1208 matches found
PT-2023-28693
Name of the Vulnerable Software and Affected Versions Dell Rugged Control Center versions prior to 4.7 Description The issue concerns insufficient protection for the Policy folder, allowing a local malicious standard user to potentially modify the content of the policy file. This could lead to...
Exploit for Code Injection in Kardex Kardex_Control_Center
CVE-2023-22855 This vulnerability was discovered and disclose...
Security Bulletin: WebSphere denial-of-service vulnerability affects IBM Sterling Control Center (CVE-2023-24998)
Summary Apache Commons FileUpload and Tomcat are vulnerable to a denial of service, caused by not limit the number of request parts to be processed in the file upload function. By sending a specially-crafted request with series of uploads, a remote attacker could exploit this vulnerability to cau...
CVE-2023-29707
Cross Site Scripting XSS vulnerability in GBCOM LAC WEB Control Center version lac-1.3.x, allows attackers to create an arbitrary device...
CVE-2023-29707
Cross Site Scripting XSS vulnerability in GBCOM LAC WEB Control Center version lac-1.3.x, allows attackers to create an arbitrary device...
Cross site scripting
Cross Site Scripting XSS vulnerability in GBCOM LAC WEB Control Center version lac-1.3.x, allows attackers to create an arbitrary device...
GBCOM LAC WEB Control Center 跨站脚本漏洞
GBCOM LAC WEB Control Center is a WEB Control Center from China Huanchuang GBCOM. A security vulnerability exists in the GBCOM LAC WEB Control Center lac-1.3.x version that could allow an attacker to create arbitrary devices...
CVE-2023-29707
CVE-2023-29707 concerns a cross-site scripting (XSS) vulnerability in the GBCOM LAC WEB Control Center, version lac-1.3.x. The available sources in the connected documents indicate that an attacker could leverage this flaw to create an arbitrary device. The CVE entry notes a CVSS v3.1 base score ...
CVE-2023-29707
Cross Site Scripting XSS vulnerability in GBCOM LAC WEB Control Center version lac-1.3.x, allows attackers to create an arbitrary device...
PT-2023-22363 · Gbcom · Gbcom Lac Web Control Center
Name of the Vulnerable Software and Affected Versions: GBCOM LAC WEB Control Center version lac-1.3.x Description: The issue allows attackers to create an arbitrary device through a Cross Site Scripting XSS vulnerability. Recommendations: For GBCOM LAC WEB Control Center version lac-1.3.x, consid...
CVE-2023-29707: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in GBCOM LAC WEB Control Center version lac-1.3.x, allows attackers to create an arbitrary device...
Security Bulletin: IBM Sterling Control Center is vulnerable to denial of service attack due to Java SE (CVE-2022-21426)
Summary IBM Sterling Control Center uses Java SE. Vulnerability Details CVEID:CVE-2022-21426 DESCRIPTION: An unspecified vulnerability in Java SE related to the JAXP component could allow an unauthenticated attacker to cause a denial of service resulting in a low availability impact using unknown...
Security Bulletin: IBM Sterling Control Center is vulnerable to denial of service due to Java SE (CVE-2023-21830, CVE-2023-21843)
Summary IBM Sterling Control Center uses Java SE. Vulnerability Details CVEID:CVE-2023-21830 DESCRIPTION: An unspecified vulnerability in Java SE related to the Serialization component could allow a remote attacker to cause a denial of service resulting in a low integrity impact using unknown...
CVE-2023-28971
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the timescaledb feature of Juniper Networks Paragon Active Assurance PAA Formerly Netrounds allows an attacker to bypass existing firewall rules and limitations used to restrict internal communcations. The Tes...
NewStart CGSL CORE 5.05 / MAIN 5.05 : control-center Vulnerability (NS-SA-2023-0018)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has control-center packages installed that are affected by a vulnerability: - It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical...
Security Bulletin: IBM Sterling Control Center is vulnerable to denial of service due to Apache commons-fileupload (CVE-2023-24998)
Summary IBM Sterling Control Center uses Apache commons-fileupload which is vulnerable to a denial of service, caused by not limiting the number of request parts in the file upload function. Vulnerability Details CVEID:CVE-2023-24998 DESCRIPTION: Apache Commons FileUpload and Tomcat are vulnerabl...
Security Bulletin: IBM Sterling Control Center is vulnerable to denial of service due to Node.js Angular (CVE-2022-25844)
Summary IBM Sterling Control Center uses Node.js Angular which is vulnerable to a denial of service, caused by a regular expression denial of service. Vulnerability Details CVEID:CVE-2022-25844 DESCRIPTION: Node.js Angular module is vulnerable to a denial of service, caused by a regular expressio...
The vulnerability of the Path.Combine method in the modular software solution for managing material flows and inventory control processes in the Kardex Mlog Control Center (MCC) allows a perpetrator to execute arbitrary code.
The vulnerability of the Path.Combine method in the modular software solution for managing material flows and inventory control processes in the Kardex Mlog Control Center MCC is related to improper code generation. Exploiting this vulnerability allows an attacker operating remotely to execute...
The software for setting up Dell Rugged Control Center is vulnerable due to insufficient verification of input data, allowing attackers to exploit this vulnerability to gain increased privileges.
The software for configuring Dell Rugged Control Centers is vulnerable due to insufficient verification of input data. Exploiting this vulnerability can allow attackers to gain increased privileges...
