Riasztások
2023. szeptember 20.
NA - CVE-2022-47560 - ** UNSUPPPORTED WHEN ASSIGNED ** The lack of...
** UNSUPPPORTED WHEN ASSIGNED ** The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom requests to execute malicious actions when a user is...
2023. szeptember 20.
NA - CVE-2022-47561 - ** UNSUPPPORTED WHEN ASSIGNED ** The web...
** UNSUPPPORTED WHEN ASSIGNED ** The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without logging into the website, which could allow an attacker...
2023. szeptember 20.
NA - CVE-2022-47562 - ** UNSUPPPORTED WHEN ASSIGNED ** Vulnerability...
** UNSUPPPORTED WHEN ASSIGNED ** Vulnerability in the RCPbind service running on UDP port (111), allowing a remote attacker to create a denial of service (DoS) condition.
2023. szeptember 20.
NA - CVE-2023-22644 - An Innsertion of Sensitive Information into Log...
An Innsertion of Sensitive Information into Log File vulnerability in SUSE SUSE Manager Server Module 4.2 spacewalk-java, SUSE SUSE Manager Server Module 4.3 spacewalk-java causes sensitive...
2023. szeptember 20.
NA - CVE-2023-41374 - Double free issue exists in Kostac PLC...
Double free issue exists in Kostac PLC Programming Software Version 1.6.11.0 and earlier. Arbitrary code may be executed by having a user open a specially crafted project file which was saved using...
2023. szeptember 20.
NA - CVE-2023-41375 - Use after free vulnerability exists in Kostac...
Use after free vulnerability exists in Kostac PLC Programming Software Version 1.6.11.0. Arbitrary code may be executed by having a user open a specially crafted project file which was saved using...
2023. szeptember 20.
NA - CVE-2023-26144 - Versions of the package graphql from 16.3.0 and...
Versions of the package graphql from 16.3.0 and before 16.8.1 are vulnerable to Denial of Service (DoS) due to insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large...
2023. szeptember 20.
NA - CVE-2023-2163 - Incorrect verifier pruning in BPF in Linux...
Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege...
2023. szeptember 13.
Cisco IOS XR Software Image Verification Vulnerability
A vulnerability in Cisco IOS XR Software image verification checks could allow an authenticated, local attacker to execute arbitrary code on the underlying operating system. This vulnerability is due to a time-of-check, time-of-use (TOCTOU) race...
2023. szeptember 13.
Cisco IOS XR Software Compression ACL Bypass Vulnerability
A vulnerability in the classic access control list (ACL) compression feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass the protection that is offered by a configured ACL on an affected device. This...