CVE-2024-52290

LF Edge eKuiper is affected by a Stored XSS in the Connection Configuration key “Name” (confKey). A user with rights to modify the service (e.g., kuiperUser) can inject arbitrary payloads, which then execute in the browser of other users (e.g., admins) when the key is deleted. The issue is descri...

CVE-2024-52290 Stored XSS in Configuration Key Functionality

LF Edge eKuiper is a lightweight internet of things IoT data analytics and stream processing engine. Prior to version 2.1.0 user with rights to modificate the service e.g. kuiperUser role can inject a cross-site scripting payload into Connection Configuration key Name confKey parameter. After thi...

CVE-2024-52290: Improper Neutralization of Input During Web Page Generation

LF Edge eKuiper is a lightweight internet of things IoT data analytics and stream processing engine. Prior to version 2.1.0 user with rights to modificate the service e.g. kuiperUser role can inject a cross-site scripting payload into Connection Configuration key Name confKey parameter. After thi...

Robust Federated Learning with Confidence-Weighted Filtering and GAN-Based Completion under Noisy and Incomplete Data

Federated learning FL presents an effective solution for collaborative model training while maintaining data privacy across decentralized client datasets. However, data quality issues such as noisy labels, missing classes, and imbalanced distributions significantly challenge its effectiveness. Th...

Microsoft Edge (Chromium-based) Spoofing Vulnerability (CNVD-2025-13268)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge suffers from a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks when visiting specially crafted websites...

PT-2025-21139 · Lf Edge · Ekuiper

Name of the Vulnerable Software and Affected Versions: LF Edge eKuiper versions prior to 2.1.0 Description: LF Edge eKuiper is a lightweight internet of things IoT data analytics and stream processing engine. A user with rights to modify the service, such as the kuiperUser role, can inject a...

LF Edge eKuiper Cross-site Scripting Vulnerability

LF Edge eKuiper is an edge lightweight IoT data analytics software from LF Edge open source. A cross-site scripting vulnerability exists in LF Edge eKuiper versions prior to 2.1.0, which stems from a cross-site scripting injection in the Connection Configuration key Name parameter...

Microsoft Edge Information Disclosure

The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

Codecs Code Execution

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Scripting Engine Code Execution

The vulnerability of the Scripting Engine component in Edge and Internet Explorer browsers on Windows operating systems is related to data type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted link...

CVE-2025-22848

Improper conditions check for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2025-22895

Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-23233

Incorrect execution-assigned permissions for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2025-22446

Inadequate encryption strength for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2025-22843

Incorrect execution-assigned permissions for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-22844

Improper access control for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

CVE-2025-20624

Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable information disclosure via adjacent access...

CVE-2025-21081

Protection mechanism failure for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20612

Incorrect execution-assigned permissions for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2025-20611

Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable information disclosure via local access...