Cesanta MJS code issue vulnerabilities

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C/C++ interoperability. A security vulnerability exists in Cesanta MJS mJS: Restricted JavaScript engine...

Fedora: Security Advisory for ntfs-3g-system-compression (FEDORA-2022-1176b501f0)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Contec SolarView Compact Remote Code Execution Vulnerability

Contec SolarView Compact is an application from Contec Japan, Inc. Contec SolarView Compact v6.0 contains a remote code execution vulnerability that stems from a failure of SolarImage.php to properly filter special elements of the construction snippet. An attacker could exploit this vulnerability...

CVE-2022-31373

SolarView Compact v6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component SolarAiConf.php...

CVE-2022-31374

An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file...

CVE-2022-31373

SolarView Compact v6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component SolarAiConf.php...

CVE-2022-31374

An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file...

CVE-2022-31374

An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file...

CVE-2022-33139

A vulnerability has been identified in Cerberus DMS All versions, Desigo CC All versions, Desigo CC Compact All versions, SIMATIC WinCC OA V3.16 All versions in default configuration, SIMATIC WinCC OA V3.17 All versions in non-default configuration, SIMATIC WinCC OA V3.18 All versions in...

CVE-2022-33139

A vulnerability has been identified in Cerberus DMS All versions, Desigo CC All versions, Desigo CC Compact All versions, SIMATIC WinCC OA V3.16 All versions in default configuration, SIMATIC WinCC OA V3.17 All versions in non-default configuration, SIMATIC WinCC OA V3.18 All versions in...

CVE-2022-31373

SolarView Compact v6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component SolarAiConf.php...

Privilege escalation

An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file...

Cross site scripting

SolarView Compact v6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component SolarAiConf.php...

CVE-2022-31373

SolarView Compact v6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component SolarAiConf.php...

CVE-2022-31374

An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file...

CVE-2022-31373

SolarView Compact (v6.0/6.00) contains a cross-site scripting vulnerability in the Solar_AiConf.php component. An attacker can inject script that runs in the victim’s browser, potentially leading to session hijacking or credential theft. Root cause described across sources is insufficient input v...

CVE-2022-31374

The Contec SolarView Compact v6.0 application is susceptible to a Remote Code Execution (RCE) vulnerability. The root cause is a failure in Solar_Image.php to properly filter special elements within the construction snippet, which allows an attacker to perform an arbitrary file upload at the /ima...

Contec SolarView Compact code-related vulnerabilities

Contec SolarView Compact is an application from Contec Japan, Inc. Contec SolarView Compact v6.0 contains a remote code execution vulnerability that stems from a failure of SolarImage.php to properly filter special elements of the construction snippet. An attacker could exploit this vulnerability...

PT-2022-20723

Name of the Vulnerable Software and Affected Versions SolarView Compact version 6.0 Description The issue allows attackers to execute arbitrary code via a crafted php file, exploiting an arbitrary file upload vulnerability in the /images/background/1.php endpoint. Recommendations For SolarView...

CVE-2022-33139: Use of Client-Side Authentication

A vulnerability has been identified in Cerberus DMS All versions, Desigo CC All versions, Desigo CC Compact All versions, SIMATIC WinCC OA V3.16 All versions in default configuration, SIMATIC WinCC OA V3.17 All versions in non-default configuration, SIMATIC WinCC OA V3.18 All versions in...