024-38435

CVE-2024-38435 affects Unitronics Vision PLC. The issue is CWE-703: improper check or handling of exceptional conditions leading to denial of service. It is listed as exploitable remotely over the network, with availability impact, and no vendor-provided fix/version details are present in the con...

CVE-2024-38434 Unitronics Vision PLC - CWE-676: Use of Potentially Dangerous Function

Unitronics Vision PLC – CWE-676: Use of Potentially Dangerous Function may allow security feature bypass...

CVE-2024-38434

CVE-2024-38434 corresponds to CWE-676: Use of Potentially Dangerous Function, potentially bypassing security features. The IBM Engineering Systems Design Rhapsody bulletin lists affected products and versions (Rhapsody 9.0.2, 10.0, 10.0.1) with iFix updates (iFix004, iFix002, iFix003) as remediat...

CVE-2024-38434 Unitronics Vision PLC - CWE-676: Use of Potentially Dangerous Function

Unitronics Vision PLC – CWE-676: Use of Potentially Dangerous Function may allow security feature bypass...

PT-2024-5268 · Unitronics · Unitronics Vision Plc

Name of the Vulnerable Software and Affected Versions: Unitronics Vision PLC affected versions not specified Description: The issue is related to improper check or handling of exceptional conditions, which may allow denial of service. An attacker, acting remotely, can exploit this to cause a...

Hanwha Vision Cameras OS Command Injection (CVE-2023-5037)

A flaw that allows for an authenticated command injection exists on Hanwha Vision cameras. An attacker could inject malicious into request packets to execute command. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds...

Hanwha Vision Cameras Uncaught Exception (CVE-2023-5038)

A flaw that allows for a unauthenticated DoS attack exists on Hanwha Vision camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer...

Hanwha Vision Multiple Products Command Injection (CVE-2023-31996)

Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special characters for the NAS storage test function. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

Hanwha Vision NVR Remote Code Execution (CVE-2023-6096)

By dismantling the firmware, an attacker can analyze internal information, as well as configure the manipulated firmware to update the product. If the attacker has the ability to log into the product, they can take control of it. This plugin only works with Tenable.ot. Please visit...

Hanwha Vision Web Viewer Cross-site Scripting (CVE-2018-11689)

Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi- bin/webviewerloginpage data3 parameter. The same Web Viewer codebase was transitioned from Samsung to Hanwha. This plugin only works with Tenable.ot. Please visit...