CVE-2022-40631

CVE-2022-40631 affects Siemens SCALANCE X-200/X-200IRT device families (including X200-4P, X201-3P/IRT PRO, X202-2IRT/IRT PRO, X204-2/X204IRT, X206-1, X208, X212-2, X216, X224, and XF/XIR variants) with all affected versions prior to specified fixed versions. The root cause is improper neutraliza...

CVE-2022-41204

An attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205, login page through a manipulated URL. They can inject code that allows them to redirect submissions from the affected login form to their own server. This allows them to steal credentials and hijack...

CVE-2022-41204

CVE-2022-41204 affects SAP Commerce versions 1905–2205 and targets the login page. A manipulated URL can inject client-side code to change the login form submission, redirecting data to an attacker-controlled server. This enables credential theft and account hijacking, impacting confidentiality, ...

SAP Commerce 输入验证错误漏洞

SAP Commerce is a set of cloud-based e-commerce platform from Germany's SAP. This product supports sales management, marketing management, order management and operations management. An input validation error vulnerability exists in SAP Commerce versions 1905, 2005, 2105, 2011, and 2205, which ca...

Siemens SICAM 授权问题漏洞

Siemens SICAM is an integrated substation automation system from Siemens Germany. An access control error vulnerability exists in several Siemens products. The vulnerability stems from the fact that the affected device accepts a user-defined session cookie and does not update the session cookie...

CVE-2022-40631

A vulnerability has been identified in SCALANCE X200-4P IRT All versions V5.5.0, SCALANCE X201-3P IRT All versions V5.5.0, SCALANCE X201-3P IRT PRO All versions V5.5.0, SCALANCE X202-2IRT All versions V5.5.0, SCALANCE X202-2P IRT All versions V5.5.0, SCALANCE X202-2P IRT PRO All versions V5.5.0,...

Siemens Scalance X-200 跨站脚本漏洞

The Siemens Scalance X-200 is an industrial-grade Ethernet switch from Siemens Germany. A cross-site scripting vulnerability exists in SCALANCE Switches, which stems from the presence of a cross-site scripting vulnerability that could lead to session hijacking if exploited by an attacker. The...

PT-2022-25429 · Siemens · Scalance Xf204 +21

Name of the Vulnerable Software and Affected Versions: SCALANCE X200-4P IRT versions prior to V5.5.0 SCALANCE X201-3P IRT versions prior to V5.5.0 SCALANCE X201-3P IRT PRO versions prior to V5.5.0 SCALANCE X202-2IRT versions prior to V5.5.0 SCALANCE X202-2P IRT versions prior to V5.5.0 SCALANCE...

MapTool v1.11.5 - Cross Site Scripting Vulnerabilities

Document Title: =============== MapTool v1.11.5 - Cross Site Scripting Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2319 Release Date: ============= 2022-10-10 Vulnerability Laboratory ID VL-ID: ==================================== 23...

CVE-2022-39859

Implicit intent hijacking vulnerability in UPHelper library prior to version 3.0.12 allows attackers to access sensitive information via implicit intent...

CVE-2022-39859

Implicit intent hijacking vulnerability in UPHelper library prior to version 3.0.12 allows attackers to access sensitive information via implicit intent...

CVE-2022-39859

Implicit intent hijacking vulnerability in UPHelper library prior to version 3.0.12 allows attackers to access sensitive information via implicit intent...

Information disclosure

Implicit intent hijacking vulnerability in UPHelper library prior to version 3.0.12 allows attackers to access sensitive information via implicit intent...

CVE-2022-39859

CVE-2022-39859 affects the UPHelper library prior to version 3.0.12, where an implicit intent hijacking vulnerability can allow an attacker to access sensitive information via implicit intents. The issue is documented across multiple sources (e.g., PT-2022-25049) indicating the vulnerability lies...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 3.0.12, which stems from an implicit intent hijacking vulnerability in the UPHelper...

CVE-2022-39859

Implicit intent hijacking vulnerability in UPHelper library prior to version 3.0.12 allows attackers to access sensitive information via implicit intent...

CVE-2022-22503

IBM Robotic Process Automation 21.0.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks agains...

CVE-2022-22503

IBM Robotic Process Automation 21.0.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks agains...

Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Event Streams

Summary There are a number of vulnerabilities in Node.js that is used by IBM Event Streams. Vulnerability Details CVEID:CVE-2022-32222 DESCRIPTION: Node.js could allow a remote attacker to bypass security restrictions. By attempting to read openssl.cnf from /home/iojs/build/ upon startup, an...

Notepad++ DLL Hijacking Vulnerability (Sep 2022)

Notepad++ is prone to a DLL hijacking vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:notepad-plus-plus:notepad++"...