CVE-2022-26858

Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls...

CVE-2022-26858

Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls...

Cognex 3D-A1000 Dimensioning System

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely, low attack complexity Vendor: Cognex Equipment: 3D-A1000 Dimensioning System Vulnerabilities: Missing Authentication for Critical Function, Improper Output Neutralization for Logs, Client-side Enforcement of Server-side Security 2...

PT-2022-4702 · Cognex · Cognex 3D-A1000 Dimensioning System

Name of the Vulnerable Software and Affected Versions: Cognex 3D-A1000 Dimensioning System versions 1.0.3 3354 and prior Description: The issue is related to the implementation of security functions on the client-side of the Cognex 3D-A1000 Dimensioning System. This could allow a remote attacker ...

CVE-2022-1525: Client-Side Enforcement of Server-Side Security

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 3354 and prior is vulnerable to CWE-602: Client-Side Enforcement of Server-Side Security, which could allow attackers to bypass web access controls by inspecting and modifying the source code of password protected web elements...

CVE-2022-26858: Improper Authentication

Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls...

What Is Your Security Team Profile? Prevention, Detection, or Risk Management

Not all security teams are born equal. Each organization has a different objective. In cybersecurity, adopting a proactive approach is not just a buzzword. It actually is what makes the difference between staying behind attackers and getting ahead of them. And the solutions to do that do exist!...

PT-2022-7218

Name of the Vulnerable Software and Affected Versions Honeywell Saia PG5 Controls Suite affected versions not specified Description The issue is related to the parsing of CAB files, where the lack of proper validation of a user-supplied path prior to using it in file operations can be exploited...

PT-2022-7221

Name of the Vulnerable Software and Affected Versions Honeywell Saia PG5 Controls Suite affected versions not specified Description This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, where the target must visit a malicious...

PT-2022-7223

Name of the Vulnerable Software and Affected Versions Honeywell Saia PG5 Controls Suite affected versions not specified Description This issue allows remote attackers to disclose sensitive information on affected installations. The flaw exists within the parsing of XML files due to the improper...

PT-2022-7222

Name of the Vulnerable Software and Affected Versions Honeywell Saia PG5 Controls Suite affected versions not specified Description The issue is related to the improper restriction of XML External Entity XXE references in the parsing of XML files. This allows remote attackers to disclose sensitiv...

PT-2022-7219

Name of the Vulnerable Software and Affected Versions Honeywell Saia PG5 Controls Suite affected versions not specified Description This issue allows remote attackers to disclose sensitive information on affected installations. The specific flaw exists within the parsing of XML files due to the...

PT-2022-7220

Name of the Vulnerable Software and Affected Versions Honeywell Saia PG5 Controls Suite affected versions not specified Description The issue is related to the improper restriction of XML External Entity XXE references in the parsing of XML files. This allows remote attackers to disclose sensitiv...

PT-2022-7217

Name of the Vulnerable Software and Affected Versions Honeywell Saia PG5 Controls Suite affected versions not specified Description This issue allows remote attackers to execute arbitrary code on affected installations. The specific flaw exists within the parsing of ZIP files, resulting from the...

CVE-2022-2894

Measuresoft ScadaPro Server All Versions uses unmaintained ActiveX controls. The controls may allow seven untrusted pointer deference instances while processing a specific project file...

CVE-2022-2895

Measuresoft ScadaPro Server All Versions uses unmaintained ActiveX controls. These controls may allow two stack-based buffer overflow instances while processing a specific project file...

Stack overflow

Measuresoft ScadaPro Server All Versions uses unmaintained ActiveX controls. These controls may allow two stack-based buffer overflow instances while processing a specific project file...

CVE-2022-2894 Measuresoft ScadaPro Server Untrusted Pointer Dereference

Measuresoft ScadaPro Server All Versions uses unmaintained ActiveX controls. The controls may allow seven untrusted pointer deference instances while processing a specific project file...

CVE-2022-2894

CVE-2022-2894 – Measuresoft ScadaPro Server is associated with unmaintained ActiveX controls that may permit seven untrusted pointer dereference instances when processing a specific project file. The affected product is Measuresoft ScadaPro Server (and Client per related advisories) across all ve...

CVE-2022-2895 Measuresoft ScadaPro Server Stack-based Buffer Overflow

Measuresoft ScadaPro Server All Versions uses unmaintained ActiveX controls. These controls may allow two stack-based buffer overflow instances while processing a specific project file...