Mitsubishi Electric GX Works2

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 2.5 ATTENTION : Exploitable locally Vendor : Mitsubishi Electric Corporation Equipment : GX Works2 Vulnerability : Denial-of-Service 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow a Denial-of-service DoS due to improper input...

CVE-2023-35136

CVE-2023-35136 describes an improper input validation vulnerability in the Quagga package across Zyxel devices (ATP series 4.32–5.37; USG FLEX 4.50–5.37; USG FLEX 50(W) 4.16–5.37; USG20(W)-VPN 4.16–5.37; VPN series 4.30–5.37) that could allow an authenticated local attacker to access configuratio...

Apache Tomcat 10.1.0.M1 < 10.1.16

The version of Tomcat installed on the remote host is prior to 10.1.16. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat10.1.16security-10 advisory. - Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from...

CVE-2023-47833

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeroen Schmit Theater for WordPress plugin = 0.18.3 versions...

Medart Health Services SQL Injection Vulnerability

Medart Health Services is an application from Medart, Inc. A SQL injection vulnerability exists in Medart Health Services Medart Notification Panel version 20231123 and prior versions, which stems from improper neutralization of special elements...

PT-2023-28108 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 700 through 773 Description: The issue is related to improper neutralization of input during web page generation, allowing Cross-Site Scripting XSS. This enables the execution of Javascript code in the news section of the...

KC Group E-Commerce Software Cross-Site Scripting Vulnerability

KC Group E-Commerce Software is an e-commerce software from the Turkish company KC Group. A cross-site scripting vulnerability exists in KC Group E-Commerce Software version 20231123 and prior versions, which arises from improper input neutralization during web page generation...

CVE-2023-47817

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mmrs151 Daily Prayer Time plugin = 2023.10.13 versions...

CVE-2023-47813

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in grandslambert Better RSS Widget plugin = 2.8.1 versions...

The vulnerability of the /users/ad-search-result.php web application for phpipam allows a violator to disclose protected information.

The vulnerability of the /users/ad-search-result.php web application for managing IP addresses in phpipam exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

CVE-2023-5275

The CVE-2023-5275 entry describes an Improper Input Validation vulnerability in Mitsubishi Electric GX Works2’s simulation function that can cause a DoS when processing specially crafted packets. Affected product: GX Works2 (all versions). Root cause: input validation flaw (CWE-20) in the simulat...

CVE-2023-5274

Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-service DoS condition on the function by sending specially crafted packets. However, the attacker would need to send the packets from within the same personal computer where the...

PT-2023-8886 · Nextcloud +2 · Nextcloud Server +2

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions 25.0.0 through 25.0.12 Nextcloud Server versions 26.0.0 through 26.0.7 Nextcloud Server versions 27.0.0 through 27.1.2 Description: The issue is related to improper neutralization of input during web page generation,...

PT-2023-31995 · Mitsubishi · Gx Works2

Name of the Vulnerable Software and Affected Versions: GX Works2 affected versions not specified Description: The issue is related to an Improper Input Validation vulnerability in the simulation function of GX Works2, which allows an attacker to cause a denial-of-service DoS condition by sending...

The vulnerability of the RoundCube email client, related to improper input validation during the creation of web pages, allows attackers to perform cross-site scripting attacks.

The vulnerability of the RoundCube email client is related to improper input validation during the creation of web pages. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks remotely...

CVE-2023-36013 PowerShell Information Disclosure Vulnerability

...

CVE-2023-44355

Adobe ColdFusion versions 2023.5 and earlier and 2021.11 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage this vulnerability to impact a minor integrity feature. Exploitation of this...

CVE-2023-44355

Adobe ColdFusion versions 2023.5 and earlier and 2021.11 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage this vulnerability to impact a minor integrity feature. Exploitation of this...

CVE-2023-26364

@adobe/css-tools version 4.3.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a minor denial of service while attempting to parse CSS. Exploitation of this issue does not require user interaction or privileges...

CVE-2023-26364

@adobe/css-tools version 4.3.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a minor denial of service while attempting to parse CSS. Exploitation of this issue does not require user interaction or privileges...