22 matches found
CVE-2023-45912
WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 fails to validate user sessions, allowing unauthenticated attackers to read files from the underlying operating system and obtain directory listings...
EUVD-2023-50174
Malicious code in bioql PyPI...
EUVD-2023-50175
Malicious code in bioql PyPI...
CVE-2023-45911
An issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated attackers to login as any user without a password...
CVE-2023-45912
WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 fails to validate user sessions, allowing unauthenticated attackers to read files from the underlying operating system and obtain directory listings...
CVE-2023-45911
An issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated attackers to login as any user without a password...
CVE-2023-45911
An issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated attackers to login as any user without a password...
CVE-2023-45911
An issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated attackers to login as any user without a password...
CVE-2023-45912
WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 fails to validate user sessions, allowing unauthenticated attackers to read files from the underlying operating system and obtain directory listings...
CVE-2023-45912
WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 fails to validate user sessions, allowing unauthenticated attackers to read files from the underlying operating system and obtain directory listings...
Design/Logic Flaw
An issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated attackers to login as any user without a password...
Design/Logic Flaw
WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 fails to validate user sessions, allowing unauthenticated attackers to read files from the underlying operating system and obtain directory listings...
CVE-2023-45912
WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 fails to validate user sessions, allowing unauthenticated attackers to read files from the underlying operating system and obtain directory listings...
PT-2023-29764 · Wipotec Gmbh · Comscale
Name of the Vulnerable Software and Affected Versions: WIPOTEC GmbH ComScale versions 4.3.29.21344 through 4.4.12.723 Description: An issue in WIPOTEC GmbH ComScale allows unauthenticated attackers to login as any user without a password. Recommendations: For versions 4.3.29.21344 and 4.4.12.723,...
CVE-2023-45911
The CVE-2023-45911 entry concerns WIPOTEC GmbH ComScale versions 4.3.29.21344 to 4.4.12.723, where an authentication bypass allows unauthenticated attackers to log in as any user without a password. The issue is a login-access control vulnerability (no password required) that impacts network-expo...
CVE-2023-45912
WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 fails to validate user sessions, allowing unauthenticated attackers to read files from the underlying operating system and obtain directory listings...
PT-2023-29765 · Wipotec Gmbh · Comscale
Name of the Vulnerable Software and Affected Versions: WIPOTEC GmbH ComScale versions 4.3.29.21344 through 4.4.12.723 Description: The issue allows unauthenticated attackers to read files from the underlying operating system and obtain directory listings due to a failure in validating user...
CVE-2023-45911
An issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated attackers to login as any user without a password...
CVE-2023-45912
WIPOTEC ComScale versions 4.3.29.21344 and 4.4.12.723 fail to validate user sessions, allowing unauthenticated attackers to read files from the OS and obtain directory listings. Affects ComScale software; root cause is session validation failure. Potential impact: information disclosure (high). P...
Wipotec ComScale Security Vulnerability
Wipotec ComScale is an application from Wipotec. It can display collected data on a connected PC or tablet device. A security vulnerability exists in Wipotec ComScale version v4.3.29.21344, v4.4.12.723. An attacker exploits the vulnerability to log in as any user without a password...