526 matches found
CVE-2020-7500
CVE-2020-7500 : A CWE-89 SQL injection exists in U.motion Servers and Touch Panels. The root cause is improper neutralization of special elements used in SQL commands, allowing potential arbitrary code execution when a malicious command is entered. Connected sources corroborate the vulnerability ...
CVE-2020-7500
A CWE-89:Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability exists in U.motion Servers and Touch Panels affected versions listed in the security notification which could cause arbitrary code to be executed when a malicious command is entered...
CVE-2020-7499
A CWE-863: Incorrect Authorization vulnerability exists in U.motion Servers and Touch Panels affected versions listed in the security notification which could cause unauthorized access when a low privileged user makes unauthorized changes...
CVE-2020-7499
CVE-2020-7499: Multiple connected sources confirm a CWE-863 Incorrect Authorization vulnerability in U.motion Servers and Touch Panels. The Red Hat, NVD, and CVE records describe that a low-privileged user could make unauthorized changes leading to unauthorized access. Concrete affected product s...
CVE-2018-18625
Grafana 5.3.1 has XSS via a link on the "Dashboard All Panels General" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099...
CVE-2018-18625
Grafana 5.3.1 is affected by an XSS vulnerability via a link on the Dashboard > All Panels > General screen. The issue stems from an incomplete fix for CVE-2018-12099. The connected sources confirm the exact vector (dashboard link) and affected UI screen, but do not provide a remediation ve...
CVE-2018-18625
Grafana 5.3.1 has XSS via a link on the "Dashboard All Panels General" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099...
CVE-2020-13642
An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The actionbuildercontent function did not do any nonce verification, allowing for requests to be forged on behalf of an administrator. The panelsdata $POST variable allows for malicious JavaScript to be...
WordPress SiteOrigin Page Builder Cross-Site Request Forgery Vulnerability (CNVD-2020-31282)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.SiteOrigin Page Builder is a page builder plugin used in it. A cross-site request forgery vulnerability exists in...
Samsung Mobile Device Authorization Issue Vulnerability (CNVD-2020-33781)
Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An authorization issue vulnerability exists in Samsung mobile devices, which can be exploited by attackers to access quick panels and notifications...
NETGEAR GS728TPS Authentication Bypass Vulnerability
The NETGEAR GS728TPS is an intelligent managed switch from NETGEAR. A security vulnerability exists in NETGEAR GS728TPS version 5.3.0.35 and earlier. A remote attacker could exploit the vulnerability to bypass authentication and gain access to some network panels...
CVE-2020-6969
It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations...
Code injection
It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations...
CVE-2020-6969
It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations...
CVE-2020-6969
The CVE-2020-6969 issue affects C-More Touch Panels EA9 series prior to firmware 6.53, where credentials and other sensitive data can be unmasked from unprotected project files. This vulnerability enables remote access and potential manipulation of system configurations (attack vector: network; i...
ICSA-20-035-01_AutomationDirect C-More Touch Panels
1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: AutomationDirect Equipment: C-More Touch Panels EA9 Series Vulnerability: Insufficiently Protected Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an...
Inim Electronics Smartliving SmartLAN/G/SI 6.x SSRF
Inim Electronics Smartliving SmartLAN/G/SI =6.x Unauthenticated SSRF Vendor: INIM Electronics s.r.l. Product web page: https://www.inim.biz Link: https://www.inim.biz/en/antintrusion-control-panels/home-automation/control-panel-smartliving? Affected version: =6.x Affected models: SmartLiving 505...
Race condition
A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7, SIMATIC S7-400 CPU 414F-3 PN/DP V7, SIMATIC S7-400 CPU 416-3 PN/DP V7, SIMATIC S7-400 CPU 416F-3 PN/DP V7, Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Development/Evaluation Kits for PROFIN...
CVE-2019-6833
A CWE-754 – Improper Check for Unusual or Exceptional Conditions vulnerability exists in Magelis HMI Panels all versions of - HMIGTO, HMISTO, XBTGH, HMIGTU, HMIGTUX, HMISCU, HMISTU, XBTGT, XBTGT, HMIGXO, HMIGXU, which could cause a temporary freeze of the HMI when a high rate of frames is receive...
Design/Logic Flaw
A CWE-754 – Improper Check for Unusual or Exceptional Conditions vulnerability exists in Magelis HMI Panels all versions of - HMIGTO, HMISTO, XBTGH, HMIGTU, HMIGTUX, HMISCU, HMISTU, XBTGT, XBTGT, HMIGXO, HMIGXU, which could cause a temporary freeze of the HMI when a high rate of frames is receive...