CVE-2019-19548

Norton Power Eraser, prior to 5.3.0.67, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user...

CVE-2019-19548

The CVE-2019-19548 entry concerns Norton Power Eraser. Connected sources specify a Local Privilege Escalation affecting Norton Power Eraser versions prior to 5.3.0.67. Notable vulnerable versions include NPE 2.0.0.52, 5.1, 5.3.0.20, and 5.3.0.24. The root cause and detailed exploit path are not d...

Norton Power Eraser CVE-2019-19548 Local Privilege Escalation Vulnerability

Description Norton Power Eraser is prone to a local privilege escalation vulnerability. A local attacker can leverage this issue to gain elevated privileges. Versions prior to Norton Power Eraser Prior to 5.3.0.67 are vulnerable. Technologies Affected Symantec Norton Power Eraser NPE 2.0.0.52...

CVE-2012-2226

Invision Power Board before 3.3.1 fails to sanitize user-supplied input which could allow remote attackers to obtain sensitive information or execute arbitrary code by uploading a malicious file...

CVE-2012-2226

Invision Power Board before 3.3.1 fails to sanitize user-supplied input which could allow remote attackers to obtain sensitive information or execute arbitrary code by uploading a malicious file...

CVE-2012-2226

CVE-2012-2226 concerns Invision Power Board (IPB) versions 3.3.0 and 3.2.3, where unsanitized user input in the like.php flow enables Local File Inclusion (LFI) via a crafted key parameter. The vulnerability chain involves base64 decoding a user-supplied value, splitting it into app/area/relId/li...

USR IOT USR-WIFI232-S/T/G2/H Low Power WiFi Module Cross-Site Scripting Vulnerability

USR IOT USR-WIFI232-S/T/G2/H Low Power WiFi Module is a low power serial wireless WIFI module from China's USR Internet of Things Technology USR IOT. A cross-site scripting vulnerability exists in the configuration web interface in the USR IOT USR-WIFI232-S/T/G2/H Low Power WiFi Module. The...

Schneider M580 suffers from denial of service vulnerability (CNVD-2020-04565)

Schneider Electric SA is a global electrical company headquartered in France. A denial of service vulnerability exists in the Schneider M580, which can be exploited by an attacker to cause the PLC to enter a fatal failure mode after sending a well-constructed 0x29 function code data message, whic...

Denial of service vulnerability in schneider M580 (CNVD-2020-04563)

Schneider Electric SA is a global electrical company headquartered in France. A denial of service vulnerability exists in the schneider M580, which can be exploited by an attacker to cause the PLC to enter a fatal failure mode after sending a well-constructed 0x65 function code data message, whic...

The vulnerability of the software for collecting, archiving, and analyzing data from Power Generation Information Manager and Plant Connect systems lies in the insufficient protection of registration data. This allows attackers to bypass authentication procedures and gain access to the device’s accounting data.

The vulnerability of the Power Generation Information Manager and Plant Connect software in terms of data collection, archiving, and analysis is related to insufficient protection of registration data. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures and...

Security Bulletin: IBM NeXtScale Fan Power Controller (FPC) is affected by vulnerability in OpenSSL (CVE-2019-1559)

Summary IBM NeXtScale Fan Power Controller FPC has addressed the following vulnerability in OpenSSL. Vulnerability Details CVEID: CVE-2019-1559 DESCRIPTION: If an application encounters a fatal protocol error and then calls SSLshutdown twice once to send a closenotify, and once to receive one the...

Denial of Service Vulnerability in Zhongyuan Huadian Digital-Analog Recording ZH-3D Dynamic Recording Device (CNVD-2020-01307)

Zhongyuan Huadian digital and analog recording ZH-3D dynamic recording device is a power system fault recording system primary voltage and current waveforms and secondary equipment action behavior, to achieve the power system fault analysis and fault ranging and positioning equipment. A...

Denial of Service Vulnerability in DMP3391 Measurement and Control Device

The DMP3391 is a monitoring device adapted to the different requirements of substations and power plants of all voltage levels. A denial of service vulnerability exists in the DMP3391, which can be exploited by an attacker to cause a system crash...

Denial of Service Vulnerability in Distribution Terminal PDZ833 of Nanjing Softcore Technology Co.

Nanjing Softcore Technology Co., Ltd. is a company dedicated to the industrialization and promotion of real-time intelligence technology, advanced control and real-time optimization technology, and 3D visualization technology, and mainly provides related products and solutions based on the above...

Denial of Service Vulnerability in DPR-343-DA-G Power System Dynamic Recording Device of Guodian Nanrui Science and Technology Co.(CNVD-2020-01585)

DPR-343-DA-G Power System Dynamic Recording Device is a fault recording device based on DL/T860 framework and applied in new generation intelligent substation. A denial-of-service vulnerability exists in the DPR-343-DA-G Power System Dynamic Recording Device of Guodian Nanrui Technology...

Denial of Service Vulnerability in FTR-100 Power System Dynamic Recording Device (CNVD-2020-01298)

FTR-100 Power System Dynamic Recording Device is a device for power system digital substation. A denial of service vulnerability exists in the FTR-100 Power System Dynamic Recording Device, which can be exploited by attackers to cause a system crash...

Denial of Service Vulnerability in FTR-100 Power System Dynamic Recording Device (CNVD-2020-01297)

FTR-100 Power System Dynamic Recording Device is a device for power system digital substation. A denial of service vulnerability exists in the FTR-100 Power System Dynamic Recording Device, which can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in DPR-343-DA-G Power System Dynamic Recording Device of Guodian Nanrui Science and Technology Co.(CNVD-2020-01583)

DPR-343-DA-G Power System Dynamic Recording Device is a fault recording device based on DL/T860 framework and applied in new generation intelligent substation. A denial of service vulnerability exists in the DPR-343-DA-G Power System Dynamic Recording Device of Guodian Nanrui Technology...

Denial of Service Vulnerability in FTR-100 Power System Dynamic Recording Device (CNVD-2020-01299)

FTR-100 Power System Dynamic Recording Device is a device for power system digital substation. A denial of service vulnerability exists in the FTR-100 Power System Dynamic Recording Device, which can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in DPR-343-DA-G Power System Dynamic Recording Device of Guodian Nanrui Science and Technology Co.(CNVD-2020-01584)

DPR-343-DA-G Power System Dynamic Recording Device is a fault recording device based on DL/T860 framework and applied in new generation intelligent substation. A denial-of-service vulnerability exists in the DPR-343-DA-G Power System Dynamic Recording Device of Guodian Nanrui Technology...