CVE-2024-45369

CVE-2024-45369 concerns mySCADA myPRO Manager, where a web-application parameter allows unauthorized access due to a weak authentication mechanism. Multiple connected sources corroborate an improper authentication vulnerability affecting myPRO Manager used for visualization/control of industrial ...

CVE-2024-45369 mySCADA myPRO Improper Authentication

The web application uses a weak authentication mechanism to verify that a request is coming from an authenticated and authorized resource...

CVE-2024-45369 mySCADA myPRO Improper Authentication

The web application uses a weak authentication mechanism to verify that a request is coming from an authenticated and authorized resource...

K000148687: qt vulnerabilities CVE-2018-21035, CVE-2015-1290, CVE-2013-0254, and CVE-2023-43114

Security Advisory Description CVE-2018-21035 In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service memory consumption. CVE-2015-1290 The Google V8...

Apache Answer 安全漏洞

Apache Answer is a community platform of the Apache USA Foundation. A security vulnerability exists in Apache Answer versions 1.4.0 and earlier, which stems from insufficient cryptographic strength and could result in the generation of tokens that are predictable...

AIPHONE IXG SYSTEM 安全漏洞

AIPHONE IXG SYSTEM is an IP-based residential system from AIPHONE Corporation Japan. A security vulnerability exists in the AIPHONE IXG SYSTEM that stems from insufficient credentials and could allow an authenticated attacker to perform unexpected actions...

CVE-2022-43934

Brocade SANnav before Brocade SANnav 2.2.2 supports key exchange algorithms, which are considered weak on ports 24, 6514, 18023, 19094, and 19095...

CVE-2022-43934

Brocade SANnav before Brocade SANnav 2.2.2 supports key exchange algorithms, which are considered weak on ports 24, 6514, 18023, 19094, and 19095...

CVE-2022-43934 Weak Key-exchange algorithms

Brocade SANnav before Brocade SANnav 2.2.2 supports key exchange algorithms, which are considered weak on ports 24, 6514, 18023, 19094, and 19095...

CVE-2022-43934 Weak Key-exchange algorithms

Brocade SANnav before Brocade SANnav 2.2.2 supports key exchange algorithms, which are considered weak on ports 24, 6514, 18023, 19094, and 19095...

Intel Driver & Support Assistant Log Folder Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Intel Driver & Support Assistant. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

PT-2024-31583 · Myscada · Myscada Mypro Manager

Name of the Vulnerable Software and Affected Versions: mySCADA myPRO Manager affected versions not specified Description: The web application uses a weak authentication mechanism to verify that a request is coming from an authenticated and authorized resource. Recommendations: At the moment, ther...

The vulnerability of the mptcp component in Linux kernel, which allows a hacker to cause a service failure

The vulnerability of the mptcp component in Linux operating systems is related to inadequate access restrictions. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of GigaDevice’s GD32 microprogrammed device controllers, such as GD32F1x0, GD32F4xx, and GD32F3x0, is related to insufficient access control mechanisms. This allows attackers to read data from the RAM or modify its state.

The vulnerability of GigaDevice’s GD32 microprogrammed device controllers, such as GD32F1x0, GD32F4xx, and GD32F3x0, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to read data from the RAM or alter its state...

Security Bulletin: IBM Sterling Global Availability Mailbox is affected by a WebSphere Liberty vulnerability (CVE-2023-46158)

Summary IBM Sterling Global Availability Mailbox is affected by IBM WebSphere Application Server Liberty it could provide weaker than expected security with the appSecurity-1.0, appSecurity-2.0, appSecurity-3.0, appSecurity-4.0 or appSecurity-5.0 feature enabled. Vulnerability Details...

Privilege Escalation

Rancher Manager is vulnerable to Privilege Escalation. The vulnerability is due to weak Access Control Lists ACL in Rancher Manager deployments containing Windows nodes, allow overly permissive access to sensitive files by BUILTIN\Users or NT AUTHORITY\Authenticated Users...

CVE-2024-51051

AVSCMS v8.2.0 was discovered to contain weak default credentials for the Administrator account...

CVE-2024-51051

CVE-2024-51051 affects AVSCMS v8.2.0, where the Administrator account is exposed by weak default credentials. The vulnerability is documented across multiple feeds (NVD/Red Hat/CNNVD/CVE catalogs) confirming the same issue: weak default admin credentials in AVSCMS 8.2.0. The provided metrics indi...

CVE-2024-51051

AVSCMS v8.2.0 was discovered to contain weak default credentials for the Administrator account...

CVE-2024-51051

AVSCMS v8.2.0 was discovered to contain weak default credentials for the Administrator account...