CVE-2023-1064 SQLi in Uzay Baskul's Weighbridge Automation Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Uzay Baskul Weighbridge Automation Software allows SQL Injection. This issue affects Weighbridge Automation Software: before 1.1...

CVE-2023-1064

Uzay Baskul Weighbridge Automation Software prior to version 1.1 is affected by an SQL Injection due to improper neutralization of special elements in SQL commands. Root cause: input not properly sanitized in SQL query construction. Impact is high (C, I, A = HIGH) with CVSS v3.1 base score 9.8; a...

CVE-2023-1064 SQLi in Uzay Baskul's Weighbridge Automation Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Uzay Baskul Weighbridge Automation Software allows SQL Injection. This issue affects Weighbridge Automation Software: before 1.1...

Security Bulletin: Multiple vulnerabilities in IBM SDK for Node.js and packaged modules affect IBM Business Automation Workflow Configuration Editor

Summary IBM Business Automation Workflow Configuration Editor is vulnerable to multiple attacks. Vulnerability Details CVEID:CVE-2022-24999 DESCRIPTION: Express.js Express is vulnerable to a denial of service, caused by a prototype pollution flaw in qs. By adding or modifying properties of...

File and Directory Permissions Vulnerability in Hitachi Automation Director, Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center

Overview A File and Directory Permissions Vulnerability CVE-2020-36652 exists in Hitachi Automation Director, Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor...

PT-2023-16731

Name of the Vulnerable Software and Affected Versions Uzay Baskul Weighbridge Automation Software versions prior to 1.1 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...

Uzay Baskul Weighbridge Automation Software SQL注入漏洞

Uzay Baskul Weighbridge Automation Software is an industrial control automation software from Uzay Baskul. A security vulnerability exists in Uzay Baskul Weighbridge Automation Software versions prior to 1.1, which stems from improper neutralization of a special element, resulting in SQL injectio...

openscap bug fix and enhancement update

An update is available for openscap. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The OpenSCAP suite enables integration of the Security Content Automation...

Security Bulletin: Denial of Service vulnerability in IBM HTTP Server used by WebSphere Application Server affects IBM Business Automation Workflow (CVE-2023-26281)

Summary WebSphere Application Server Traditional is shipped as a component of IBM Business Automation Workflow. WebSphere Application Server Liberty is shipped as part of the optional components Process Federation Server since 8.5.6, and User Management Service since 18.0.0.1 in IBM Business...

Security Bulletin: Multiple security vulnerabilities are reported for snakeyaml and jackson-databind in IBM Business Automation Workflow

Summary IBM Business Automation Workflow repackages the snakeyaml and jackson-databind open source libraries in /BPM/Lombardi/lib. Current vulnerabilities in these libraries have been assessed as not applicable in the context how the product uses these libraries. An update is made available to...

CVE-2021-22283 MMS File Transfer Vulnerability impact on Distribution Automation products

Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, ABB Relion protection relays - 615 series CN 4.0 FP1, ABB Relion protection relays - 615 series IEC 5.0, ABB Relion protection relays - 615 series IEC 5.0 FP1...

CVE-2021-22283 MMS File Transfer Vulnerability impact on Distribution Automation products

Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, ABB Relion protection relays - 615 series CN 4.0 FP1, ABB Relion protection relays - 615 series IEC 5.0, ABB Relion protection relays - 615 series IEC 5.0 FP1...

CVE-2020-36652

Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure Analytics Advisor on Linux Hitachi Infrastructure Analytics Advisor, Analytics probe server components, Hitachi Ops Center Automator on Linux, Hitachi Ops Center Analyzer on Linux Hitachi O...

CVE-2020-36652 File and Directory Permissions Vulnerability in Hitachi Automation Director, Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center

Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure Analytics Advisor on Linux Hitachi Infrastructure Analytics Advisor, Analytics probe server components, Hitachi Ops Center Automator on Linux, Hitachi Ops Center Analyzer on Linux Hitachi O...

CVE-2020-36652

CVE-2020-36652 is an Incorrect Default Permissions issue affecting Hitachi Automation Director (Linux) versions 8.2.0-00 through 10.6.1-00, Hitachi Infrastructure Analytics Advisor (Linux) 2.0.0-00 through 4.0.0-00, Hitachi Ops Center Automator prior to 10.9.1-00, Hitachi Ops Center Analyzer prio...

CVE-2020-36652 File and Directory Permissions Vulnerability in Hitachi Automation Director, Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center

Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure Analytics Advisor on Linux Hitachi Infrastructure Analytics Advisor, Analytics probe server components, Hitachi Ops Center Automator on Linux, Hitachi Ops Center Analyzer on Linux Hitachi O...

Hitachi Infrastructure Analytics Advisor 安全漏洞

Hitachi Infrastructure Analytics Advisor is an IT operations intelligence platform from Hitachi, Ltd. of Japan, including Hitachi Data Center Analytics. A security vulnerability exists in some Hitachi products. An attacker could exploit the vulnerability to read and write specific files. The...

PT-2023-2012 · Hitachi · Hitachi Infrastructure Analytics Advisor +4

Name of the Vulnerable Software and Affected Versions: Hitachi Automation Director versions 8.2.0-00 through 10.6.1-00 Hitachi Infrastructure Analytics Advisor versions 2.0.0-00 through 4.0.0-00 Hitachi Ops Center Automator versions prior to 10.9.1-00 Hitachi Ops Center Analyzer versions prior to...

PTC ThingWorx Edge

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: PTC Equipment: ThingWorx Edge Vulnerabilities: Improper Validation of Array Index, Integer Overflow or Wraparound 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...

CVE-2023-22860

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the...