Advantech WebAccess HMI Designer Cross-Site Scripting Vulnerability

Advantech WebAccess HMI Designer is an integrated HMI development tool from Advantech, Taiwan, China. The product is equipped with features such as data transfer, menu editing and text editing. A cross-site scripting vulnerability exists in Advantech WebAccess HMI Designer versions prior to...

CVE-2021-42706

This vulnerability could allow an attacker to disclose information and execute arbitrary code on affected installations of WebAccess/MHI Designer...

CVE-2021-42706

This vulnerability could allow an attacker to disclose information and execute arbitrary code on affected installations of WebAccess/MHI Designer...

Design/Logic Flaw

This vulnerability could allow an attacker to disclose information and execute arbitrary code on affected installations of WebAccess/MHI Designer...

CVE-2021-42706

Summary: CVE-2021-42706 affects Advantech WebAccess HMI Designer (WebAccess/MHI Designer). The connected advisory details a Use After Free vulnerability (CWE-416) in WebAccess/MHI Designer, leading to information disclosure and arbitrary code execution via memory corruption when handling crafted ...

CVE-2021-42706 AzeoTech DAQFactory

This vulnerability could allow an attacker to disclose information and execute arbitrary code on affected installations of WebAccess/MHI Designer...

CVE-2021-42706: Use After Free

This vulnerability could allow an attacker to disclose information and execute arbitrary code on affected installations of WebAccess/MHI Designer...

PT-2021-23665

Name of the Vulnerable Software and Affected Versions WebAccess/MHI Designer affected versions not specified Description This issue could allow an attacker to disclose information and execute arbitrary code on affected installations. Recommendations At the moment, there is no information about a...

Advantech WebAccess HMI Designer 跨站脚本漏洞

Advantech WebAccess HMI Designer is an integrated HMI development tool from Advantech, Taiwan, China. The product is equipped with features such as data transfer, menu editing and text editing. A cross-site scripting vulnerability exists in Advantech WebAccess HMI Designer versions prior to...

PT-2021-23664

Name of the Vulnerable Software and Affected Versions webaccess hmi designer affected versions not specified Description This issue could allow an attacker to send malicious Javascript code, resulting in the hijacking of the user’s cookie/session tokens, redirecting the user to a malicious webpag...

Advantech WebAccess HMI Designer 资源管理错误漏洞

Advantech WebAccess HMI Designer is an integrated HMI development tool from Advantech, Taiwan, China. The product is equipped with features such as data transfer, menu editing and text editing. A resource management error vulnerability exists in Advantech WebAccess HMI Designer versions prior to...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), brainhance (0.0.1) +30 more potentially affected by CVE-2021-41222 via tensorflow-gpu (>=2.0.0, <=2.4.2)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =0.0.4, =1.1.1, =1.1.0, =0.1.1, =0.1.0, =0.2.0, =0.6.4, =0.8.2 - maupassant 0.1.1 - mlreflect 0.16.0 - monk-cuda100 0.0.1 and more Source cves: CVE-2021-41222 Source advisory: GHSA-CPF4-WX82-GXP6...

CVE-2021-42706

This vulnerability could allow an attacker to disclose information and execute arbitrary code on affected installations of WebAccess/MHI Designer...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), brainhance (0.0.1) +30 more potentially affected by CVE-2021-41199 via tensorflow-gpu (>=2.0.0, <=2.4.2)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =0.0.4, =1.1.1, =1.1.0, =0.1.1, =0.1.0, =0.2.0, =0.6.4, =0.8.2 - maupassant 0.1.1 - mlreflect 0.16.0 - monk-cuda100 0.0.1 and more Source cves: CVE-2021-41199 Source advisory: OSV:PYSEC-2021-807...

CVE-2021-29737

IBM InfoSphere Data Flow Designer Engine IBM InfoSphere Information Server 11.7 component has improper validation of the REST API server certificate. IBM X-Force ID: 201301...

CVE-2021-29738

IBM InfoSphere Data Flow Designer IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force...

CVE-2021-29737

IBM InfoSphere Data Flow Designer Engine IBM InfoSphere Information Server 11.7 component has improper validation of the REST API server certificate. IBM X-Force ID: 201301...

CVE-2021-29738

IBM InfoSphere Data Flow Designer IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force...

Input validation

IBM InfoSphere Data Flow Designer Engine IBM InfoSphere Information Server 11.7 component has improper validation of the REST API server certificate. IBM X-Force ID: 201301...

Server side request forgery (ssrf)

IBM InfoSphere Data Flow Designer IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force...