| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2013-6925 | 8.3 | The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote attackers to hijack web sessions by predicting a session id value. | 2022-02-01 16:53:00 | 2013-12-17 04:46:00 |
| CVE-2012-2441 | 8.5 | RuggedCom Rugged Operating System (ROS) before 3.3 has a factory account with a password derived from the MAC Address field in a banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, an | 2022-02-01 16:53:00 | 2012-04-28 00:55:00 |
| CVE-2012-1803 | 8.5 | RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Address field in the banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address | 2022-02-01 16:53:00 | 2012-04-28 00:55:00 |
| CVE-2022-21697 | 5.5 | Jupyter Server Proxy is a Jupyter notebook server extension to proxy web services. Versions of Jupyter Server Proxy prior to 3.2.1 are vulnerable to Server-Side Request Forgery (SSRF). Any user deploying Jupyter Server or Notebook with jupyter-proxy- | 2022-02-01 16:31:00 | 2022-01-25 14:15:00 |
| CVE-2022-22789 | 4.6 | Charactell - FormStorm Enterprise Account takeover – An attacker can modify (add, remove and update) passwords file for all the users. The xx_users.ini file in the FormStorm folder contains usernames in cleartext and an obfuscated password. Malicious | 2022-02-01 16:18:00 | 2022-01-25 20:15:00 |
| CVE-2021-34869 | 7.2 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this | 2022-02-01 15:46:00 | 2022-01-25 16:15:00 |
| CVE-2022-23945 | 5.0 | Missing authentication on ShenYu Admin when register by HTTP. This issue affected Apache ShenYu 2.4.0 and 2.4.1. | 2022-02-01 15:17:00 | 2022-01-25 13:15:00 |
| CVE-2012-3040 | 4.3 | Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI. | 2022-02-01 15:16:00 | 2012-10-10 18:55:00 |
| CVE-2013-0700 | 7.8 | Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control outage) via crafted packets to TCP port 102 (aka the ISO-TSAP port). | 2022-02-01 15:15:00 | 2013-04-22 03:27:00 |
| CVE-2013-2780 | 7.8 | Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control outage) via crafted packets to UDP port 161 (aka the SNMP port). | 2022-02-01 15:10:00 | 2013-04-22 03:27:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: