CVE-2022-23182: Undefined Security Weakness

Improper access control in the IntelR Data Center Manager software before version 4.1 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2022-21233: Undefined Security Weakness

Improper isolation of shared resources in some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2021-42052

IPESA e-Flow 3.3.6 allows path traversal for reading any file within the web root directory via the lib/js/build/STEResource.res path and the R query parameter...

CVE-2021-42052

IPESA e-Flow 3.3.6 allows path traversal for reading any file within the web root directory via the lib/js/build/STEResource.res path and the R query parameter...

Path traversal

IPESA e-Flow 3.3.6 allows path traversal for reading any file within the web root directory via the lib/js/build/STEResource.res path and the R query parameter...

CVE-2021-42052: Improper Limitation of a Pathname to a Restricted Directory

IPESA e-Flow 3.3.6 allows path traversal for reading any file within the web root directory via the lib/js/build/STEResource.res path and the R query parameter...

PT-2022-11536

Name of the Vulnerable Software and Affected Versions IPESA e-Flow version 3.3.6 Description The issue allows path traversal for reading any file within the web root directory. This is achieved via the lib/js/build/STEResource.res path and the R query parameter. Recommendations For IPESA e-Flow...

CVE-2021-22289

Improper Input Validation vulnerability in the project upload mechanism in B&R Automation Studio version =4.0 may allow an unauthenticated network attacker to execute code...

Input validation

Improper Input Validation vulnerability in the project upload mechanism in B&R Automation Studio version =4.0 may allow an unauthenticated network attacker to execute code...

CVE-2021-22289

CVE-2021-22289 affects B&R Automation Studio 4 (version >= 4.0) and targets the project upload mechanism. It stems from improper input validation and could allow an unauthenticated network attacker to execute code remotely. Documents describe potential remote code execution, information disclo...

CVE-2021-22289 RCE through Project Upload from Target

Improper Input Validation vulnerability in the project upload mechanism in B&R Automation Studio version =4.0 may allow an unauthenticated network attacker to execute code...

CVE-2021-22289: Improper Input Validation

Improper Input Validation vulnerability in the project upload mechanism in B&R Automation Studio version =4.0 may allow an unauthenticated network attacker to execute code...

PT-2022-4238

Name of the Vulnerable Software and Affected Versions B&R Automation Studio version 4.0 and later Description The issue is related to improper input validation in the project upload mechanism, which may allow an unauthenticated network attacker to execute code. This could potentially lead to remo...

B&R Automation Studio 输入验证错误漏洞

B&R Automation Studio is an integrated software development environment from B&R Automation, an Austrian company. A security vulnerability exists in B&R Automation Studio versions above 4.0, which stems from an input validation vulnerability in the project upload mechanism that could allow an...

PT-2022-4204

Name of the Vulnerable Software and Affected Versions IntelR Wireless BluetoothR and KillerTM BluetoothR products versions prior to 22.120 Description The issue is related to an out of bounds read in the firmware, which may allow an authenticated user to potentially enable denial of service via...

PT-2022-4224

Name of the Vulnerable Software and Affected Versions IntelR 700 and 722 Series Ethernet Controllers and Adapters versions prior to 8.5 and 1.5.5 Description The issue is related to improper access control in the firmware of the affected devices, which may allow a privileged user to enable denial...

PT-2022-4198

Name of the Vulnerable Software and Affected Versions IntelR Wireless BluetoothR and KillerTM BluetoothR products versions prior to 22.120 Description The issue is related to improper buffer restrictions in the firmware of some IntelR Wireless BluetoothR and KillerTM BluetoothR products. This may...

Carel pCOWeb HVAC BACnet Gateway 2.1.0 - Directory Traversal Vulnerability

Exploit Title: Carel pCOWeb HVAC BACnet Gateway 2.1.0 - Directory Traversal Exploit Author: LiquidWorm Vendor: CAREL INDUSTRIES S.p.A. Product web page: https://www.carel.com Affected version: Firmware: A2.1.0 - B2.1.0 Application Software: 2.15.4A Software version: v16 13020200 Summary: pCO...

[SECURITY] Fedora 36 Update: golang-github-oneofone-xxhash-1.2.8-6.fc36

This is a native Go implementation of the excellent xxhash algorithm, an extremely fast non-cryptographic Hash algorithm, working at speeds close to R AM limits...

CVE-2022-34140: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in /index.php?r=site%2Fsignup of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username field...