Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2023-39446 | Socomec MOD3GP-SY-120K 01.12.10 User Management cross-site request forgery (icsa-23-250-03)


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability classified as problematic was found in Socomec MOD3GP-SY-120K 01.12.10. This vulnerability affects unknown code of the component User Management Handler. The manipulation leads to cross-site request forgery. This vulnerability was named CVE-2023-39446. The attack can be initiated remotely. There is no exploit available. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

💾 Socomec DIRIS A-40 Password Disclosure


📈 27.49 Punkte
💾 IT Security Tools

📰 Socomec stellt modulare USV-Anlage vor


📈 27.49 Punkte
📰 IT Security Nachrichten

🕵️ Socomec DIRIS A-40 prior 48250501 Web Interface /password.jsn Password information disclosure


📈 27.49 Punkte
🕵️ Sicherheitslücken

🐧 Kernel Mode Linux: Execute user processes in kernel mode (TL:DR: User Mode Linux let us run the Linux kernel as a user process. Kernel Mode Linux lets us run user processes in the kernel)


📈 22.8 Punkte
🐧 Linux Tipps

🕵️ CVE-2024-23788 | Sharp Energy Management Controller with Cloud Services up to B0.1.9.1 HTTP Request server-side request forgery


📈 20.97 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco Finesse Web-based Management Interface Request Server-Side Request Forgery


📈 19.82 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco Finesse Web-based Management Interface Request Server-Side Request Forgery


📈 19.82 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-21936 | Johnson Controls Metasys ADX prior 12.0.1 User Identity Claim improper authentication (icsa-22-277-01)


📈 19.57 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-3181 | Trihedral VTScada up to 12.0.38 HTTP Request denial of service (icsa-22-300-04)


📈 18.82 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-21767 | Commend WS203VICM up to 1.7 Request access control (icsa-24-051-01)


📈 18.82 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-32931 | Johnson Controls exacqVision Web Service up to 24.03 get request method with sensitive query strings (icsa-24-214-06)


📈 18.82 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-42001 | Vonets VGA-1000 up to 3.3.23.6.9 direct request (icsa-24-214-08)


📈 18.82 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2104 | Secheron SEPCOS Apache privileges management (icsa-22-174-03)


📈 17.92 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-3186 | Dataprobe iBoot-PDU prior 1.42.06162022 Main Management Page access control (icsa-22-263-03)


📈 17.92 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-25088 | Mitsubishi Electric CPU Module Logging Configuration Tool privileges management (icsa-24-135-04)


📈 17.92 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-26314 | Mitsubishi Electric CPU Module Logging Configuration Tool privileges management (icsa-24-135-04)


📈 17.92 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-25086 | Mitsubishi Electric CPU Module Logging Configuration Tool privileges management (icsa-24-135-04)


📈 17.92 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-22106 | Mitsubishi Electric CPU Module Logging Configuration Tool privileges management (icsa-24-135-04)


📈 17.92 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-7515 | Rockwell Automation CompactLogix 5480 prior 34.014/35.013/36.011 PTP Management Packet denial of service (icsa-24-226-10)


📈 17.92 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2021-40438 | Oracle Enterprise Manager Ops Center 12.4.0.0 User Interface server-side request forgery


📈 17.67 Punkte
🕵️ Sicherheitslücken

🕵️ Dropcontact: API key is not validated for C.R.M integration [Pipedrive] of LOGGED IN USER, A user can use another USER'S API key for this operation.


📈 17.1 Punkte
🕵️ Sicherheitslücken

🕵️ SAP EPBC2 Request Server-Side Request Forgery [CVE-2017-16678]


📈 16.92 Punkte
🕵️ Sicherheitslücken

🕵️ TinyCheck HTTP GET Request server-side request forgery [CVE-2020-36200]


📈 16.92 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-1977 | Import Export All WordPress Images, Users & Post Types Plugin HTTP Request server-side request forgery


📈 16.92 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-22982 | VMware vCenter Server/Cloud Foundation URL Request server-side request forgery (VMSA-2022-0018)


📈 16.92 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-35949 | undici up to 5.8.0 on Node.js undici.request path/pathname server-side request forgery (GHSA-8qr4-xgw6-wmr3)


📈 16.92 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2556 | Mailchimp for WooCommerce Plugin up to 2.7.1 on WordPress POST Request server-side request forgery


📈 16.92 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-31196 | Databasir up to 1.0.6 HTTP POST Request server-side request forgery (GHSA-qvg8-427f-852q)


📈 16.92 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-41906 | OpenSearch Notifications Plugin up to 2.2.0 HTTP Request server-side request forgery (GHSA-pfc4-3436-jgrw)


📈 16.92 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-35508 | Proxmox Virtual Environment/Mail Gateway HTTP Request server-side request forgery


📈 16.92 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-46364 | Apache CXF up to 3.4.9/3.5.4 MTOM Request XOP:Include server-side request forgery


📈 16.92 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-47514 | XML-RPC.NET up to 2.4.x POST Request pingback.aspx server-side request forgery


📈 16.92 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-18394 | Ignite Realtime Openfire up to 4.4.2 FaviconServlet.java HTTP GET Request server-side request forgery


📈 16.92 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-8151 | Magento up to 2.2.9/2.3.2 Shippment Request server-side request forgery


📈 16.92 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-16948 | Enghouse Web Chat 6.1.300.31 POST Request server-side request forgery


📈 16.92 Punkte
🕵️ Sicherheitslücken

matomo
•