19017 matches found
CVE-2022-41204
CVE-2022-41204 affects SAP Commerce versions 1905–2205 and targets the login page. A manipulated URL can inject client-side code to change the login form submission, redirecting data to an attacker-controlled server. This enables credential theft and account hijacking, impacting confidentiality, ...
CVE-2022-40631
CVE-2022-40631 affects Siemens SCALANCE X-200/X-200IRT device families (including X200-4P, X201-3P/IRT PRO, X202-2IRT/IRT PRO, X204-2/X204IRT, X206-1, X208, X212-2, X216, X224, and XF/XIR variants) with all affected versions prior to specified fixed versions. The root cause is improper neutraliza...
CVE-2022-40631
A vulnerability has been identified in SCALANCE X200-4P IRT All versions V5.5.0, SCALANCE X201-3P IRT All versions V5.5.0, SCALANCE X201-3P IRT PRO All versions V5.5.0, SCALANCE X202-2IRT All versions V5.5.0, SCALANCE X202-2P IRT All versions V5.5.0, SCALANCE X202-2P IRT PRO All versions V5.5.0,...
Siemens SICAM 授权问题漏洞
Siemens SICAM is an integrated substation automation system from Siemens Germany. An access control error vulnerability exists in several Siemens products. The vulnerability stems from the fact that the affected device accepts a user-defined session cookie and does not update the session cookie...
Siemens Scalance X-200 跨站脚本漏洞
The Siemens Scalance X-200 is an industrial-grade Ethernet switch from Siemens Germany. A cross-site scripting vulnerability exists in SCALANCE Switches, which stems from the presence of a cross-site scripting vulnerability that could lead to session hijacking if exploited by an attacker. The...
PT-2022-25429 · Siemens · Scalance Xf204 +21
Name of the Vulnerable Software and Affected Versions: SCALANCE X200-4P IRT versions prior to V5.5.0 SCALANCE X201-3P IRT versions prior to V5.5.0 SCALANCE X201-3P IRT PRO versions prior to V5.5.0 SCALANCE X202-2IRT versions prior to V5.5.0 SCALANCE X202-2P IRT versions prior to V5.5.0 SCALANCE...
MapTool v1.11.5 - Cross Site Scripting Vulnerabilities
Document Title: =============== MapTool v1.11.5 - Cross Site Scripting Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2319 Release Date: ============= 2022-10-10 Vulnerability Laboratory ID VL-ID: ==================================== 23...
CVE-2022-39859
Implicit intent hijacking vulnerability in UPHelper library prior to version 3.0.12 allows attackers to access sensitive information via implicit intent...
CVE-2022-39859
Implicit intent hijacking vulnerability in UPHelper library prior to version 3.0.12 allows attackers to access sensitive information via implicit intent...
CVE-2022-39859
Implicit intent hijacking vulnerability in UPHelper library prior to version 3.0.12 allows attackers to access sensitive information via implicit intent...
Information disclosure
Implicit intent hijacking vulnerability in UPHelper library prior to version 3.0.12 allows attackers to access sensitive information via implicit intent...
CVE-2022-39859
CVE-2022-39859 affects the UPHelper library prior to version 3.0.12, where an implicit intent hijacking vulnerability can allow an attacker to access sensitive information via implicit intents. The issue is documented across multiple sources (e.g., PT-2022-25049) indicating the vulnerability lies...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 3.0.12, which stems from an implicit intent hijacking vulnerability in the UPHelper...
CVE-2022-39859
Implicit intent hijacking vulnerability in UPHelper library prior to version 3.0.12 allows attackers to access sensitive information via implicit intent...
CVE-2022-22503
IBM Robotic Process Automation 21.0.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks agains...
CVE-2022-22503
IBM Robotic Process Automation 21.0.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks agains...
Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Event Streams
Summary There are a number of vulnerabilities in Node.js that is used by IBM Event Streams. Vulnerability Details CVEID:CVE-2022-32222 DESCRIPTION: Node.js could allow a remote attacker to bypass security restrictions. By attempting to read openssl.cnf from /home/iojs/build/ upon startup, an...
Notepad++ DLL Hijacking Vulnerability (Sep 2022)
Notepad++ is prone to a DLL hijacking vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:notepad-plus-plus:notepad++"...
Security Bulletin: Multiple Vulnerabilities in node.js
Summary Security Vulnerabilities in node.js affect IBM Watson Assistant for IBM Cloud Pak for Data. Refer to details for additional information.. Vulnerability Details CVEID:CVE-2022-32213 DESCRIPTION: Node.js is vulnerable to HTTP request smuggling, caused by the failure to correctly parse and...
