87 matches found
CVE-2016-4507: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
PT-2016-5989 · Bosch Rexroth · Bladecontrol-Webvis
Name of the Vulnerable Software and Affected Versions: Rexroth Bosch BLADEcontrol-WebVIS versions 3.0.2 and earlier Description: The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations: For Rexroth Bosch BLADEcontrol-WebVIS versions 3.0.2 and earlier, at the...
Rexroth Bosch BLADEcontrol Cross-Site Scripting Vulnerability
Rexroth Bosch BLADEcontrol is a Web-based HMI Human Machine Interface system from Rexroth Bosch. A cross-site scripting vulnerability exists in Rexroth Bosch BLADEcontrol 3.0.2 and prior versions. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
PT-2016-5990 · Bosch Rexroth · Bladecontrol-Webvis
Name of the Vulnerable Software and Affected Versions: Rexroth Bosch BLADEcontrol-WebVIS versions 3.0.2 and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors, potentially leading to...
CVE-2016-4508: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Rexroth Bosch BLADEcontrol-WebVIS Vulnerabilities
OVERVIEW Independent researcher Maxim Rupp has identified a SQL injection vulnerability and a cross-site scripting vulnerability in the Rexroth Bosch BLADEcontrol-WebVIS. Rexroth Bosch has produced a new version to mitigate these vulnerabilities. These vulnerabilities could be exploited remotely...
Threat Outbreak Alert RuleID11571: Email Messages Distributing Malicious Software on September 15, 2014
Medium Alert ID: 35725 First Published: 2014 September 16 12:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11571 may contain the following files: Name ...