Lucene search
+L

197 matches found

attackerkb
attackerkb
•added 2022/03/10 5:47 p.m.•9 views

CVE-2022-26101

Fiori launchpad - versions 754, 755, 756, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

6.1CVSS7AI score0.01405EPSS
SaveExploits2References5Affected Software1
OSV
OSV
•added 2022/03/10 5:47 p.m.•16 views

CVE-2022-26101

Fiori launchpad - versions 754, 755, 756, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

6.1CVSS7AI score0.01405EPSS
SaveExploits2References4
NVD
NVD
•added 2022/03/09 11:15 p.m.•29 views

CVE-2022-24323

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product:...

5.9CVSS0.0086EPSS
SaveExploits0References1
Prion
Prion
•added 2022/03/09 11:15 p.m.•28 views

Design/Logic Flaw

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product:...

4.3CVSS5.7AI score0.0086EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2022/03/09 11:05 p.m.•35 views

CVE-2022-24323

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product:...

5.3CVSS5.9AI score0.0086EPSS
SaveExploits0References1
CVE
CVE
•added 2022/03/09 11:05 p.m.•107 views

CVE-2022-24323

The CVE-2022-24323 entry describes CWE-754: Improper Check for Unusual or Exceptional Conditions leading to disruption of communication between Modicon controllers and engineering software when an attacker can intercept and manipulate certain Modbus response data. Affected products are EcoStruxur...

5.9CVSS5.7AI score0.0086EPSS
SaveExploits0References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/09 12:00 a.m.•5 views

CVE-2022-24323: Improper Check for Unusual or Exceptional Conditions

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product:...

5.9CVSS6.1AI score0.0086EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/03/09 12:00 a.m.•28 views

SAP Fiori 跨站脚本漏洞

SAP Fiori, a user experience UX design system for SAP applications from SAP, Germany, provides designers and developers with a set of tools and guidelines to quickly develop applications for any platform, delivering a consistent, innovative experience for creators and users. A cross-site scriptin...

6.1CVSS6.9AI score0.01405EPSS
SaveExploits2References8
Positive Technologies
Positive Technologies
•added 2022/03/08 12:00 a.m.•34 views

PT-2022-17671 · Sap · Sap Fiori Launchpad

Name of the Vulnerable Software and Affected Versions: SAP Fiori launchpad versions 754 through 756 Description: The issue is related to insufficient encoding of user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability. This allows for the execution of malicious scripts in th...

6.1CVSS7.1AI score0.01405EPSS
SaveExploits2References6
NVD
NVD
•added 2022/02/09 11:15 p.m.•35 views

CVE-2022-24321

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service against the Geo SCADA server when receiving a malformed HTTP request. Affected Product: ClearSCADA All Versions, EcoStruxure Geo SCADA Expert 2019 All Versions, EcoStruxure Geo...

7.5CVSS0.00999EPSS
SaveExploits0References1
Prion
Prion
•added 2022/02/09 11:15 p.m.•31 views

Design/Logic Flaw

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service against the Geo SCADA server when receiving a malformed HTTP request. Affected Product: ClearSCADA All Versions, EcoStruxure Geo SCADA Expert 2019 All Versions, EcoStruxure Geo...

5CVSS7.5AI score0.00999EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/02/09 10:05 p.m.•40 views

CVE-2022-24321

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service against the Geo SCADA server when receiving a malformed HTTP request. Affected Product: ClearSCADA All Versions, EcoStruxure Geo SCADA Expert 2019 All Versions, EcoStruxure Geo...

7.7AI score0.00999EPSS
SaveExploits0References1
CVE
CVE
•added 2022/02/09 10:05 p.m.•113 views

CVE-2022-24321

CVE-2022-24321 is reported as a CWE-754 vulnerability causing Denial of Service to the Geo SCADA server when receiving malformed HTTP requests. Affected products include ClearSCADA (all versions) and EcoStruxure Geo SCADA Expert 2019 and 2020 (all versions). The connected documents confirm the ro...

7.5CVSS7.5AI score0.00999EPSS
SaveExploits0References1Affected Software3
Tenable Nessus
Tenable Nessus
•added 2022/02/07 12:00 a.m.•33 views

Schneider Electric Modicon Improper Check for Unusual or Exceptional Conditions (CVE-2020-7542)

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium see security notifications for affected versions, that could cause denial of service when a specially crafted Read Physical Memo...

7.5CVSS7.4AI score0.01338EPSS
SaveExploits0References2
NVD
NVD
•added 2022/01/28 8:15 p.m.•27 views

CVE-2021-22816

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a Denial of Service of the RTU when receiving a specially crafted request over Modbus, and the RTU is configured as a Modbus server. Affected Products: SCADAPack 312E, 313E, 314E, 330E, 333E, 334...

7.8CVSS0.00947EPSS
SaveExploits0References1
Prion
Prion
•added 2022/01/28 8:15 p.m.•22 views

Design/Logic Flaw

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a Denial of Service of the RTU when receiving a specially crafted request over Modbus, and the RTU is configured as a Modbus server. Affected Products: SCADAPack 312E, 313E, 314E, 330E, 333E, 334...

7.8CVSS7.5AI score0.00947EPSS
SaveExploits0References1Affected Software9
Cvelist
Cvelist
•added 2022/01/28 7:09 p.m.•35 views

CVE-2021-22816

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a Denial of Service of the RTU when receiving a specially crafted request over Modbus, and the RTU is configured as a Modbus server. Affected Products: SCADAPack 312E, 313E, 314E, 330E, 333E, 334...

7.7AI score0.00947EPSS
SaveExploits0References1
CVE
CVE
•added 2022/01/28 7:09 p.m.•73 views

CVE-2021-22816

The CVE-2021-22816 issue affects Schneider Electric SCADAPack RTUs (models 312E, 313E, 314E, 330E, 333E, 334E, 337E, 350E, 357E) running firmware 8.18.1 and earlier. The root cause is an improper check for unusual or exceptional conditions (CWE-754) that can lead to a Denial of Service when the R...

7.8CVSS7.5AI score0.00947EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/28 12:00 a.m.•6 views

CVE-2021-22816: Improper Check for Unusual or Exceptional Conditions

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a Denial of Service of the RTU when receiving a specially crafted request over Modbus, and the RTU is configured as a Modbus server. Affected Products: SCADAPack 312E, 313E, 314E, 330E, 333E, 334...

7.8CVSS7.2AI score0.00947EPSS
SaveExploits0References2
Vaadin
Vaadin
•added 2021/08/24 12:00 a.m.•66 views

Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20

Improper check in CheckboxGroup in com.vaadin:vaadin-checkbox-flow versions 1.2.0 prior to 2.0.0 Vaadin 12.0.0 prior to 14.0.0, 2.0.0 prior to 3.0.0 Vaadin 14.0.0 prior to 14.5.0, 3.0.0 through 4.0.1 Vaadin 15.0.0 through 17.0.11, 14.5.0 through 14.6.7 Vaadin 14.5.0 through 14.6.7, and 18.0.0...

4.3CVSS0.6AI score0.00665EPSS
SaveExploits0References1Affected Software2
Rows per page
Query Builder