EUVD-2022-34058

Malicious code in bioql PyPI...

CVE-2022-29732

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to contain a cross-site scripting XSS vulnerability via the Username parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2022-29733

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive information in cleartext. This vulnerability allows attackers to intercept HTTP Cookie authentication credentials via a man-in-the-middle attack...

Cross site scripting

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to contain a cross-site scripting XSS vulnerability via the Username parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

Cross site request forgery (csrf)

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 allows attackers to execute arbitrary commands via a crafted HTTP request...

CVE-2022-29735

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 allows attackers to execute arbitrary commands via a crafted HTTP request...

CVE-2022-29732

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to contain a cross-site scripting XSS vulnerability via the Username parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

PT-2022-19806

Name of the Vulnerable Software and Affected Versions Delta Controls enteliTOUCH versions 3.33.4005, 3.40.3706, 3.40.3935 Description The issue allows attackers to intercept HTTP Cookie authentication credentials via a man-in-the-middle attack because sensitive information is transmitted and stor...

PT-2022-19808

Name of the Vulnerable Software and Affected Versions Delta Controls enteliTOUCH versions 3.33.4005, 3.40.3706, 3.40.3935 Description The issue allows attackers to execute arbitrary commands via a crafted HTTP request. Recommendations For versions 3.33.4005, 3.40.3706, and 3.40.3935, at the momen...

CVE-2022-29735: Cross-Site Request Forgery (CSRF)

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 allows attackers to execute arbitrary commands via a crafted HTTP request...

CVE-2022-29732: Improper Neutralization of Input During Web Page Generation

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to contain a cross-site scripting XSS vulnerability via the Username parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

PT-2022-19805

Name of the Vulnerable Software and Affected Versions Delta Controls enteliTOUCH versions 3.33.4005, 3.40.3706, 3.40.3935 Description A cross-site scripting XSS issue was found, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload, specifically through the Username...

CVE-2022-29733: Cleartext Transmission of Sensitive Information

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive information in cleartext. This vulnerability allows attackers to intercept HTTP Cookie authentication credentials via a man-in-the-middle attack...