CVE-2026-2491

Socomec DIRIS A-40 HTTP API Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Socomec DIRIS A-40 power monitoring devices. Authentication is not required to exploit this vulnerability. The specific flaw...

Schneider Electric EcoStruxure Power Monitoring Expert和Schneider Electric EcoStruxure Power Operation（Schneider Electric EPO） 代码问题漏洞

Schneider Electric EcoStruxure Power Monitoring Expert and Schneider Electric EcoStruxure Power Operation Schneider Electric EPO are both products of Schneider Electric, a French company. Schneider Electric EcoStruxure Power Monitoring Expert is a device used for power distribution monitoring in...

Socomec DIRIS A-40 HTTP API Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Socomec DIRIS A-40 power monitoring devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web API implementation, which listens on TCP po...

CVE-2021-22826

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22827. Affected Product: EcoStruxure� Power Monitoring Expert 9.0 and prior versions...

CVE-2021-22827

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22826. Affected Product: EcoStruxure� Power Monitoring Expert 9.0 and prior versions...

CVE-2020-7545

A CWE-284:Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software see security notification for version information that could allow for arbitrary code execution on the server when an authorized user access an affected webpage...

EUVD-2020-28672

Malware in sbrugna...

EUVD-2018-19509

Malware in sbrugna...

EUVD-2020-28671

Malware in sbrugna...

EUVD-2022-27869

Malicious code in bioql PyPI...

EUVD-2022-27947

Malicious code in bioql PyPI...

EUVD-2021-9962

Malicious code in bioql PyPI...

EUVD-2022-27870

Malicious code in bioql PyPI...

EUVD-2021-9961

Malicious code in bioql PyPI...

The vulnerability of the software for energy monitoring, EcoStruxure Power Monitoring Expert and Power Operation, arises from incorrect restrictions on the path to the restricted-access catalog. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the EcoStruxure Power Monitoring Expert and Power Operation software lies in the incorrect restriction on the path to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...

The vulnerability of the software for energy monitoring solutions like EcoStruxure Power Monitoring Expert and Power Operation lies in the ability to disclose information in unauthorized areas of the data. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the EcoStruxure Power Monitoring Expert and Power Operation software lies in the ability to disclose information in the erroneous data range. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the software for energy monitoring, EcoStruxure Power Monitoring Expert and Power Operation, arises from incorrect restrictions on the path to the restricted-access catalog. This allows a perpetrator to execute arbitrary code.

The vulnerability of the EcoStruxure Power Monitoring Expert and Power Operation software lies in the incorrect restriction of the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the software for energy monitoring of EcoStruxure Power Monitoring Expert and Power Operation, related to insufficient validation of requests on the server side, allows a perpetrator to execute an SSRF attack.

The vulnerability of the EcoStruxure Power Monitoring Expert and Power Operation software-related programs is related to insufficient checking of requests on the server side. Exploiting this vulnerability can allow a malicious actor to execute an SSRF attack remotely...

The vulnerability of the software for energy monitoring, EcoStruxure Power Monitoring Expert and Power Operation, arises from insufficient validation of requests on the server side. This allows attackers to execute SRF attacks.

The vulnerability of the EcoStruxure Power Monitoring Expert and Power Operation software-related programs is related to insufficient checking of requests on the server side. Exploiting this vulnerability can allow a malicious actor to execute an SSRF attack remotely...

Schneider Electric EcoStruxure Power Monitoring Expert和EcoStruxure Power Operation AdvancedReporting and Dashboards Module 代码问题漏洞

Schneider Electric EcoStruxure Power Monitoring Expert and EcoStruxure Power Operation AdvancedReporting and Dashboards Module are products of Schneider Electric, France. Schneider Electric EcoStruxure Power Monitoring Expert is a device for power distribution monitoring in IoT...