CVE-2019-10972

Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability can be triggered when an attacker provides the target with a rogue project file .frc2. Once a user opens the rogue project, CPU exhaustion occurs, which causes the software to quit responding until the application i...

CVE-2019-10972

CVE-2019-10972 affects Mitsubishi Electric FR Configurator2 (Version 1.16S and earlier). The vulnerability arises when a rogue project file (.frc2) is opened, triggering CPU exhaustion and causing the application to stop responding until restart. Connected advisories corroborate an Uncontrolled R...

CVE-2019-10976

Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability is triggered when input passed to the XML parser is not sanitized while parsing the XML project and/or template file .frc2. Once a user opens the file, the attacker could read arbitrary files...

CVE-2019-10976

The CVE-2019-10976 vulnerability affects Mitsubishi Electric FR Configurator2 (versions 1.16S and prior). It arises from improper restriction/filtering of input to the XML parser when parsing .frc2 project/template files, allowing an attacker to read arbitrary files on open. ICSA/ICS guidance ind...

Mitsubishi FR Configurator2 Resource Management Error Vulnerability

Mitsubishi FR Configurator2 is an inverter drive configuration application from Mitsubishi Electric Japan. A resource management error vulnerability exists in Mitsubishi FR Configurator2. The vulnerability stems from the mismanagement of system resources e.g., memory, disk space, files, etc. by a...

Mitsubishi FR Configurator2 Code Issue Vulnerability

Mitsubishi FR Configurator2 is an inverter drive configuration application from Mitsubishi Electric Japan. A code issue vulnerability exists in Mitsubishi FR Configurator2 that stems from the program not filtering input passed to the XML parser. An attacker could exploit the vulnerability to read...

cg68.fr Cross Site Scripting vulnerability

Security Researcher calv1n Helped patch 22043 vulnerabilities Received 12 Coordinated Disclosure badges Received 37 recommendations , a holder of 12 badges for responsible and coordinated disclosure, found a security vulnerability affecting cg68.fr website and its users. Following coordinated and...

bijouterie-azy-romanet-chalon71.fr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-882040 Security Researcher metamorfosec Helped patch 1963 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

Denial Of Service (DoS)

freeradius is vulnerable to denial of service DoS attacks. The vulnerability exists as an FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in makesecret" and a denial of service...

aa13.fr XSS vulnerability

Open Bug Bounty ID: OBB-718892 Description| Value ---|--- Affected Website:| aa13.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

lyon-grand8.fr XSS vulnerability

Open Bug Bounty ID: OBB-715995 Description| Value ---|--- Affected Website:| lyon-grand8.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

pasapas.editions-hatier.fr XSS vulnerability

Open Bug Bounty ID: OBB-715733 Description| Value ---|--- Affected Website:| pasapas.editions-hatier.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

rutronik24.fr XSS vulnerability

Open Bug Bounty ID: OBB-714671 Description| Value ---|--- Affected Website:| rutronik24.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

green7.fr XSS vulnerability

Open Bug Bounty ID: OBB-713689 Description| Value ---|--- Affected Website:| green7.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

mobile24.fr XSS vulnerability

Open Bug Bounty ID: OBB-710078 Description| Value ---|--- Affected Website:| mobile24.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...

801.fr XSS vulnerability

Open Bug Bounty ID: OBB-707987 Description| Value ---|--- Affected Website:| 801.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

e-marches83.fr XSS vulnerability

Open Bug Bounty ID: OBB-704109 Description| Value ---|--- Affected Website:| e-marches83.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

agri72.fr XSS vulnerability

Open Bug Bounty ID: OBB-701508 Description| Value ---|--- Affected Website:| agri72.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

agri44.fr XSS vulnerability

Open Bug Bounty ID: OBB-701507 Description| Value ---|--- Affected Website:| agri44.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

assistantsmaternels49.fr XSS vulnerability

Open Bug Bounty ID: OBB-695456 Description| Value ---|--- Affected Website:| assistantsmaternels49.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:...