CVE-2023-28468
An issue was discovered in FvbServicesRuntimeDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. The FvbServicesRuntimeDxe SMM module exposes an SMI handler […]
İçeriği inceleyinALLSAFE / Güncel Güvenlik AçıklarıGelişmeleri izleyin.
Gelişmeleri izleyin.
Riskleri önceliklendirin.
NIST NVD, USOM / Siber Güvenlik Başkanlığı ve Exploit-DB kaynaklarından güvenlik bildirimleri. Etkilenen ürün ve sürümleri özgün kaynakta doğrulayın.
Kayıtlar kaynakların yayın tarihleri ve özgün içerikleriyle sunulur. Bir kaydın bulunması, kurumunuzun etkilendiğini tek başına göstermez. Sürüm ve yapılandırmayı kontrol ederek üreticinin güncel önerilerini değerlendirin.
CVE-2023-25600
An issue was discovered in InsydeH2O. A malicious operating system can tamper with a runtime-writable EFI variable, leading to out-of-bounds memory reads […]
İçeriği inceleyinCVE-2023-22277
Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure […]
İçeriği inceleyinCVE-2022-26838
Path traversal vulnerability in Importing Mobile Device Data of Cybozu Remote Service 3.1.2 allows a remote authenticated attacker to cause a denial-of-service […]
İçeriği inceleyinCVE-2022-34453
Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability. A remote read only user could potentially exploit […]
İçeriği inceleyinCVE-2022-4046
In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker […]
İçeriği inceleyinCVE-2023-22314
Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure […]
İçeriği inceleyinCVE-2023-22317
Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure […]
İçeriği inceleyinCVE-2023-21411
User provided input is not sanitized in the “Settings > Access Controlâ€� configuration interface allowing for arbitrary code execution. Zafiyet ile ilgili […]
İçeriği inceleyinCVE-2023-21412
User provided input is not sanitized on the AXIS License Plate Verifier specific “search.cgiâ€� allowing for SQL injections. Zafiyet ile ilgili Genel […]
İçeriği inceleyinCVE-2023-21407
A broken access control was found allowing for privileged escalation of the operator account to gain administrator privileges. Zafiyet ile ilgili Genel […]
İçeriği inceleyinCVE-2023-21408
Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials that are used in the integration interface towards […]
İçeriği inceleyin