EUVD-2020-28118

Malware in sbrugna...

EUVD-2020-28122

Malware in sbrugna...

EUVD-2020-28145

Malware in sbrugna...

CVE-2020-7005

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable to a cross-site request forgery, which may allow an attacker to remotely execute arbitrary code...

CVE-2020-6978

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable due to the usage of old jQuery libraries...

CVE-2020-6982

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may allow remote code execution...

CVE-2020-6982

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may allow remote code execution...

CVE-2020-6978

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable due to the usage of old jQuery libraries...

Design/Logic Flaw

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may allow remote code execution...

CVE-2020-6982

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may allow remote code execution...

CVE-2020-6978

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable due to the usage of old jQuery libraries...

CVE-2020-7005

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable to a cross-site request forgery, which may allow an attacker to remotely execute arbitrary code...

CVE-2020-7005

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable to a cross-site request forgery, which may allow an attacker to remotely execute arbitrary code...

CVE-2020-6982

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may allow remote code execution...

CVE-2020-7005

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable to a cross-site request forgery, which may allow an attacker to remotely execute arbitrary code...

PT-2020-19331

Name of the Vulnerable Software and Affected Versions Honeywell WIN-PAK versions prior to 4.7.2 Description The issue allows an attacker to remotely execute arbitrary code through a cross-site request forgery. Recommendations For versions prior to 4.7.2, update to version 4.7.2 or later to resolv...

PT-2020-19326

Name of the Vulnerable Software and Affected Versions Honeywell WIN-PAK versions 4.7.2 and prior Description A header injection issue has been identified, which may allow remote code execution. Recommendations For Honeywell WIN-PAK versions 4.7.2 and prior, at the moment, there is no information...

PT-2020-19325

Name of the Vulnerable Software and Affected Versions Honeywell WIN-PAK versions 4.7.2 and prior Description The issue arises from the usage of old jQuery libraries in the affected product. Recommendations For Honeywell WIN-PAK versions 4.7.2 and prior, consider updating the jQuery libraries to a...

CVE-2020-6978: Use of Obsolete Function

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable due to the usage of old jQuery libraries...

CVE-2020-6982: Improper Neutralization of HTTP Headers for Scripting Syntax

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may allow remote code execution...