6106 matches found
CVE-2022-20916
CVE-2022-20916 describes a cross-site scripting (XSS) vulnerability in the web-based management interface of Cisco IoT Control Center. An unauthenticated, remote attacker could lure a user to click a crafted link, triggering script execution in the interface context or exposing browser-based info...
CVE-2022-20916: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
A vulnerability in the web-based management interface of Cisco IoT Control Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly...
Cisco IoT Control Center Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco IoT Control Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly...
PT-2022-4717
Name of the Vulnerable Software and Affected Versions Cisco IoT Control Center affected versions not specified Description The issue is related to a lack of proper validation of user-supplied input in the web-based management interface, allowing an unauthenticated, remote attacker to conduct a...
Spoofing
Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator. Supported versions that are affected are 9.2.6.3 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...
PT-2022-4068
Name of the Vulnerable Software and Affected Versions JD Edwards EnterpriseOne Orchestrator versions 9.2.6.3 and prior Description The issue is related to insufficient input validation in the E1 IOT Orchestrator component. It allows a low-privileged attacker with network access via HTTP to...
CVE-2022-21532: Undefined Security Weakness
Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator. Supported versions that are affected are 9.2.6.3 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...
Siemens SICAM GridEdge Access Control Error Vulnerability
SICAM GridEdge can make your existing IEC61850 devices IoT capable with just a few clicks.An access control error vulnerability exists in Siemens SICAM GridEdge, which could be exploited by an attacker with access to the file system of the host computer running SICAM GridEdge to inject a custom S...
Introducing security for unmanaged devices in the Enterprise network with Microsoft Defender for IoT
How many IoT devices are used at your company? If yours is like most organizations, there are probably printers, scanners, and fax machines scattered around the office. Perhaps smart TVs are mounted at reception or in the break room to guide visitors and keep employees up-to-date on company event...
Introducing security for unmanaged devices in the Enterprise network with Microsoft Defender for IoT
How many IoT devices are used at your company? If yours is like most organizations, there are probably printers, scanners, and fax machines scattered around the office. Perhaps smart TVs are mounted at reception or in the break room to guide visitors and keep employees up-to-date on company event...
Multiple MediaTek Chip CCCI Input Validation Error Vulnerability
MediaTek Inc. is the world's fourth largest fab-based semiconductor company and a leader in the markets of mobile terminals, smart home applications, wireless connectivity and Internet of Things IoT products, with approximately 1.5 billion units of end products with built-in MediaTek chips hittin...
Multiple MediaTek Chip WLAN Driver Input Validation Error Vulnerability
MediaTek Inc. is the world's fourth largest fab-based semiconductor company and a leader in the markets of mobile terminals, smart home applications, wireless connectivity and Internet of Things IoT products, with approximately 1.5 billion units of end products with built-in MediaTek chips hittin...
Bluetooth buffer overflow vulnerability in multiple MediaTek chips (CNVD-2022-66252)
MediaTek Inc. is the world's fourth largest fab-based semiconductor company and a leader in the markets of mobile terminals, smart home applications, wireless connectivity and Internet of Things IoT products, with approximately 1.5 billion units of end products with built-in MediaTek chips hittin...
Multiple MediaTek Chip Modem 2G RRs suffer from out-of-bounds write vulnerability
MediaTek Inc. is the world's fourth largest fab-based semiconductor company and a leader in the markets of mobile terminals, smart home applications, wireless connectivity and Internet of Things IoT products, with approximately 1.5 billion units of end products with built-in MediaTek chips hittin...
Multiple MediaTek Chips Autoboot Access Control Error Vulnerability
MediaTek Inc. is the world's fourth largest fab-based semiconductor company and a leader in the markets of mobile terminals, smart home applications, wireless connectivity and Internet of Things IoT products, with approximately 1.5 billion units of end products with built-in MediaTek chips hittin...
Multiple MediaTek Chips Competitive Condition Vulnerabilities
MediaTek Inc. is the world's fourth largest fab-based semiconductor company and a leader in the markets of mobile terminals, smart home applications, wireless connectivity and Internet of Things IoT products, with approximately 1.5 billion units of end products with built-in MediaTek chips hittin...
Multiple MediaTek chips audio DSP input validation error vulnerability
MediaTek Inc. is the world's fourth largest fab-based semiconductor company and a leader in the markets of mobile terminals, smart home applications, wireless connectivity and Internet of Things IoT products, with approximately 1.5 billion units of end products with built-in MediaTek chips hittin...
Bluetooth buffer overflow vulnerability in multiple MediaTek chips (CNVD-2022-66253)
MediaTek Inc. is the world's fourth largest fab-based semiconductor company and a leader in the markets of mobile terminals, smart home applications, wireless connectivity and Internet of Things IoT products, with approximately 1.5 billion units of end products with built-in MediaTek chips hittin...
iotnorth.ca Cross Site Scripting vulnerability OBB-2740845
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
