Lucene search
K

6 matches found

Positive Technologies
Positive Technologies
added 2025/12/26 12:0 a.m.2 views

PT-2025-53452

Name of the Vulnerable Software and Affected Versions Eaton UPS Companion software affected versions not specified Description A flaw exists in the Eaton UPS Companion software installer related to improper authentication of library files. This could allow an attacker who has access to the softwa...

8.6CVSS7.3AI score0.00006EPSS
Exploits0References12
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-27797

Malware in sbrugna...

8.8CVSS8.6AI score0.04848EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/12/16 12:0 a.m.2 views

PT-2024-36107 · Unknown · Sv100 Companion

Name of the Vulnerable Software and Affected Versions: SV100 Companion versions n/a through 2.0.02 Description: The issue is related to an Incorrect Privilege Assignment, which allows Privilege Escalation. This can lead to unauthorized access and control. Recommendations: For versions n/a through...

9.8CVSS6.9AI score0.00238EPSS
Exploits0References6
OSV
OSV
added 2024/02/13 4:15 a.m.0 views

CVE-2024-22129

SAP Companion - version 3.1.38, has a URL with parameter that could be vulnerable to XSS attack. The attacker could send a malicious link to a user that would possibly allow an attacker to retrieve the sensitive information and cause minor impact on the integrity of the web application...

7.6CVSS5.8AI score0.0038EPSS
Exploits0References2
OSV
OSV
added 2020/03/23 2:15 p.m.0 views

CVE-2020-6650

UPS companion software v1.05 & Prior is affected by ‘Eval Injection’ vulnerability. The software does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call e.g.”eval” in “Update Manager” class when software attempts to see if there are updates...

8.8CVSS6.3AI score
Exploits0References1
CVE
CVE
added 2020/03/23 1:25 p.m.45 views

CVE-2020-6650

CVE-2020-6650 affects Eaton UPS companion software (v1.05 and earlier) with an Eval Injection in the Update Manager class. The software does not properly neutralize input before dynamic evaluation (e.g., eval), enabling arbitrary code execution on the host machine. Documented impact is arbitrary ...

8.8CVSS8.8AI score0.04848EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder