280 matches found
Open Automation Software OAS Platform License Issue Vulnerability
Open Automation Software OAS Platform is an Industrial Internet of Things IoT suite from US-based Open Automation Software, Inc. It is designed to help organizations connect data sources to the OAS Platform. An authorization issue vulnerability exists in Open Automation Software OAS Platform...
PT-2023-24809 · Open Automation · Open Automation Software Oas Platform
Name of the Vulnerable Software and Affected Versions: Open Automation Software OAS Platform version 18.00.0072 Description: An improper input validation vulnerability exists in the OAS Engine User Creation functionality. A specially crafted series of network requests can lead to unexpected data ...
Open Automation Software OAS Platform Security Vulnerability
Open Automation Software OAS Platform is an Industrial Internet of Things IoT suite from US-based Open Automation Software, Inc. It is designed to help organizations connect data sources to the OAS Platform. A security vulnerability exists in Open Automation Software OAS Platform version...
PT-2023-25153 · Open Automation · Open Automation Software Oas Platform
Name of the Vulnerable Software and Affected Versions: Open Automation Software OAS Platform version 18.00.0072 Description: An information disclosure issue exists in the OAS Engine configuration management functionality. A specially crafted series of network requests can lead to a disclosure of...
Open Automation Software OAS Platform Security Feature Issue Vulnerability
Open Automation Software OAS Platform is an Industrial Internet of Things IoT suite from US-based Open Automation Software, Inc. It is designed to help organizations connect data sources to the OAS Platform. A security signature issue vulnerability exists in Open Automation Software OAS Platform...
Open Automation Software OAS Platform OAS Engine User Creation improper input validation vulnerability
Talos Vulnerability Report TALOS-2023-1772 Open Automation Software OAS Platform OAS Engine User Creation improper input validation vulnerability September 5, 2023 CVE Number CVE-2023-34317 SUMMARY An improper input validation vulnerability exists in the OAS Engine User Creation functionality of...
Open Automation Software OAS Platform Security Vulnerability
Open Automation Software OAS Platform is an Industrial Internet of Things IoT suite from US-based Open Automation Software, Inc. It is designed to help organizations connect data sources to the OAS Platform. A security vulnerability exists in Open Automation Software OAS Platform version...
Open Automation Software OAS Platform License Issue Vulnerability
Open Automation Software OAS Platform is an Industrial Internet of Things IoT suite from US-based Open Automation Software, Inc. It is designed to help organizations connect data sources to the OAS Platform. A security vulnerability exists in Open Automation Software OAS Platform version...
Open Automation Software OAS Platform Information Disclosure Vulnerability
Open Automation Software OAS Platform is an Industrial Internet of Things IoT suite from US-based Open Automation Software, Inc. It is designed to help organizations connect data sources to the OAS Platform. An information disclosure vulnerability exists in Open Automation Software OAS Platform...
PT-2023-23912 · Open Automation · Open Automation Software Oas Platform
Name of the Vulnerable Software and Affected Versions: Open Automation Software OAS Platform version 18.00.0072 Description: A file write vulnerability exists in the OAS Engine configuration functionality. This issue can be triggered by a specially crafted series of network requests, leading to...
PT-2023-24834 · Open Automation · Open Automation Software Oas Platform
Name of the Vulnerable Software and Affected Versions: Open Automation Software OAS Platform version 18.00.0072 Description: An authentication bypass vulnerability exists in the OAS Engine authentication functionality. A specially crafted network sniffing can lead to decryption of sensitive...
KingH5Stream of Beijing Asian Control Technology Development Co., Ltd. is vulnerable to a logic flaw.
Beijing Asian Control Technology Development Co., Ltd. is a high-tech enterprise of automation software platform. Beijing Asian Control Technology Development Co., Ltd KingH5Stream has a logic flaw vulnerability that can be exploited by an attacker to obtain user passwords and log in to the syste...
CVE-2023-1064
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Uzay Baskul Weighbridge Automation Software allows SQL Injection. This issue affects Weighbridge Automation Software: before 1.1...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Uzay Baskul Weighbridge Automation Software allows SQL Injection.This issue affects Weighbridge Automation Software: before 1.1...
CVE-2023-1064 SQLi in Uzay Baskul's Weighbridge Automation Software
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Uzay Baskul Weighbridge Automation Software allows SQL Injection. This issue affects Weighbridge Automation Software: before 1.1...
CVE-2023-1064
Uzay Baskul Weighbridge Automation Software prior to version 1.1 is affected by an SQL Injection due to improper neutralization of special elements in SQL commands. Root cause: input not properly sanitized in SQL query construction. Impact is high (C, I, A = HIGH) with CVSS v3.1 base score 9.8; a...
CVE-2023-1064 SQLi in Uzay Baskul's Weighbridge Automation Software
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Uzay Baskul Weighbridge Automation Software allows SQL Injection. This issue affects Weighbridge Automation Software: before 1.1...
Uzay Baskul Weighbridge Automation Software SQL注入漏洞
Uzay Baskul Weighbridge Automation Software is an industrial control automation software from Uzay Baskul. A security vulnerability exists in Uzay Baskul Weighbridge Automation Software versions prior to 1.1, which stems from improper neutralization of a special element, resulting in SQL injectio...
Siemens SICAM PAS/PQS 代码问题漏洞
Siemens SICAM PAS/PQS is a software from Siemens with an operating system for energy automation and power quality. A security vulnerability exists in Siemens SICAM PAS/PQS versions prior to V7.0 that stems from a failure to properly protect the containing folder. An attacker can exploit the...
The vulnerability of Websoft HCM’s automation software for HR processes stems from the lack of measures taken to protect the website structure. This allows attackers to carry out XSS attacks.
The vulnerability of Websoft HCM’s HR automation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...