817 matches found
CVE-2021-29661
Softing AG OPC Toolbox through 4.10.1.13035 allows /en/diagvalues.html Stored XSS via the ITEMLISTVALUESITEMID parameter, resulting in JavaScript payload injection into the trace file. This payload will then be triggered every time an authenticated user browses the page containing it...
CVE-2021-29660
A Cross-Site Request Forgery CSRF vulnerability in en/cfgsetpwd.html in Softing AG OPC Toolbox through 4.10.1.13035 allows attackers to reset the administrative password by inducing the Administrator user to browse a URL controlled by an attacker...
CVE-2021-29660
CVE-2021-29660 concerns a CSRF vulnerability in Softing AG OPC Toolbox (en/cfg_setpwd.html) up to version 4.10.1.13035. An attacker can induce an Administrator to browse a URL under attacker control, enabling a reset of the administrative password. Documents consistently describe the flaw as CSRF...
Softing AG OPC Toolbox 跨站脚本漏洞
Softing AG OPC Toolbox is an application from Softing, Germany.OPC Toolbox is a series of high-end toolboxes for quick and easy development of OPC clients and servers for Windows, Windows CE, Linux and many more platforms. Softing AG OPC Toolbox through 4.10.1.13035 A cross-site scripting...
Softing AG OPC Toolbox 跨站请求伪造漏洞
Softing AG OPC Toolbox is an application from Softing Germany.OPC Toolbox is a series of high-end toolboxes for quick and easy development of OPC clients and servers for Windows, Windows CE, Linux and more. Softing AG OPC Toolbox through 4.10.1.13035 A cross-site request forgery vulnerability can...
container-tools:2.0 security update
An update is available for fuse-overlayfs, container-selinux, udica, toolbox, podman, conmon, skopeo, python-podman-api, slirp4netns, containernetworking-plugins, buildah, criu, cockpit-podman. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a...
CVE-2021-26704
EPrints 3.4.2 allows remote attackers to execute arbitrary commands via crafted input to the verb parameter in a cgi/toolbox/toolbox URI...
CVE-2021-26704
EPrints 3.4.2 allows remote attackers to execute arbitrary commands via crafted input to the verb parameter in a cgi/toolbox/toolbox URI...
CVE-2021-26704
EPrints 3.4.2 allows remote attackers to execute arbitrary commands via crafted input to the verb parameter in a cgi/toolbox/toolbox URI...
EPrints 安全漏洞
EPrints is a free open source software package for building open access repositories compliant with the OAI-PMH protocol. A remote code execution vulnerability exists in EPrints 3.4.2. A remote attacker can exploit this vulnerability by entering specially crafted data into the verb parameter in t...
Slic3r libslic3r Obj File TriangleMesh::TriangleMesh() out-of-bounds read vulnerability
Summary An out-of-bounds read vulnerability exists in the Obj File TriangleMesh::TriangleMesh functionality of Slic3r libslic3r 1.3.0 and Master Commit 92abbc42. A specially crafted obj file could lead to information disclosure. An attacker can provide a malicious file to trigger this...
The vulnerability of the Intel SSD Toolbox, a software installer for microprogrammed SSD drives, allows a hacker to increase their privileges.
The vulnerability of the Intel SSD Toolbox, a software tool for managing SSD drives, is related to errors in the use of standard permissions. Exploiting this vulnerability can allow attackers to increase their privileges...
Intel® SSD Toolbox Privilege Escalation Vulnerability
Intel is an American company that develops CPUs and is the world's largest manufacturer of personal computer parts and CPUs. Intel® SSD Toolbox Privilege Escalation Vulnerability can be exploited by an attacker to elevate privileges...
CVE-2020-8701
Incorrect default permissions in installer for the IntelR SSD Toolbox versions before 2/9/2021 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-8701
Incorrect default permissions in installer for the IntelR SSD Toolbox versions before 2/9/2021 may allow a privileged user to potentially enable escalation of privilege via local access...
Design/Logic Flaw
Incorrect default permissions in installer for the IntelR SSD Toolbox versions before 2/9/2021 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-8701
Incorrect default permissions in installer for the IntelR SSD Toolbox versions before 2/9/2021 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-8701
Incorrect default permissions in installer for the IntelR SSD Toolbox versions before 2/9/2021 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-8701
CVE-2020-8701 affects Intel(R) SSD Toolbox installer prior to 2/9/2021, where incorrect default permissions could let a local, privileged user escalate privileges. The issue is documented in the Intel advisory INTEL-SA-00457, which states Intel did not release mitigations for this vulnerability a...
Intel Squashes High-Severity Graphics Driver Flaws
Intel has issued fixes for five high-severity vulnerabilities in its graphics drivers. Attackers can exploit these flaws to launch an array of malicious attacks – such as escalating their privileges, stealing sensitive data or launching denial-of-service attacks. The graphics driver is software...