12269 matches found
IBM i License Issues Vulnerabilities
IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. An authorization issue vulnerability exists in IBM i Access Client Solutions that stems from improper privilege checking and can be exploited by an attacker to execute...
Schneider Electric EcoStruxure Power Monitoring Expert GetFilteredSinkProvider Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Power Monitoring Expert. Authentication is not required to exploit this vulnerability. The specific flaw exists within the GetFilteredSinkProvider method. The issue...
Voltronic Power SNMP Web Pro Cross-Site Scripting Vulnerability
Voltronic Power SNMP Web Pro is an SNMP network card management software from Voltronic Power. Voltronic Power SNMP Web Pro suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary code via specially crafted scripts...
IBM i Security Vulnerabilities
IBM i is a suite of operating systems from International Business Machines IBM running on IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i Access Client Solutions versions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3, which stems from an encrypted password key th...
The vulnerability of the Microsoft Power Platform Connector’s application programming interface, related to errors in information representation by the user interface, allows a hacker to perform a spear-phishing attack.
The vulnerability of the Microsoft Power Platform Connector’s application programming interface is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to carry out a spear-phishing attack by sending the user a specially...
Vulnerabilities fixed in Microsoft Dynamics
Microsoft has fixed vulnerabilities in Dynamics. A malicious party could exploit the vulnerabilities to cause a Denial-of-Service, or to impersonate another user through a Cross-Site-Scripting attack. Such an attack can lead to execution of arbitrary code in the browser of the victim, or access...
IBM AIX 安全漏洞
IBM AIX is an open standards-based UNIX operating system developed by International Business Machines IBM for the IBM Power architecture. An elevation of privilege vulnerability exists in IBM AIX and VIOS, which can be exploited by an attacker to elevate privileges or cause a denial of service...
IBM AIX 安全漏洞
IBM AIX is an open standards-based UNIX operating system developed by International Business Machines IBM for the IBM Power architecture. An elevation of privilege vulnerability exists in IBM AIX and VIOS, which can be exploited by an attacker to gain elevated privileges...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges, gain access to sensitive data, or to impersonate another user via a cross-site scripting attack. Such an attack can lead to execution of...
CVE-2023-36019
Microsoft Power Platform Connector Spoofing Vulnerability...
CVE-2023-36019
Microsoft Power Platform Connector Spoofing Vulnerability...
CVE-2023-36019
Microsoft Power Platform Connector Spoofing Vulnerability...
Spoofing
Microsoft Power Platform Connector Spoofing Vulnerability...
CVE-2023-36019
The CVE-2023-36019 entry applies to Microsoft Power Platform Connector (Power Platform/Logic Apps/Power Automate). The vulnerability is a Spoofing flaw that could allow an attacker to pretend to be another user via the connector, enabling impersonation with high impact (CVE-2023-36019 CVSS 9.6, e...
CVE-2023-36019 Microsoft Power Platform Connector Spoofing Vulnerability
...
CVE-2023-49563
Cross Site Scripting XSS in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver...
CVE-2023-49563
Cross Site Scripting XSS in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver...
CVE-2023-49563
Cross Site Scripting XSS in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver...
