341 matches found
CVE-2011-1914
Buffer overflow in the Advantech ADAM OLE for Process Control OPC Server ActiveX control in ADAM OPC Server before 3.01.012, Modbus RTU OPC Server before 3.01.010, and Modbus TCP OPC Server before 3.01.010 allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2008-5848
The Advantech ADAM-6000 module has 00000000 as its default password, which makes it easier for remote attackers to obtain access through an HTTP session, and 1 monitor or 2 control the module's Modbus/TCP I/O activity...
CVE-2025-46443
Server-Side Request Forgery SSRF vulnerability in Adam Pery Animate animate allows Server Side Request Forgery.This issue affects Animate: from n/a through = 0.5...
A Gradient-Optimized TSK Fuzzy Framework for Explainable Phishing Detection
Phishing attacks represent an increasingly sophisticated and pervasive threat to individuals and organizations, causing significant financial losses, identity theft, and severe damage to institutional reputations. Existing phishing detection methods often struggle to simultaneously achieve high...
CVE-2025-46443
Server-Side Request Forgery SSRF vulnerability in Adam Pery Animate animate allows Server Side Request Forgery.This issue affects Animate: from n/a through = 0.5...
CVE-2025-46443
CVE-2025-46443 is a Server-Side Request Forgery (SSRF) vulnerability in the WordPress Animate plugin affecting versions from n/a through 0.5. The issue enables SSRF via the plugin’s handling of server-side requests. The CVSS v3.1 base score is 4.9 (Network attack, High access complexity, Low priv...
The vulnerability of the microprogrammed logic controller Advantech ADAM 5550, related to the lack of protective measures for the website structure, allows attackers to carry out cross-site scripting attacks.
The vulnerability of the microprogrammed logic controller Advantech ADAM 5550 lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...
advisories.ncsc.nl Cross Site Scripting vulnerability OBB-4033521
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The vulnerability of the microprogrammed logic controller Advantech ADAM-5550, related to the use of weak encryption algorithms, allows a hacker to expose user account information.
The vulnerability of the microprogrammed logic controller Advantech ADAM-5550 lies in the use of weak encryption algorithms. Exploiting this vulnerability could allow an intruder to access user credentials...
CVE-2024-38308
Advantech ADAM 5550's web application includes a "logs" page where all the HTTP requests received are displayed to the user. The device doesn't correctly neutralize malicious code when parsing HTTP requests to generate page output...
CVE-2024-32546
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Adam Bowen Tax Rate Upload allows Reflected XSS.This issue affects Tax Rate Upload: from n/a through 2.4.5...
CVE-2024-28948
Advantech ADAM-5630 contains a cross-site request forgery CSRF vulnerability. It allows an attacker to partly circumvent the same origin policy, which is designed to prevent different websites from interfering with each other...
CVE-2024-50516
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in adamskaat Countdown & Clock countdown-builder allows Stored XSS.This issue affects Countdown & Clock: from n/a through = 3.0.8...
CVE-2024-50516 WordPress Countdown & Clock plugin <= 3.0.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in adamskaat Countdown & Clock countdown-builder allows Stored XSS.This issue affects Countdown & Clock: from n/a through = 3.0.8...
CVE-2024-50516
CVE-2024-50516 affects WordPress Countdown & Clock plugin, specifically versions up to 2.8.0.9 (WordPress Countdown & Clock). The vulnerability is a Cross-Site Scripting (Stored XSS) due to improper input neutralization during web page generation, as described by multiple sources. The CVE descrip...
CVE-2024-50516 WordPress Countdown & Clock plugin <= 3.0.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in adamskaat Countdown & Clock countdown-builder allows Stored XSS.This issue affects Countdown & Clock: from n/a through = 3.0.8...
CVE-2024-51718
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arsdehnel Simple Modal simplemodal allows Cross-Site Scripting XSS.This issue affects Simple Modal: from n/a through = 0.3.3...
CVE-2024-51718 WordPress Simple Modal plugin <= 0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arsdehnel Simple Modal simplemodal allows Cross-Site Scripting XSS.This issue affects Simple Modal: from n/a through = 0.3.3...
CVE-2024-51718
CVE-2024-51718 is a Reflected XSS in Simple Modal (Improper Input Neutralization during Web Page Generation). Affected: Simple Modal versions up to 0.3.3. Root cause: improper neutralization of user input leading to script execution when pages generate content that incorporates untrusted input. ...
The vulnerability of the microprogrammed logic controller (PLC) Advantech ADAM-5630 software lies in the lack of authentication for a critical function. This allows a intruder to execute arbitrary commands and cause malfunctions in the device’s operation.
The vulnerability of the microprogrammed logic controller PLC Advantech ADAM-5630 software is related to the absence of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands and cause malfunctions in the system...