55 matches found
EUVD-2017-15099
Malware in sbrugna...
EUVD-2011-4790
Malware in sbrugna...
EUVD-2017-15097
Malware in sbrugna...
EUVD-2022-26425
Malicious code in bioql PyPI...
CVE-2011-4882
The web server in Certec atvise webMI2ADS aka webMI before 2.0.2 allows remote attackers to cause a denial of service application exit via an unspecified command in an HTTP request...
CVE-2011-4881
The web server in Certec atvise webMI2ADS aka webMI before 2.0.2 does not properly check return values from functions, which allows remote attackers to cause a denial of service NULL pointer dereference via a crafted HTTP request...
CVE-2011-4873
Unspecified vulnerability in the server in Certec EDV atvise before 2.1 allows remote attackers to cause a denial of service daemon crash via crafted requests to TCP port 4840...
CVE-2011-4880
Directory traversal vulnerability in the web server in Certec atvise webMI2ADS aka webMI before 2.0.2 allows remote attackers to read arbitrary files via a crafted HTTP request...
CVE-2022-21184
An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...
CVE-2022-21184
The CVE-2022-21184 affects Bachmann Visutec GmbH Atvise 3.5.4, 3.6, and 3.7. The root cause is an information disclosure in the License registration flow where login credentials are sent in plaintext over HTTP, enabling credential exposure via a man-in-the-middle attack. Documented impact is disc...
CVE-2022-21184
An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...
CVE-2022-21184
An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...
Bachmann Visutec GmbH Atvise License registration information disclosure vulnerability
Summary An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this...
Bachmann Visutec GmbH Atvise 安全漏洞
Bachmann Visutec GmbH Atvise is a full-featured networked HMI and SCADA system using pure network technology from Bachmann Visutec GmbH of Austria. A security vulnerability exists in Bachmann Visutec GmbH Atvise versions 3.5.4, 3.6, and 3.7 that stems from an information disclosure issue in the...
Certec Atvise Server Remote DOS
Overview Independent researcher Luigi Auriemma has identified a denial of service DoS vulnerability in Certec EDV GmbH atvise application. Certec has produced an update that resolves this vulnerability. Mr. Auriemma validated that the update resolves the vulnerability. Affected Products Atvise...
CVE-2017-6031
A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. An "improper neutralization of HTTP headers for scripting syntax" issue has been identified, which may allow remote code execution...
CVE-2017-6031
A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. An "improper neutralization of HTTP headers for scripting syntax" issue has been identified, which may allow remote code execution...
Design/Logic Flaw
A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. An "improper neutralization of HTTP headers for scripting syntax" issue has been identified, which may allow remote code execution...
CVE-2017-6029
A Cross-Site Scripting issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. This may allow remote code execution...
Cross site scripting
A Cross-Site Scripting issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. This may allow remote code execution...