163 matches found
EUVD-2023-38397
Malicious code in bioql PyPI...
EUVD-2023-23424
Malicious code in bioql PyPI...
EUVD-2023-23423
Malicious code in bioql PyPI...
EUVD-2022-44948
Malicious code in bioql PyPI...
EUVD-2023-23422
Malicious code in bioql PyPI...
EUVD-2023-35129
Malicious code in bioql PyPI...
EUVD-2023-51339
Malicious code in bioql PyPI...
EUVD-2023-12498
Malicious code in bioql PyPI...
EUVD-2023-38427
Malicious code in bioql PyPI...
EUVD-2023-23418
Malicious code in bioql PyPI...
EUVD-2022-43502
Malicious code in bioql PyPI...
EUVD-2023-23421
Malicious code in bioql PyPI...
EUVD-2023-23420
Malicious code in bioql PyPI...
CVE-2023-1142
In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use URL decoding to retrieve system files, credentials, and bypass authentication resulting in privilege escalation...
CVE-2023-1134
Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a path traversal vulnerability, which could allow an attacker to read local files, disclose plaintext credentials, and escalate privileges...
CVE-2023-0444
A privilege escalation vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.02a. A default user 'User', which is in the 'Read Only User' group, can view the password of another default user 'Administrator', which is in the 'Administrator' group. This allows any lower privilege...
CVE-2022-38142
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway service port without proper verification. An attacker could provide malicious serialized objects to execute arbitrary code upon deserialization...
CVE-2022-41772
Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversal. This path traversal could result in remote code execution...
CVE-2022-41657
Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be used in file operation application programmable interfaces APIs. This could create arbitrary files, which could be used in API operations and could ultimately...
CVE-2022-41644
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lacks authentication for a function that changes group privileges. An attacker could use this to create a denial-of-service state or escalate their own privileges...