CVE-2011-4036

Directory traversal vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier allows remote attackers to read arbitrary files via unspecified vectors...

Buffer overflow

Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier, allows remote attackers to cause a denial of service via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Buffer overflow

Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors...

Directory traversal

Directory traversal vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2011-4034

The CVE-2011-4034 issue involves a buffer overflow in the third‑party TeeChart ActiveX control used by Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADA Reports 4.10 and earlier. The vulnerability potentially allows remote attackers to execute ...

CVE-2011-4035

CVE-2011-4035 describes a Cross-Site Scripting (XSS) vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADA Reports 4.10 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. ...

CVE-2011-4033

Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier, allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2011-4033

The vulnerability CVE-2011-4033 affects the third‑party Steema TeeChart ActiveX control used by Schneider Electric Vijeo Historian (V4.30 and earlier), CitectHistorian (V4.30 and earlier), and CitectSCADA Reports (V4.10 and earlier). Root cause: a buffer overflow in the TeeChart ActiveX control t...

CVE-2011-4036

Directory traversal vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2011-4036

CVE-2011-4036 is a directory traversal vulnerability in the Schneider Electric Vijeo Historian/Web Portal family: Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADA Reports 4.10 and earlier. The flaw in the web portal could allow remote attackers to read arbitrary...

CVE-2011-4034

Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors...

CVE-2011-4035

Cross-site scripting XSS vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

JVN#61695284: PowerChute Business Edition vulnerable to cross-site scripting

PowerChute Business Edition from Schneider Electric is a power management software. PowerChute Business Edition contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Upgrade the software Upgrade to the latest version accordin...

CVE-2011-4034: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors...

CVE-2011-4035: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2011-4822

Name of the Vulnerable Software and Affected Versions Schneider Electric Vijeo Historian versions 4.30 and earlier CitectHistorian versions 4.30 and earlier CitectSCADAReports versions 4.10 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web...

CVE-2011-4036: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier allows remote attackers to read arbitrary files via unspecified vectors...

PT-2011-4820

Name of the Vulnerable Software and Affected Versions Steema TeeChart ActiveX control as used in Schneider Electric Vijeo Historian versions 4.30 and earlier Steema TeeChart ActiveX control as used in CitectHistorian versions 4.30 and earlier Steema TeeChart ActiveX control as used in...

Hero Framework 3.69 Remote Reflected Cross-Site Scripting Vulnerability

Summary Hero formerly Caribou CMS is a white label, open source PHP website content management system CMS and development platform. Description Hero suffers from a XSS vulnerability when parsing user input to the 'month' parameter via GET method. Attackers can exploit this weakness to execute...