3195 matches found
CVE-2023-31175 Execution with Unnecessary Privileges
An Execution with Unnecessary Privileges vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run system commands with the highest level privilege on the system. See Instruction Manual Appendix A and Appendix E dated 20230615 for more...
CVE-2023-31175
The CVE-2023-31175 issue affects SEL-5037 SEL Grid Configurator (pre-4.5.0.20). It is a privilege-related execution flaw that could allow an attacker to run arbitrary commands with the highest privileges on the host. Affected component is SEL Grid Configurator; root cause is improper privilege ha...
CVE-2023-31174 Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated 20230615 for more...
CVE-2023-31174 Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated 20230615 for more...
CVE-2023-31174
The CVE-2023-31174 entry describes a Cross-Site Request Forgery (CSRF) in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator. Affected product/version: SEL-5037 Grid Configurator prior to 4.5.0.20. Underlying issue: CSRF could enable an attacker to embed instructions that are exec...
CVE-2023-31173 Use of Hard-coded Credentials
Use of Hard-coded Credentials vulnerability in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator on Windows allows Authentication Bypass. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before...
CVE-2023-31173
CVE-2023-31173 affects Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator for Windows, with the root cause identified as hard-coded credentials that enable authentication bypass. The issue applies to versions before 4.5.0.20. According to the connected sources, the vulnerability i...
Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator 访问控制错误漏洞
Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator is a freely distributed software tool from Schweitzer Engineering Laboratories, Inc. -- Grid Configurator allows engineers and technicians to quickly create, manage, and deploy settings for SEL power system equipment. A security...
Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator 跨站请求伪造漏洞
Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator is a freely distributed software tool from Schweitzer Engineering Laboratories, Inc. --- Grid Configurator allows engineers and technicians to quickly create, manage and deploy settings for SEL power system equipment. A security...
PT-2023-4876 · Schweitzer Engineering Laboratories · Sel-5037 Sel Grid Configurator
Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator versions prior to 4.5.0.20 Description: The issue is related to an Execution with Unnecessary Privileges vulnerability in the SEL-5037 SEL Grid Configurator, which could allow...
Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator 信任管理问题漏洞
Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator is a freely distributed software tool from Schweitzer Engineering Laboratories, Inc. --- Grid Configurator allows engineers and technicians to quickly create, manage and deploy settings for SEL power system equipment. A security...
Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator 安全漏洞
Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator is a freely distributed software tool from Schweitzer Engineering Laboratories, Inc. --- Grid Configurator allows engineers and technicians to quickly create, manage and deploy settings for SEL power system equipment. A security...
PT-2023-5227 · Schweitzer Engineering Laboratories · Sel-5037 Sel Grid Configurator
Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator versions prior to 4.5.0.20 Description: The issue is related to the use of hard-coded credentials in the SEL-5037 SEL Grid Configurator, which allows authentication bypass. Fo...
CVE-2023-32598
Unauth. Reflected Cross-Site Scripting XSS vulnerability in A. R. Jones Featured Image Pro Post Grid plugin = 5.14 versions...
CVE-2023-32598
Unauth. Reflected Cross-Site Scripting XSS vulnerability in A. R. Jones Featured Image Pro Post Grid plugin = 5.14 versions...
CVE-2023-32598
CVE-2023-32598 affects the WordPress Featured Image Pro Post Grid plugin (
CVE-2023-32598 WordPress Featured Image Pro Post Grid Plugin <= 5.14 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in A. R. Jones Featured Image Pro Post Grid plugin = 5.14 versions...
WordPress plugin Featured Image Pro Post Grid 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
JVN#19661362: Multiple vulnerabilities in Proself
Proself provided by North Grid Corporation is an online storage server software. Proself contains multiple vulnerabilities listed below. Improper authentication CWE-287 - CVE-2023-39415 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N| Base Score: 7.5 CVSS...