CVE-2019-12803

CVE-2019-12803 affects Hunesion i-oneNet, versions 3.0.7–3.0.53 and 4.0.4–4.0.16. The root cause is a vulnerable upload web module that does not properly verify the file extension and type, enabling an attacker to upload a webshell. The webshell can then be used for remote code execution, includi...

PT-2019-12953 · Hunesion · Hunesion I-Onenet

Name of the Vulnerable Software and Affected Versions: Hunesion i-oneNet versions 3.0.7 through 3.0.53 Hunesion i-oneNet versions 4.0.4 through 4.0.16 Description: The issue arises from the specific upload web module not verifying the file extension and type, allowing an attacker to upload a...

PT-2019-12954 · Hunesion · Hunesion I-Onenet

Name of the Vulnerable Software and Affected Versions: Hunesion i-oneNet versions 3.0.7 through 3.0.53 Hunesion i-oneNet versions 4.0.4 through 4.0.16 Description: The issue arises from the lack of update file integrity checking in the upgrade process, allowing an attacker to craft a malicious fi...

Siemens SIMATIC ET 200eco PN 8 inputs resistance thermocouple I/O module

Binary data 764643.prm...

Siemens SIMATIC ET 200eco PN 8 outputs /double assignment Digital I/O module

Binary data 764636.prm...

Siemens SIMATIC ET 200eco PN 16 outputs /double assignment Digital I/O module

Binary data 764639.prm...

Siemens SIMATIC ET 200eco PN 8 outputs Digital I/O module

Binary data 764640.prm...

Siemens SIMATIC ET 200eco PN 4 inputs voltage/current I/O module

Binary data 764644.prm...

Siemens SIMATIC ET 200eco PN 8 digital in-or outputs / individual parameter assignment I/O module

Binary data 764641.prm...

Siemens SIMATIC ET 200eco PN 8 inputs /single assignment Digital I/O module

Binary data 764634.prm...

Siemens SIMATIC ET 200eco PN 8 inputs /double assignment Digital I/O module

Binary data 764633.prm...

Siemens SIMATIC ET 200eco PN 8 outputs /double assignment Digital I/O module

Binary data 764638.prm...

Siemens SIMATIC ET 200eco PN 8 outputs /double assignment Digital I/O module

Binary data 764637.prm...

Siemens SIMATIC ET 200eco PN 16 inputs /double assignment Digital I/O module

Binary data 764635.prm...

CVE-2019-6621

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, 11.6.1-11.6.3.4, and 11.5.2-11.5.8 and BIG-IQ 7.0.0-7.1.0.2, 6.0.0-6.1.0, and 5.1.0-5.4.0, an undisclosed iControl REST worker is vulnerable to command injection by an admin/resource admin user. This issue impacts both...

IBM DB2 Encryption Issues Vulnerabilities

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM DB2 is vulnerable to an encryption issue. An attacker could exploit this vulnerability to decrypt...

CVE-2019-6965

An XSS issue was discovered in i-doit Open 1.12 via the src/tools/php/qr/qr.php url parameter...

Cross site scripting

An XSS issue was discovered in i-doit Open 1.12 via the src/tools/php/qr/qr.php url parameter...

CVE-2019-6965

An XSS issue was discovered in i-doit Open 1.12 via the src/tools/php/qr/qr.php url parameter...

CVE-2019-6965

CVE-2019-6965 affects i-doit Open 1.12. The vulnerability is a reflected Cross-Site Scripting (XSS) in the qr.php file under src/tools/php/qr/qr.php, exploitable via a crafted value in the url parameter. The issue is documented across multiple sources (NVD, Red Hat, CVE list, Exploit DB and relat...