2111 matches found
CVE-2020-15006
Bludit 3.12.0 allows stored XSS via JavaScript code in an SVG document to bl-kernel/ajax/logo-upload.php...
CVE-2020-15006: Improper Neutralization of Input During Web Page Generation
Bludit 3.12.0 allows stored XSS via JavaScript code in an SVG document to bl-kernel/ajax/logo-upload.php...
PT-2020-14114
Name of the Vulnerable Software and Affected Versions Bludit version 3.12.0 Description The issue allows stored XSS via JavaScript code in an SVG document to the "bl-kernel/ajax/logo-upload.php" API endpoint. This enables potential attackers to inject malicious scripts into the application...
CVE-2019-15123
The Branding Module in Viki Vera 4.9.1.26180 allows an authenticated user to change the logo on the website. An attacker could use this to upload a malicious .aspx file and gain Remote Code Execution on the site...
Remote code execution
The Branding Module in Viki Vera 4.9.1.26180 allows an authenticated user to change the logo on the website. An attacker could use this to upload a malicious .aspx file and gain Remote Code Execution on the site...
PT-2020-9661
Name of the Vulnerable Software and Affected Versions Viki Vera version 4.9.1.26180 Description The Branding Module in Viki Vera allows an authenticated user to change the logo on the website. An attacker could use this to upload a malicious .aspx file and gain Remote Code Execution on the site...
CVE-2020-7589
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions. The vulnerability could lead to an attacker reading and modifying the device configuration and obtain project files from affected devices. The security vulnerability could be exploited by an unauthenticated...
CVE-2020-7589
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions. The vulnerability could lead to an attacker reading and modifying the device configuration and obtain project files from affected devices. The security vulnerability could be exploited by an unauthenticated...
Security feature bypass
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions. The vulnerability could lead to an attacker reading and modifying the device configuration and obtain project files from affected devices. The security vulnerability could be exploited by an unauthenticated...
CVE-2020-7589
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions. The vulnerability could lead to an attacker reading and modifying the device configuration and obtain project files from affected devices. The security vulnerability could be exploited by an unauthenticated...
CVE-2020-7589
CVE-2020-7589 affects Siemens LOGO! 8 BM (including SIPLUS variants). The root cause is missing authentication for a critical function, allowing an unauthenticated attacker with network access to Port 135/TCP to read/modify device configuration and access project files, impacting confidentiality ...
PT-2020-5922
Name of the Vulnerable Software and Affected Versions: LOGO! 8 BM incl. SIPLUS variants All versions Description: A vulnerability has been identified that could allow an attacker to read and modify the device configuration and obtain project files from affected devices. The security vulnerability...
CVE-2020-7589: Missing Authentication for Critical Function
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions. The vulnerability could lead to an attacker reading and modifying the device configuration and obtain project files from affected devices. The security vulnerability could be exploited by an unauthenticated...
Vulnerability Spotlight: Multiple vulnerabilities in Siemens LOGO! PLC
Alexander Perez-Palma of Cisco Talos and Emanuel Almeida of Cisco Systems discovered these vulnerabilities. Blog by Jon Munshaw. Cisco researchers recently discovered several vulnerabilities in the Siemens LOGO! PLC. The LOGO! allows users to control various automation projects, such as industria...
Siemens LOGO! (Update A)
1. EXECUTIVE SUMMARY CVSS v3 9.4 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: LOGO! Vulnerability: Missing Authentication for Critical Function 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-20-161-03...
Siemens LOGO! TDE service "NFSAccess" Upload File Write Vulnerability
Summary An exploitable file write vulnerability exists in the TDE service functionality of Siemens LOGO! 1.82.02, 12/24RCE Version 0BA and 230RCE Version 0BA. A specially crafted network request can upload or overwrite file content to the local SD card. An attacker can send a sequence of maliciou...
Siemens LOGO! TDE service "DELETEPROG" Denial of Service Vulnerability
Summary An exploitable denial of service vulnerability exists in the TDE service functionality of Siemens LOGO! 1.82.02, 12/24RCE Version 0BA and 230RCE Version 0BA. A specially crafted network request can cause erased information resulting in a denial of service. An attacker can send an...
Siemens LOGO! TDE service "NFSAccess" Delete Denial of Service Vulnerability
Summary An exploitable denial of service vulnerability exists in the TDE service functionality of Siemens LOGO! 1.82.02, 12/24RCE Version 0BA and 230RCE Version 0BA. A specially crafted network request can cause be used to delete critical system data resulting in a denial of service. An attacker...
logo-getraenke.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1185692 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
