CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

164 matches found

Positive Technologies•added 2023/09/27 12:00 a.m.•36 views

PT-2023-31898 · Zephyr · Zephyr Ipm Drivers

Name of the Vulnerable Software and Affected Versions: Zephyr IPM drivers affected versions not specified Description: The issue involves two potential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM drivers. Recommendations: At the moment, there is no...

8.8CVSS7.8AI score0.00422EPSS

SaveExploits1References8

Openbugbounty•added 2023/09/24 9:49 p.m.•11 views

ipm-frankfurt.com Cross Site Scripting vulnerability OBB-3708194

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score

SaveExploits0

ICS•added 2022/05/10 12:00 a.m.•46 views

Eaton Intelligent Power Manager

1. EXECUTIVE SUMMARY CVSS v3 5.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: Eaton Equipment: Intelligent Power Manager IPM v1 Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code...

5.2CVSS7.5AI score0.08326EPSS

SaveExploits0References5

OSV•added 2022/04/18 5:15 p.m.•14 views

CVE-2021-23286

Eaton Intelligent Power Manager Infrastructure IPM Infrastructure version 1.5.0plus205 and all prior versions are vulnerable to CSV Formula Injection. This issue affects: Eaton Intelligent Power Manager Infrastructure IPM Infrastructure all version 1.5.0plus205 and prior versions...

8CVSS7.3AI score0.00419EPSS

SaveExploits0References2

NVD•added 2022/04/18 5:15 p.m.•31 views

CVE-2021-23284

Eaton Intelligent Power Manager Infrastructure IPM Infrastructure version 1.5.0plus205 and all prior versions are vulnerable to Stored Cross-site Scripting vulnerability. This issue affects: Eaton Intelligent Power Manager Infrastructure IPM Infrastructure all version 1.5.0plus205 and prior...

5.7CVSS0.00503EPSS

SaveExploits0References2

NVD•added 2022/04/18 5:15 p.m.•32 views

CVE-2021-23285

Eaton Intelligent Power Manager Infrastructure IPM Infrastructure version 1.5.0plus205 and all prior versions are vulnerable to reflected Cross-site Scripting vulnerability. This issue affects: Eaton Intelligent Power Manager Infrastructure IPM Infrastructure all version 1.5.0plus205 and prior...

4.8CVSS0.00422EPSS

SaveExploits0References2

NVD•added 2022/04/18 5:15 p.m.•37 views

CVE-2021-23286

8CVSS0.00419EPSS

SaveExploits0References2

OSV•added 2022/04/18 5:15 p.m.•14 views

CVE-2021-23284

4.8CVSS5.8AI score0.00503EPSS

SaveExploits0References2

OSV•added 2022/04/18 5:15 p.m.•16 views

CVE-2021-23285

4.8CVSS5.8AI score0.00422EPSS

SaveExploits0References2

Prion•added 2022/04/18 5:15 p.m.•26 views

Cross site scripting

3.5CVSS5.6AI score0.00503EPSS

SaveExploits0References2Affected Software1

Prion•added 2022/04/18 5:15 p.m.•23 views

Design/Logic Flaw

7.9CVSS7.8AI score0.00419EPSS

SaveExploits0References2Affected Software1

Prion•added 2022/04/18 5:15 p.m.•32 views

Cross site scripting

3.5CVSS5.7AI score0.00422EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2022/04/18 4:20 p.m.•45 views

CVE-2021-23286 Security issues in Eaton Intelligent Power Manager Infrastructure

5.7CVSS8AI score0.00419EPSS

SaveExploits0References2

CVE•added 2022/04/18 4:20 p.m.•108 views

CVE-2021-23286

CVE-2021-23286 affects Eaton’s IPM Infrastructure (IPM Infrastructure), across all versions up to 1.5.0plus205. The connected ICS/IR sources confirm a vulnerability in CSV formula handling (CSV Formula Injection) due to improper sanitization of imported CSV files. Exploitation requires access to ...

8CVSS6.5AI score0.00419EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2022/04/18 4:20 p.m.•43 views

CVE-2021-23284 Security issues in Eaton Intelligent Power Manager Infrastructure

5.7CVSS5.6AI score0.00503EPSS

SaveExploits0References2

CVE•added 2022/04/18 4:20 p.m.•105 views

CVE-2021-23284

The CVE-2021-23284 entry affects Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure): all versions up to 1.5.0plus205 are vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. Connected sources (ICS A...

5.7CVSS5.3AI score0.00503EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2022/04/18 4:20 p.m.•48 views

CVE-2021-23285 Security issues in Eaton Intelligent Power Manager Infrastructure

3.1CVSS5.3AI score0.00422EPSS

SaveExploits0References2

CVE•added 2022/04/18 4:20 p.m.•95 views

CVE-2021-23285

CVE-2021-23285 affects Eaton IPM Infrastructure (1.5.0plus205 and earlier). It is a reflected Cross-site Scripting vulnerability due to insufficient input validation in web page generation. Exploitation would require access to the local subnet and administrator interaction (per connected ICS/ECMA...

4.8CVSS4.7AI score0.00422EPSS

SaveExploits0References2Affected Software1

Rapid7 Vulnerability Database (full)•added 2022/04/18 12:00 a.m.•7 views

CVE-2021-23285: Improper Neutralization of Input During Web Page Generation

4.8CVSS5.5AI score0.00422EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2022/04/18 12:00 a.m.•10 views

CVE-2021-23284: Improper Neutralization of Input During Web Page Generation

5.7CVSS5.5AI score0.00503EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by