22231 matches found
CVE-2024-46977
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. A path traversal vulnerability inside of LocalMode's openlocalfile method allows an authenticated user with adequate permissions to download any .txt via the ScreensControllersh...
PYSEC-2024-101
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. A path traversal vulnerability inside of LocalMode's openlocalfile method allows an authenticated user with adequate permissions to download any .txt via the ScreensControllersh...
CVE-2024-46977 OpenC3 COSMOS allows a path traversal via screen controller (`GHSL-2024-127`)
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. A path traversal vulnerability inside of LocalMode's openlocalfile method allows an authenticated user with adequate permissions to download any .txt via the ScreensControllersh...
CVE-2024-46977 OpenC3 COSMOS allows a path traversal via screen controller (`GHSL-2024-127`)
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. A path traversal vulnerability inside of LocalMode's openlocalfile method allows an authenticated user with adequate permissions to download any .txt via the ScreensControllersh...
CVE-2024-46977
OpenC3 COSMOS contains a path traversal vulnerability in LocalMode.open_local_file that, when exploited by an authenticated user with adequate permissions, can download any .txt via ScreensController#show on the COSMOS web server. The issue may lead to information disclosure and is fixed in versi...
PT-2024-7441 · Draytek +1 · Draytek Vigor310 +1
Name of the Vulnerable Software and Affected Versions: DrayTek Vigor310 versions through 4.3.2.6 Description: The issue is related to insufficiently robust encryption of data, which may allow a remote attacker to disclose protected information and perform a man-in-the-middle MITM attack...
RHSA-2024:5024 Red Hat Security Advisory: Red Hat JBoss Web Server 5.8.1 release and security update
Bulletin has no description...
RHSA-2024:4976 Red Hat Security Advisory: Red Hat JBoss Web Server 6.0.3 release and security update
Bulletin has no description...
Synology DiskStation Manager Exposure of Sensitive Information to an Unauthorized Actor (CVE-2022-22680)
Exposure of sensitive information to an unauthorized actor vulnerability in Web Server in Synology DiskStation Manager DSM before 7.0.1-42218-2 allows remote attackers to obtain sensitive information via unspecified vectors. This plugin only works with Tenable.ot. Please visit...
RHSA-2022:1519 Red Hat Security Advisory: Red Hat JBoss Web Server 5.6.2 Security Update
Bulletin has no description...
RHSA-2023:5783 Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.5 release and security update
Bulletin has no description...
RHSA-2022:8917 Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.1 release and security update
Bulletin has no description...
CODESYS web server DoS
The vulnerability in the CODESYS web server’s execution environment related to CODESYS Control is due to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures by sending a specially crafte...
RHSA-2022:0524 Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 14 Security Update
Bulletin has no description...
RHSA-2021:4861 Red Hat Security Advisory: Red Hat JBoss Web Server 5.6.0 Security release
Bulletin has no description...
RHSA-2017:0456 Red Hat Security Advisory: Red Hat JBoss Web Server 3.1.0 security and enhancement update
Bulletin has no description...
RHSA-2017:0455 Red Hat Security Advisory: Red Hat JBoss Web Server 3.1.0 security and enhancement update
Bulletin has no description...
CVE-2024-8175
An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS...
