CVE-2022-34754

A CWE-269: Improper Privilege Management vulnerability exists that could allow elevated functionality when guessing credentials. Affected Products: Acti9 PowerTag Link C A9XELC10-A V1.7.5 and prior, Acti9 PowerTag Link C A9XELC10-B V2.12.0 and prior...

Privilege escalation

A CWE-269: Improper Privilege Management vulnerability exists that could allow elevated functionality when guessing credentials. Affected Products: Acti9 PowerTag Link C A9XELC10-A V1.7.5 and prior, Acti9 PowerTag Link C A9XELC10-B V2.12.0 and prior...

CVE-2022-34754

CVE-2022-34754 involves CWE-269 improper privilege management in Schneider Electric Acti9 PowerTag Link C gateways (A9XELC10-A, V1.7.5 and prior; A9XELC10-B, V2.12.0 and prior). The vulnerability could allow elevated functionality when credentials are guessed. The CVSS details shown in the docume...

Advantech iView SQL Injection Vulnerability (CNVD-2023-16474)

Advantech Iview is a Simple Network Protocol SNMP based software from Advantech, China, for managing B B SmartWorx devices. information...

Advantech iView SQL Injection Vulnerability (CNVD-2023-16473)

Advantech Iview, a software based on Simple Network Protocol SNMP for managing B B SmartWorx devices from Advantech, China, is vulnerable to a SQL injection vulnerability in Advantech iView, which stems from a special element used in SQL commands that is not neutralized. An unauthorized attacker...

Advantech iView SQL Injection Vulnerability (CNVD-2023-16475)

Advantech iView, a software based on Simple Network Protocol SNMP for managing B B SmartWorx devices from Advantech, China, is vulnerable to a SQL injection vulnerability in versions prior to Advantech iView 5.7.04.6469, which results from the use of special elements in SQL commands that are not...

CVE-2022-30707

Violation of secure design principles exists in the communication of CAMS for HIS. Affected products and versions are CENTUM series where LHS4800 is installed CENTUM CS 3000 and CENTUM CS 3000 Small R3.08.10 to R3.09.00, CENTUM series where CAMS function is used CENTUM VP, CENTUM VP Small, and...

Information disclosure

Violation of secure design principles exists in the communication of CAMS for HIS. Affected products and versions are CENTUM series where LHS4800 is installed CENTUM CS 3000 and CENTUM CS 3000 Small R3.08.10 to R3.09.00, CENTUM series where CAMS function is used CENTUM VP, CENTUM VP Small, and...

CVE-2022-30707

CVE-2022-30707 affects Yokogawa CAMS for HIS across CENTUM CS 3000 (LHS4800), CENTUM VP/VP Basic (R4.01.00–R6.09.00), Exaopc (R3.72.00–R3.80.00 with NTPF100-S6), B/M9000 CS (R5.04.01–R5.05.01) and B/M9000 VP (R6.01.01–R8.03.01). Root cause: violation of secure design principles in CAMS for HIS co...

HPESBST04329 rev.1 - HPE B-Series SANnav Management Portal, Multiple Vulnerabilities

Potential Security Impact: Local: Disclosure of Sensitive Information; Remote: Denial of Service DoS, Disclosure of Information, Unauthorized Access to Data, Unauthorized Data Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SANnav Management Software - 2.2.x.x pri...

b-fine.eu Cross Site Scripting vulnerability OBB-2680698

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in page-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c160990eea879201a1e564d8dbf6e0fa9871f0eaaa38b2f4d45e379e45820a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5188 Malicious code in page-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c160990eea879201a1e564d8dbf6e0fa9871f0eaaa38b2f4d45e379e45820a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5465 Malicious code in privateinternal-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d23dff67dda9c294da32907a5dbdb9e6c3b1b571bc8abe4f0aca5fe4304699f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in privateinternal-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d23dff67dda9c294da32907a5dbdb9e6c3b1b571bc8abe4f0aca5fe4304699f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WhatsApp spam offers up “B&Q Father’s Day Contest 2022”

Fathers Day in the UK June 19 is almost upon us, and scammers are taking advantage of it—and the fractional possibility of some nice weather—using a barbeque-themed lure. A mysterious WhatsApp message The barbeque bait arrives out of the blue, from a somebody who has your number, as a random...

HPESBUX04323 rev.1 - HP-UX Common Internet File System (CIFS), Multiple Vulnerabilities

Potential Security Impact: Local: Compromise of System Integrity, Escalation of Privilege, Unauthorized Access, Unauthorized Disclosure of Information, Authentication Restriction Bypass; Remote: Compromise of System Integrity, Escalation of Privilege, Unauthorized Disclosure of Information,...

SQL Injection Vulnerability in Easy Attendance WEB Attendance Management Software

Easy Attendance WEB attendance management software is a network version of the B / S architecture WEB attendance management software. Eqin WEB Attendance Management Software has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Malicious code in simple-project-pkg-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36656e6b75ae254df7a6e2a5d6664fe017a1357d328c429930e852e963f4dca3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2017-16671

A Buffer Overflow issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7. No size checking is done when setting the user field for Party B on a CDR. Thus, it is possible for someone to use an arbitrari...