CVE-2020-15781

A vulnerability has been identified in SICAM WEB firmware for SICAM A8000 RTUs All versions V05.30. The login screen does not sufficiently sanitize input, which enables an attacker to generate specially crafted log messages. If an unsuspecting victim views the log messages via the web browser,...

Siemens SICAM A8000 RTUs Improper Neutralization of Input During Web Page Generation (CVE-2020-15781)

A vulnerability has been identified in SICAM WEB firmware for SICAM A8000 RTUs All versions V05.30. The login screen does not sufficiently sanitize input, which enables an attacker to generate specially crafted log messages. If an unsuspecting victim views the log messages via the web browser,...

CVE-2020-15781

CVE-2020-15781 affects Siemens SICAM A8000 SICAM WEB firmware prior to version 05.30. The login page fails to adequately sanitize input, allowing an attacker to generate specially crafted log messages that, when viewed in a browser, may be interpreted and executed as code (XSS). Impacted product:...

Siemens SICAM A8000 RTUs

1. EXECUTIVE SUMMARY CVSS v3 8.3 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: SICAM A8000 Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could compromise the confidentiality, integrity, and availability of the web application...

WordPress Social LikeBox & Feed Plugin < 2.8.5 CSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113510";...

CVE-2019-15781

CVE-2019-15781 corresponds to a CSRF vulnerability in the WordPress plugin facebook-by-weblizar prior to version 2.8.5. The issue stems from insufficient verification that requests originate from a trusted user, enabling an attacker to induce unintended actions on behalf of an authenticated user....

CVE-2018-15781

CVE-2018-15781 concerns Dell Wyse Password Encoder on ThinLinux2 versions prior to 2.1.0.01, which contains a hard-coded cryptographic key. An unauthenticated remote attacker could reverse engineer the cryptographic system to discover the private key and decrypt locally stored ciphertext. The vul...

CVE-2017-15781

XnView Classic for Windows v2.43 is affected by a vulnerability in the handling of .dwg files, leading to arbitrary code execution or denial of service. The issue is described as a Read Access Violation in control flow starting at CADImage+0x286a76, with exploitation via a crafted .dwg file. Mult...