477 matches found
Schneider Electric SAGE RTUs Out-of-Bounds Read Vulnerability
Schneider Electric SAGE RTUs are a high-performance device for industrial automation and remote monitoring from Schneider Electric, France. An out-of-bounds read vulnerability exists in the Schneider Electric SAGE RTUs, which can be exploited by an attacker to cause a denial of service in the...
Schneider Electric SAGE RTUs Security Vulnerability
Schneider Electric SAGE RTUs is a high-performance device for industrial automation and remote monitoring from Schneider Electric France. A security vulnerability exists in the Schneider Electric SAGE RTUs that stems from the presence of an unchecked return value, which could result in a denial o...
Schneider Electric SAGE RTUs Security Vulnerability
Schneider Electric SAGE RTUs is a high-performance device for industrial automation and remote monitoring from Schneider Electric France. A security vulnerability exists in the Schneider Electric SAGE RTUs that stems from the presence of incorrect default permissions that allow authenticated user...
Schneider Electric SAGE RTUs Security Vulnerability
Schneider Electric SAGE RTUs is a high-performance device for industrial automation and remote monitoring from Schneider Electric France. A security vulnerability exists in the Schneider Electric SAGE RTUs that stems from buffer copying without checking the input size, which could allow a user wi...
Vulnerabilities fixed in Schneider Electric Sage RTU systems
Schneider Electric has fixed vulnerabilities in Sage RTU devices. A malicious party could exploit the vulnerabilities to launch attacks that could result in the following categories of damage: - Denial-of-Service DoS - Manipulation of data - Bypassing authentication - Circumvention of security...
PT-2024-4203 · Schneider Electric · Schneider Electric Sage
Name of the Vulnerable Software and Affected Versions: Schneider Electric Sage affected versions not specified Description: The issue is related to an out-of-bounds read vulnerability in the web interface of the Schneider Electric Sage software for remote lighting and energy management devices...
PT-2024-4181 · Schneider Electric · Schneider Electric Sage
Name of the Vulnerable Software and Affected Versions: Schneider Electric Sage versions affected versions not specified Description: The issue is related to an improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability. This could allow a remote...
PT-2024-25683
Name of the Vulnerable Software and Affected Versions sagemaker-python-sdk versions prior to 2.218.0 Description The issue concerns potentially unsafe deserialization in the sagemaker.base deserializers.NumpyDeserializer module when untrusted data is passed as pickled object arrays. This may allo...
CVE-2023-2809
Plaintext credential usage vulnerability in Sage 200 Spain 2023.38.001 version, the exploitation of which could allow a remote attacker to extract SQL database credentials from the DLL application. This vulnerability could be linked to known techniques to obtain remote execution of MS SQL command...
CVE-2023-2809
Plaintext credential usage vulnerability in Sage 200 Spain 2023.38.001 version, the exploitation of which could allow a remote attacker to extract SQL database credentials from the DLL application. This vulnerability could be linked to known techniques to obtain remote execution of MS SQL command...
Sql injection
Plaintext credential usage vulnerability in Sage 200 Spain 2023.38.001 version, the exploitation of which could allow a remote attacker to extract SQL database credentials from the DLL application. This vulnerability could be linked to known techniques to obtain remote execution of MS SQL command...
CVE-2023-2809 Use of Cleartext credentials in Sage 200 Spain
Plaintext credential usage vulnerability in Sage 200 Spain 2023.38.001 version, the exploitation of which could allow a remote attacker to extract SQL database credentials from the DLL application. This vulnerability could be linked to known techniques to obtain remote execution of MS SQL command...
CVE-2023-2809
Affected software: Sage 200 Spain (Sage 200 Spain), version 2023.38.001. Vulnerability: plaintext credential usage within the DLL application, enabling a remote attacker to extract SQL database credentials. Root cause/impact: credentials stored in plaintext could lead to exposure of SQL credentia...
PT-2023-21549 · Sage · Sage 200 Spain
Name of the Vulnerable Software and Affected Versions: Sage 200 Spain version 2023.38.001 Description: The issue is related to plaintext credential usage, which could allow a remote attacker to extract SQL database credentials from the DLL application. This could be linked to known techniques to...
Sage 200c Security Vulnerability
Sage 200c is a full-featured mid-market ERP software for all businesses from Sage UK. A security vulnerability exists in Sage 200c version 2023.38.001, which stems from the presence of plaintext credentials in the application, and can be exploited by a remote attacker to potentially extract SQL...
CVE-2023-43708
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "configurationtitle1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
PT-2023-28926 · Unknown · Oscommerce
Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the configuration title1 parameter. This could potentially lead to unauthorized...
Malware distributor Storm-0324 facilitates ransomware access
The threat actor that Microsoft tracks as Storm-0324 is a financially motivated group known to gain initial access using email-based initial infection vectors and then hand off access to compromised networks to other threat actors. These handoffs frequently lead to ransomware deployment. Beginnin...
The vulnerability of the Sage X3 business automation system, related to the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.
The vulnerability of the Sage X3 enterprise automation system lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out cross-site scripting attacks using a specially created link...
