63 matches found
CVE-2022-2254
creationtimestamp| type| source ---|---|--- 2022-07-01 20:42:47+00:00| seen| https://t.me/cibsecurity/45486...
CVE-2022-2254
A user with administrative privileges in Distributed Data Systems WebHMI 4.1.1.7662 can store a script that could impact other logged in users...
CVE-2022-2254 Distributed Data Systems WebHMI Cross-site Scripting
A user with administrative privileges in Distributed Data Systems WebHMI 4.1.1.7662 can store a script that could impact other logged in users...
CVE-2022-2254
CVE-2022-2254 affects Distributed Data Systems WebHMI, version 4.1.1.7662 (and possibly prior versions). The vulnerability arises from improper neutralization of input during web page generation, enabling a user with administrative privileges to store a script that could impact other logged-in us...
Distributed Data Systems WebHMI
1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: Distributed Data Systems Equipment: WebHMI Vulnerabilities: Cross-site Scripting, OS Command Injection 2. RISK EVALUATION Successful exploitation of these vulnerabilities...
Siemens SIMATIC S7-1200 Improper Input Validation (CVE-2014-2254)
Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service defect-mode transition via crafted HTTP packets, a different vulnerability than CVE-2014-2255. This plugin only works with Tenable.ot. Please visit...
SUSE: Security Advisory (SUSE-SU-2019:2254-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-2254
CVE-2021-2254 affects Oracle E-Business Suite, Hold Management in Oracle Project Contracts (versions 12.1.1–12.1.3). The vulnerability allows a network-based, low-privilege attacker to compromise data integrity and confidentiality (C) via HTTP, with potential unauthorized creation, deletion, or m...
openSUSE Security Update : mariadb (openSUSE-2020-2254)
This update for mariadb fixes the following issues : Update to 10.4.17 bsc1177472 and bsc1178428 - fixing for the following security vulnerabilities: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776, CVE-2020-14789, CVE-2020-15180 This update was imported from the SUSE:SLE-15-SP2:Update update...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 3.11.318 jenkins-2-plugins security update
An update for jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.6.1 package security update
An update for jenkins-2-plugins, openshift-clients, podman, runc, and skopeo is now available for Red Hat OpenShift Container Platform 4.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...
CVE-2020-2254
Jenkins Blue Ocean Plugin 1.23.2 and earlier provides an undocumented feature flag that, when enabled, allows an attacker with Job/Configure or Job/Create permission to read arbitrary files on the Jenkins controller file system...
CVE-2020-2254
Jenkins Blue Ocean Plugin 1.23.2 and earlier provides an undocumented feature flag that, when enabled, allows an attacker with Job/Configure or Job/Create permission to read arbitrary files on the Jenkins controller file system...
CVE-2020-2254
CVE-2020-2254 affects Jenkins Blue Ocean Plugin 1.23.2 and earlier. An undocumented feature flag, blueocean.features.GIT_READ_SAVE_TYPE, when set to clone, allows an attacker with Job/Configure or Job/Create permissions to read arbitrary files on the Jenkins controller filesystem. The issue is a ...
Debian: Security Advisory (DLA-2254-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-2254
Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615,...
CVE-2019-2254
CVE-2019-2254 affects Qualcomm Snapdragon platforms (multiple Snapdragon Auto/Compute/IoT/Mobile lines, including various SD/SDM/RH-series) where position-determination accuracy can be degraded due to wrongly decoded information. The root cause is not explicitly detailed beyond the decoding error...
CVE-2015-2254
Huawei OceanStor UDS devices running software prior to V100R002C01SPC102 are vulnerable to CVE-2015-2254. A remote attacker can intercept and alter patch-loading information, which may result in deletion of directory files and compromise of device functions when loading a patch. The issue is tied...