|
209551
|
7.8 |
HIGH
Local
|
rockwellautomation
|
factorytalk_view
|
The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows…
|
CWE-326
Inadequate Encryption Strength
|
CVE-2020-14481
|
2024-11-21 14:03 |
2022-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209552
|
5.5 |
MEDIUM
Local
|
rockwellautomation
|
factorytalk_view
|
Due to usernames/passwords being stored in plaintext in Random Access Memory (RAM), a local, authenticated attacker could gain access to certain credentials, including Windows Logon credentials.
|
CWE-312
Cleartext Storage of Sensitive Information
|
CVE-2020-14480
|
2024-11-21 14:03 |
2022-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209553
|
7.1 |
HIGH
Local
|
rockwellautomation
|
factorytalk_services_platform
|
A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly configured XML files to access local or remote content. A successful exploit could potentially cause a …
|
CWE-611
XXE
|
CVE-2020-14478
|
2024-11-21 14:03 |
2022-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209554
|
9.8 |
CRITICAL
Network
|
mitsubishielectric
|
cw_configurator mi_configurator gx_works3 gx_works2 melsoft_iq_appportal melsoft_navigator mr_configurator2 mt_works2 mx_component rt_toolbox3 fr_configurator2 iu_dev…
|
Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.
|
CWE-22
Path Traversal
|
CVE-2020-14523
|
2024-11-21 14:03 |
2022-02-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209555
|
9.8 |
CRITICAL
Network
|
mitsubishielectric
|
cw_configurator gx_logviewer melfa-works rt_toolbox2 fr_configurator_sw3 fr_configurator2 m_commdtm-io-link melsec_wincpu_setting_utility melsoft_em_software_development_kit
|
Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attacker could use this vulnerability to obtain information, m…
|
CWE-276
Incorrect Default Permissions
|
CVE-2020-14521
|
2024-11-21 14:03 |
2022-02-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209556
|
6.1 |
MEDIUM
Network
|
cacti
|
cacti
|
Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme.
|
CWE-79
Cross-site Scripting
|
CVE-2020-14424
|
2024-11-21 14:03 |
2021-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209557
|
6.3 |
MEDIUM
Network
|
redhat
|
3scale_api_management
|
A flaw was found in the Red Hat 3scale API Management Platform, where member permissions for an API's admin portal were not properly enforced. This flaw allows an authenticated user to bypass normal …
|
NVD-CWE-Other
|
CVE-2020-14388
|
2024-11-21 14:03 |
2021-06-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209558
|
7.5 |
HIGH
Network
|
redhat
|
satellite
|
An account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with proper authentication to the relevant external authentication source (SSO or Open ID) can claim the pri…
|
-
|
CVE-2020-14380
|
2024-11-21 14:03 |
2021-06-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209559
|
6.5 |
MEDIUM
Network
|
redhat
|
satellite
|
A credential leak vulnerability was found in Red Hat Satellite. This flaw exposes the compute resources credentials through VMs that are running on these resources in Satellite.
|
-
|
CVE-2020-14371
|
2024-11-21 14:03 |
2021-06-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209560
|
5.9 |
MEDIUM
Network
|
redhat oracle
|
xnio jboss_operations_network jboss_enterprise_application_platform jboss_fuse jboss_data_grid jboss_brms jboss_soa_platform jboss_data_virtualization communications_cloud_nat…
|
A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial…
|
NVD-CWE-Other
|
CVE-2020-14340
|
2024-11-21 14:03 |
2021-06-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|