21090 matches found
CVE-2021-42794
An issue was discovered in AVEVA Edge formerly InduSoft Web Studio versions R2020 and prior. The application allows a client to provide a malicious connection string that could allow an adversary to port scan the LAN, depending on the hosts' responses...
CVE-2021-42796
An issue was discovered in ExecuteCommand in AVEVA Edge formerly InduSoft Web Studio versions R2020 and prior that allows unauthenticated arbitrary commands to be executed...
CVE-2021-42797
Path traversal vulnerability in AVEVA Edge formerly InduSoft Web Studio versions R2020 and prior allows an unauthenticated user to steal the Windows access token of the user account configured for accessing external DB resources...
CVE-2021-42797
Path traversal vulnerability in AVEVA Edge formerly InduSoft Web Studio versions R2020 and prior allows an unauthenticated user to steal the Windows access token of the user account configured for accessing external DB resources...
Path traversal
Path traversal vulnerability in AVEVA Edge formerly InduSoft Web Studio versions R2020 and prior allows an unauthenticated user to steal the Windows access token of the user account configured for accessing external DB resources...
Design/Logic Flaw
An issue was discovered in AVEVA Edge formerly InduSoft Web Studio versions R2020 and prior. The application allows a client to provide a malicious connection string that could allow an adversary to port scan the LAN, depending on the hosts' responses...
Design/Logic Flaw
An issue was discovered in ExecuteCommand in AVEVA Edge formerly InduSoft Web Studio versions R2020 and prior that allows unauthenticated arbitrary commands to be executed...
CVE-2021-42794
An issue was discovered in AVEVA Edge formerly InduSoft Web Studio versions R2020 and prior. The application allows a client to provide a malicious connection string that could allow an adversary to port scan the LAN, depending on the hosts' responses...
CVE-2021-42794
AVEVA Edge (formerly InduSoft Web Studio)
CVE-2021-42796
CVE-2021-42796 affects AVEVA Edge (formerly InduSoft Web Studio) pre-2020 R2. The vulnerability is in the ExecuteCommand() function (stadosvr.exe) and allows unauthenticated arbitrary commands to execute, via improper access control. The issue is documented with a base CVSS v3.1 score of 9.8 (Net...
CVE-2021-42797
CVE-2021-42797 — AVEVA Edge (formerly InduSoft Web Studio) : Path traversal in AVEVA Edge versions R2020 and prior allows an unauthenticated user to disclose the Windows access token used for external DB resources. Affected product: AVEVA Edge; vulnerable component(s): runtime/installation flow t...
CVE-2021-42796
An issue was discovered in ExecuteCommand in AVEVA Edge formerly InduSoft Web Studio versions R2020 and prior that allows unauthenticated arbitrary commands to be executed...
CVE-2021-42796
An issue was discovered in ExecuteCommand in AVEVA Edge formerly InduSoft Web Studio versions R2020 and prior that allows unauthenticated arbitrary commands to be executed...
CVE-2021-42797
Path traversal vulnerability in AVEVA Edge formerly InduSoft Web Studio versions R2020 and prior allows an unauthenticated user to steal the Windows access token of the user account configured for accessing external DB resources...
CVE-2023-36878
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...
CVE-2023-36878
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...
CVE-2023-36878
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...
Security feature bypass
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...
CVE-2023-36878
Microsoft Edge (Chromium-based) Security Feature Bypass (CVE-2023-36878) is documented in Edge-related advisories. Connected sources describe a bypass enabling security restrictions to be bypassed by loading a malicious page/file, attributed to a lack of blocking tags in Edge. Affected product: M...