Lucene search
+L

6 matches found

attackerkb
attackerkb
•added 2024/05/03 3:16 a.m.•22 views

CVE-2023-51591

Voltronic Power ViewPower Pro doDocument XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this...

7.5CVSS5.7AI score0.01108EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2024/05/03 3:16 a.m.•24 views

CVE-2023-51591

Voltronic Power ViewPower Pro doDocument XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this...

7.5CVSS5.8AI score0.01108EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/03 2:15 a.m.•92 views

CVE-2023-51591

This CVE affects Voltronic Power ViewPower Pro, where the doDocument method improperly restricts XML External Entity (XXE) references, allowing an attacker to craft a document that causes the XML parser to fetch a URI and embed its contents back into the XML for processing. The vulnerability can ...

7.5CVSS6.2AI score0.01108EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/03 12:00 a.m.•9 views

CVE-2023-51591: Improper Restriction of XML External Entity Reference

Voltronic Power ViewPower Pro doDocument XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this...

7.5CVSS5.9AI score0.01108EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/01/11 12:00 a.m.•19 views

The vulnerability of the doDocument method in software for managing power sources in Voltronic Power View allows attackers to perform XXE attacks.

The vulnerability of the doDocument method in the software for managing power sources of Voltronic Power ViewPower Pro is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker to perform XXE attacks remotely...

6.5CVSS6.5AI score0.01108EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/12/20 12:00 a.m.•6 views

PT-2023-8169

Name of the Vulnerable Software and Affected Versions Voltronic Power ViewPower Pro affected versions not specified Description This issue allows remote attackers to disclose sensitive information on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploi...

7.5CVSS5.7AI score0.01108EPSS
SaveExploits0References9
Rows per page
Query Builder