2024 matches found
Phoenix.HTML 跨站脚本漏洞
Phoenix.HTML is Phoenix framework open source a function . Used to handle HTML strings and templates. A security vulnerability exists in Phoenix.HTML versions prior to 3.0.4. Attackers use this vulnerability to execute cross-site scripting attacks...
CVE-2021-46871: Improper Neutralization of Input During Web Page Generation
tag.ex in Phoenix Phoenix.HTML aka phoenixhtml before 3.0.4 allows XSS in HEEx class attributes...
CVE-2021-46871
Summary: CVE-2021-46871 affects Phoenix.HTML (Phoenix HTML) tag.ex prior to 3.0.4, where HEEx class attributes can trigger XSS. The root cause is insufficient escaping in tag.ex within phoenix_html before version 3.0.4. Details from provided documents: Affected component: phoenix_html (tag.ex); v...
CVE-2021-46871
tag.ex in Phoenix Phoenix.HTML aka phoenixhtml before 3.0.4 allows XSS in HEEx class attributes...
CVE-2021-46871
tag.ex in Phoenix Phoenix.HTML aka phoenixhtml before 3.0.4 allows XSS in HEEx class attributes...
The vulnerability of the control interfaces for microprogrammed software-based routers from Phoenix Contact, FL MGUARD and TC MGUARD, allows a intruder to trigger a service failure.
The vulnerability of the control interfaces for Microprogramming Software-based Routers from Phoenix Contact, FL MGUARD and TC MGUARD, relates to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures by creating a large numb...
phoenixchildcare.net Cross Site Scripting vulnerability OBB-3101073
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Phoenix Contact Automation Worx
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Phoenix Contact Equipment: Automation Worx Software Suite Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Out-of-bounds Read 2. RISK EVALUATION Successful exploitation of these...
CVE-2022-3737
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of input data. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these...
CVE-2022-3737
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of input data. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these...
CVE-2022-3480
A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and TC MGUARD devices below version 8.9.0 by sending a larger number of unauthenticated HTTPS connections originating from different source IP’s. Configuring firewall limits for incoming connections...
CVE-2022-3461
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a read access violation. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using...
CVE-2022-3461
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a read access violation. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using...
Heap overflow
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a read access violation. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using...
Design/Logic Flaw
A remote, unauthenticated attacker could cause a denial-of-service of PHOENIX CONTACT FL MGUARD and TC MGUARD devices below version 8.9.0 by sending a larger number of unauthenticated HTTPS connections originating from different source IP’s. Configuring firewall limits for incoming connections...
CVE-2022-3461 Buffer Overflow in PHOENIX CONTACT Automationworx Software Suite
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a read access violation. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using...
CVE-2022-3461 Buffer Overflow in PHOENIX CONTACT Automationworx Software Suite
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a read access violation. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using...
CVE-2022-3461
CVE-2022-3461 affects Phoenix Contact Automation Worx Software Suite up to version 1.89, specifically the PC Worx and Config+ components. The vulnerability arises from improper handling of manipulated project/files, leading to a heap buffer overflow and a read access violation, which could compro...
CVE-2022-3737 Out-of-bounds Read in PHOENIX CONTACT Automationworx Software Suite
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of input data. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these...