WordPress Login Configurator Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

Software Login Configurator Type Plugin Vulnerable versions = 2.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-34175 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID da4f88ec7abf Credits thiennv Required...

CVE-2022-20503

In onCreate of WifiDppConfiguratorActivity.java, there is a possible way for a guest user to add a WiFi configuration due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

PT-2022-14716 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version Android-13 Description: In the onCreate method of WifiDppConfiguratorActivity.java, a missing permission check allows a guest user to add a WiFi configuration. This could lead to local escalation of privilege without needing...

Mitsubishi Electric FA Engineering Software (Update C)

1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: GX Works3, MX OPC UA Module Configurator-R Vulnerabilities: Cleartext Storage of Sensitive Information, Use of Hard-coded Password, Insufficiently Protected Credentials,...

CVE-2022-25164

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z and Mitsubishi Electric MX OPC UA Module Configurator-R versions 1.08J and prior allows a remote unauthenticated attacker to disclose sensitive information. As a result,...

CVE-2022-25164

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z and Mitsubishi Electric MX OPC UA Module Configurator-R versions 1.08J and prior allows a remote unauthenticated attacker to disclose sensitive information. As a result,...

CVE-2022-25164: Cleartext Storage of Sensitive Information

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z and Mitsubishi Electric MX OPC UA Module Configurator-R versions 1.08J and prior allows a remote unauthenticated attacker to disclose sensitive information. As a result,...

CVE-2022-25999

Uncontrolled search path element in the IntelR EnpirionR Digital Power Configurator GUI software, all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Uncontrolled search path element in the IntelR EnpirionR Digital Power Configurator GUI software, all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-25999

Uncontrolled search path element in the IntelR EnpirionR Digital Power Configurator GUI software, all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-25999

Uncontrolled search path element in the IntelR EnpirionR Digital Power Configurator GUI software, all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-25999

The CVE-2022-25999 issue affects Intel Enpirion Digital Power Configurator GUI software (all versions). The root cause is an uncontrolled search path element in the GUI, which could allow an authenticated local user to escalate privileges. In-scope details from Intel’s advisory (INTEL-SA-00672) c...

PT-2022-17628 · Intel · Intel Enpirion Digital Power Configurator Gui

Name of the Vulnerable Software and Affected Versions: IntelR EnpirionR Digital Power Configurator GUI software affected versions not specified Description: The issue is related to an uncontrolled search path element in the software, which may allow an authenticated user to potentially enable...

CVE-2022-25999: Uncontrolled Search Path Element

Uncontrolled search path element in the IntelR EnpirionR Digital Power Configurator GUI software, all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Enpirion Digital Power Configurator 代码问题漏洞

Intel Enpirion Digital Power Configurator is digital power configuration software from Intel Corporation USA. A security vulnerability exists in Intel Enpirion Digital Power Configurator that originates from an uncontrolled search path element. An attacker could exploit the vulnerability to eleva...

Intel® Enpirion® Digital Power Configurator GUI Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00672.html...

Teradici PCoIP Zero Clients 信任管理问题漏洞

Teradici PCoIP Zero Clients is an ultra-secure endpoint from Teradici Canada. It uses a highly integrated, specialized processor to transmit pixels, not data, to the user's desktop. A trust management issue vulnerability exists in Teradici PCoIP Zero Clients Firmware version 22.01.5, 22.04.1 and...

CVE-2022-30272

The Motorola ACE1000 RTU through 2022-05-02 mishandles firmware integrity. It utilizes either the STS software suite or ACE1000 Easy Configurator for performing firmware updates. In case of the Easy Configurator, firmware updates are performed through access to the Web UI where file system, kerne...

Design/Logic Flaw

The Motorola ACE1000 RTU through 2022-05-02 mishandles firmware integrity. It utilizes either the STS software suite or ACE1000 Easy Configurator for performing firmware updates. In case of the Easy Configurator, firmware updates are performed through access to the Web UI where file system, kerne...

CVE-2022-30272

The Motorola ACE1000 RTU through 2022-05-02 mishandles firmware integrity. It utilizes either the STS software suite or ACE1000 Easy Configurator for performing firmware updates. In case of the Easy Configurator, firmware updates are performed through access to the Web UI where file system, kerne...