6 matches found
PT-2025-53452
Name of the Vulnerable Software and Affected Versions Eaton UPS Companion software affected versions not specified Description A flaw exists in the Eaton UPS Companion software installer related to improper authentication of library files. This could allow an attacker who has access to the softwa...
EUVD-2020-27797
Malware in sbrugna...
PT-2024-36107 · Unknown · Sv100 Companion
Name of the Vulnerable Software and Affected Versions: SV100 Companion versions n/a through 2.0.02 Description: The issue is related to an Incorrect Privilege Assignment, which allows Privilege Escalation. This can lead to unauthorized access and control. Recommendations: For versions n/a through...
CVE-2024-22129
SAP Companion - version 3.1.38, has a URL with parameter that could be vulnerable to XSS attack. The attacker could send a malicious link to a user that would possibly allow an attacker to retrieve the sensitive information and cause minor impact on the integrity of the web application...
CVE-2020-6650
UPS companion software v1.05 & Prior is affected by ‘Eval Injection’ vulnerability. The software does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call e.g.”eval” in “Update Manager” class when software attempts to see if there are updates...
CVE-2020-6650
CVE-2020-6650 affects Eaton UPS companion software (v1.05 and earlier) with an Eval Injection in the Update Manager class. The software does not properly neutralize input before dynamic evaluation (e.g., eval), enabling arbitrary code execution on the host machine. Documented impact is arbitrary ...