net.mingsoft:ms-mdiy (1.0.29), net.mingsoft:store-client (5.2.1) potentially affected by CVE-2021-46062 via net.mingsoft:ms-basic (1.0.38)

net.mingsoft:ms-basic MAVEN version 1.0.38 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mdiy 1.0.29 - net.mingsoft:store-client 5.2.1 Source cves: CVE-2021-46062 Source advisory:...

net.mingsoft:ms-ad (1.0.0), net.mingsoft:ms-clean (>=1.0.0, <=1.0.1) +16 more potentially affected by CVE-2021-46062 via net.mingsoft:ms-basic (1.0.20)

net.mingsoft:ms-basic MAVEN version 1.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-ad 1.0.0 - net.mingsoft:ms-clean =1.0.0, =1.0.2, =1.0.1, =1.0.8, =1.0.9 - net.mingsoft:ms-msso-clien...

net.mingsoft:ms-mattention (>=2.1.7, <=2.1.15), net.mingsoft:ms-mcms (>=5.2.1, <=5.2.10) +7 more potentially affected by CVE-2021-46062 via net.mingsoft:ms-basic (>=2.1.0, <=2.1.15)

net.mingsoft:ms-basic MAVEN version =2.1.0, =2.1.7, =5.2.1, =2.1.5, =2.1.0, =2.1.7, =2.1.5, =2.1.5, =2.1.0, =2.1.15 Source cves: CVE-2021-46062 Source advisory: OSV:GHSA-RPVR-MW7R-25XX...

net.mingsoft:ms-mattention (>=2.1.7, <=2.1.15), net.mingsoft:ms-mcms (>=5.2.1, <=5.2.10) +7 more potentially affected by CVE-2021-46062 via net.mingsoft:ms-basic (>=2.1.0, <=2.1.15)

net.mingsoft:ms-basic MAVEN version =2.1.0, =2.1.7, =5.2.1, =2.1.5, =2.1.0, =2.1.7, =2.1.5, =2.1.5, =2.1.0, =2.1.15 Source cves: CVE-2021-46062 Source advisory: GHSA-RPVR-MW7R-25XX...

MCMS Arbitrary File Deletion vulnerability

net.mingsoft:ms-basic is used for plugin management for applications built with Maven for the Mingfei Content Management System MCMS. ms-basic before 2.1.16 is vulnerable to arbitrary file deletion using POST requests to /template/writeFileContent via the oldFileName parameter. MCMS before 5.2.11...

net.mingsoft:ms-mdiy (1.0.18), net.mingsoft:ms-mpeople (1.0.21) potentially affected by CVE-2021-46062 via net.mingsoft:ms-basic (1.0.27)

net.mingsoft:ms-basic MAVEN version 1.0.27 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mdiy 1.0.18 - net.mingsoft:ms-mpeople 1.0.21 Source cves: CVE-2021-46062 Source advisory:...

net.mingsoft:ms-ad (1.0.0), net.mingsoft:ms-clean (>=1.0.0, <=1.0.1) +23 more potentially affected by CVE-2021-46062 via net.mingsoft:ms-basic (>=1.0.5, <=2.1.15)

net.mingsoft:ms-basic MAVEN version =1.0.5, =1.0.0, =1.0.4, =1.0.0, =4.6.3-snapshots, =1.0.0, =1.0.4, =1.0.0, =1.0.1, =1.0.1, =1.0.2 and more Source cves: CVE-2021-46062 Source advisory: MEND:CVE-2021-46062...

com.github.seaframework:sea-core-basic (1.0.0), com.github.seaframework:sea-monitor (>=1.0.0, <=1.3.1) +5 more potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.5.17)

cn.hutool:hutool-http MAVEN version 4.5.17 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - com.github.seaframework:sea-core-basic 1.0.0 - com.github.seaframework:sea-monitor =1.0.0, =1.0.0, =1.0.0, =1.0.0,...

CVE-2021-46265

Tenda AC Series Router AC11V02.03.01.104CN was discovered to contain a stack buffer overflow in the wanBasicCfg module. This vulnerability allows attackers to cause a Denial of Service DoS via crafted overflow data...

CVE-2021-46265

Tenda AC Series Router AC11V02.03.01.104CN was discovered to contain a stack buffer overflow in the wanBasicCfg module. This vulnerability allows attackers to cause a Denial of Service DoS via crafted overflow data...

Tenda AC11 Buffer Error Vulnerability

Tenda AC11 is a router from Tenda, China. wanBasicCfg module of Tenda AC Series Router AC11V02.03.01.104CN is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to cause a denial of service via specially crafted overflow data...

CVE-2021-22817

A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation directory leading to local privilege escalation. Affected Product: Harmony/Magelis iPC Series All Versions, Vijeo Designer All Versions prior to V6.2 SP11 Multiple HotFix 4,...

CVE-2021-22817

CVE-2021-22817 affects Schneider Electric Harmony/Magelis iPC Series, Vijeo Designer (pre V6.2 SP11 HotFix 4), and Vijeo Designer Basic (pre V1.2.1). The root cause is a CWE-276 Incorrect Default Permissions that can allow unauthorized access to the base installation directory, enabling local pri...

PT-2022-9287

Name of the Vulnerable Software and Affected Versions Harmony/Magelis iPC Series All Versions Vijeo Designer versions prior to V6.2 SP11 Multiple HotFix 4 Vijeo Designer Basic versions prior to V1.2.1 Description A vulnerability exists that could cause unauthorized access to the base installation...

Schneider Electric’s multiple products have security vulnerabilities

Schneider Electric Vijeo Designer Basic and Schneider Electric Vijeo Designer are both a suite of programming and design software for HMIs Human Machine Interfaces from Schneider Electric, France. A security vulnerability exists in a number of Schneider Electric products, which can be exploited b...

CVE-2021-22817: Incorrect Default Permissions

A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation directory leading to local privilege escalation. Affected Product: Harmony/Magelis iPC Series All Versions, Vijeo Designer All Versions prior to V6.2 SP11 Multiple HotFix 4,...

Schneider Electric Modicon M221 PLCs and SoMachine Basic Use of Hard-Coded Cryptographic Key (CVE-2017-7574)

Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded- key vulnerability. The Project Protection feature is used to prevent unauthorized users from opening an XML protected project file, by prompting the user for a password. This XML...

Schneider Electric Modicon M221 PLCs and SoMachine Basic Protection Mechanism Failure (CVE-2017-7575)

Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection password via a \x00\x01\x00\x00\x00\x05\x01\x5a\x00\x03\x00 request to the Modbus port 502/tcp. Subsequently the application may be arbitrarily downloaded, modified, and uploaded...

CVE-2022-24145

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function formWifiBasicSet. This vulnerability allows attackers to cause a Denial of Service DoS via the security and security5g parameters...

CVE-2022-24145

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function formWifiBasicSet. This vulnerability allows attackers to cause a Denial of Service DoS via the security and security5g parameters...