‼ CVE-2023-0103 ‼
📖 Read
via "National Vulnerability Database".
If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are outside of the communication buffer, the device stops operating. This could allow an attacker to cause a denial-of-service condition.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-0102 ‼
📖 Read
via "National Vulnerability Database".
LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command. This could allow an attacker to delete arbitrary files.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22806 ‼
📖 Read
via "National Vulnerability Database".
LS ELECTRIC XBC-DN32U with operating system version 01.80 transmits sensitive information in cleartext when communicating over its XGT protocol. This could allow an attacker to gain sensitive information such as user credentials.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2023-22803 ‼
📖 Read
via "National Vulnerability Database".
LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to perform critical functions to the PLC. This could allow an attacker to change the PLC's mode arbitrarily.📖 Read
via "National Vulnerability Database".
🕴 3 Ways CISOs Can Lead Effectively and Avoid Burnout 🕴
📖 Read
via "Dark Reading".
Information security is a high-stakes field with sky-high expectations. Here's how CISOs can offset the pressures and stay healthy.📖 Read
via "Dark Reading".
Dark Reading
3 Ways CISOs Can Lead Effectively and Avoid Burnout
Information security is a high-stakes field with sky-high expectations. Here's how CISOs can can offset the pressures and stay healthy.
👍1
🕴 Brivo Reveals Top Security Trends for 2023: Convenience Is King in Securing the Hybrid Workplaces of the Future 🕴
📖 Read
via "Dark Reading".
Factoring user experience and convenience into how employees and tenants access buildings is top concern for security professionals says benchmark industry survey.📖 Read
via "Dark Reading".
Dark Reading
Brivo Reveals Top Security Trends for 2023: Convenience Is King in Securing the Hybrid Workplaces of the Future
Factoring user experience and convenience into how employees and tenants access buildings is top concern for security professionals says benchmark industry survey.
🕴 GAO Calls for Improved Data Privacy Protections 🕴
📖 Read
via "Dark Reading".
US federal watchdog agency outlines key measures for better protecting sensitive data under the federal government's control.📖 Read
via "Dark Reading".
Dark Reading
GAO Calls for Improved Data Privacy Protections
US federal watchdog agency outlines key measures for better protecting sensitive data under the federal government's control.
🕴 Call for Speakers Now Open for the RH-ISAC Cyber Intelligence Summit 🕴
📖 Read
via "Dark Reading".
Retail & Hospitality ISAC invites industry leaders, experts, and innovators to submit proposals for presentations and panel discussions.📖 Read
via "Dark Reading".
Dark Reading
Call for Speakers Now Open for the RH-ISAC Cyber Intelligence Summit
Retail & Hospitality ISAC invites industry leaders, experts, and innovators to submit proposals for presentations and panel discussions.
‼ CVE-2023-23459 ‼
📖 Read
via "National Vulnerability Database".
Priority Windows may allow Command Execution via SQL Injection using an unspecified method.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23847 ‼
📖 Read
via "National Vulnerability Database".
A cross-site request forgery (CSRF) vulnerability in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23466 ‼
📖 Read
via "National Vulnerability Database".
Media CP Media Control Panel latest version. Insufficiently protected credential change.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23458 ‼
📖 Read
via "National Vulnerability Database".
Sunell DVR, latest version, CWE-200: Exposure of Sensitive Information to an Unauthorized Actor through an unspecified request.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23464 ‼
📖 Read
via "National Vulnerability Database".
Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2023-23850 ‼
📖 Read
via "National Vulnerability Database".
A missing permission check in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-47507 ‼
📖 Read
via "National Vulnerability Database".
SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23461 ‼
📖 Read
via "National Vulnerability Database".
Libpeconv – access violation, before commit b076013 (30/11/2022).📖 Read
via "National Vulnerability Database".
‼ CVE-2022-47508 ‼
📖 Read
via "National Vulnerability Database".
Customers who had configured their polling to occur via Kerberos did not expect NTLM Traffic on their environment, but since we were querying for data via IP address this prevented us from utilizing Kerberos.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23460 ‼
📖 Read
via "National Vulnerability Database".
Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24498 ‼
📖 Read
via "National Vulnerability Database".
An uspecified endpoint in the web server of the switch does not properly authenticate the user identity, and may allow downloading a config page with the password to the switch in clear text.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23467 ‼
📖 Read
via "National Vulnerability Database".
Media CP Media Control Panel latest version. Reflected XSS possible through unspecified endpoint.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23836 ‼
📖 Read
via "National Vulnerability Database".
SolarWinds Platform version 2022.4.1 was found to be susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to the SolarWinds Web Console to execute arbitrary commands.📖 Read
via "National Vulnerability Database".