CVE-2021-32933
An attacker could leverage an API to pass along a malicious file that could then manipulate the process creation command line in […]
İçeriği inceleyinNIST NVD, USOM / Siber Güvenlik Başkanlığı ve Exploit-DB kaynaklarından güvenlik bildirimleri. Etkilenen ürün ve sürümleri özgün kaynakta doğrulayın.
Kayıtlar kaynakların yayın tarihleri ve özgün içerikleriyle sunulur. Bir kaydın bulunması, kurumunuzun etkilendiğini tek başına göstermez. Sürüm ve yapılandırmayı kontrol ederek üreticinin güncel önerilerini değerlendirin.
An attacker could leverage an API to pass along a malicious file that could then manipulate the process creation command line in […]
İçeriği inceleyinAn attacker can gain knowledge of a session temporary working folder where the getfile and putfile commands are used in MDT AutoSave […]
İçeriği inceleyinAn attacker could decipher the encryption and gain access to MDT AutoSave versions prior to v6.02.06. Zafiyet ile ilgili Genel Bilgi, Etki […]
İçeriği inceleyinAn attacker could utilize a function in MDT AutoSave versions prior to v6.02.06 that permits changing a designated path to another path […]
İçeriği inceleyinAn attacker could utilize SQL commands to create a new user MDT AutoSave versions prior to v6.02.06 and update the user’s permissions, […]
İçeriği inceleyinA function in MDT AutoSave versions prior to v6.02.06 is used to retrieve system information for a specific process, and this information […]
İçeriği inceleyinRockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed contains a vulnerability that may allow a […]
İçeriği inceleyinA getfile function in MDT AutoSave versions prior to v6.02.06 enables a user to supply an optional parameter, resulting in the processing […]
İçeriği inceleyinTwo buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O Series firmware version 2.2 or earlier may allow a remote […]
İçeriği inceleyinData can be copied without validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier, which […]
İçeriği inceleyinIt was observed that while login into Business-central console, HTTP request discloses sensitive information like username and password when intercepted using some […]
İçeriği inceleyinSensitive information can be obtained through the handling of serialized data. The issue results from the lack of proper authentication required to […]
İçeriği inceleyin