PT-2026-55454

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions 4.19.2 through 4.19.2 SimpleSAMLphp versions 4.20.2 through 4.20.2 Description The SAML2 library permits attacker-controlled XPath transforms during the processing of XML signatures in specially crafted SAML messages...

CVE-2021-27428

GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of firmware file before uploading the UR IED. An illegitimate user could upgrade firmware without...

CVE-2021-27428 GE UR family Unrestricted Upload of File with Dangerous Type

GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of firmware file before uploading the UR IED. An illegitimate user could upgrade firmware without...