CVE-2024-1574

Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in the licensing feature of Mitsubishi Electric GENESIS64 versions 10.97.2 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.2 and prior, Mitsubishi Electric Hyper Historian versions 10.97.2 a...

CVE-2024-1574

Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in the licensing feature of Mitsubishi Electric GENESIS64 versions 10.97.2 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.2 and prior, Mitsubishi Electric Hyper Historian versions 10.97.2 a...

CVE-2024-1573

Missing Authentication for Critical Function vulnerability in the mobile monitoring feature of Mitsubishi Electric GENESIS64 versions 10.97.2 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.2 and prior, Mitsubishi Electric Hyper Historian versions 10.97.2 and prior, Mitsubishi Electri...

CVE-2024-1573

The CVE-2024-1573 issue is an improper authentication vulnerability in ICONICS/Mitsubishi Electric GENESIS64 family (GENESIS64/ICONICS Suite/MC Works64) versions 10.97–10.97.2, caused by the Mobile Monitoring feature allowing a remote unauthenticated login when Active Directory is used, Automatic...

CVE-2024-1182

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric MC Works64 all versions, Mitsubishi Electri...

CVE-2024-1182

CVE-2024-1182 is an Uncontrolled Search Path Element vulnerability in ICONICS/Genesis products where the AlarmWorX64 MMX Pager agent can be hijacked via a crafted DLL stored in a specific folder. Affected products include ICONICS Suite (GENESIS64, Hyper Historian, AnalytiX, MobileHMI), AlarmWorX ...

CVE-2024-1182

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric MC Works64 all versions, Mitsubishi Electri...

Mitsubishi Electric MC Works64 Security Vulnerability

Mitsubishi Electric MC Works64 is a data acquisition and monitoring system SCADA from Mitsubishi Electric Japan. A security vulnerability exists in Mitsubishi Electric MC Works64 that stems from the presence of a select class or code vulnerability using external control inputs, which could allow ...

Mitsubishi Electric MC Works64 License Issue Vulnerability

Mitsubishi Electric MC Works64 is a data acquisition and monitoring system SCADA from Mitsubishi Electric Japan. Mitsubishi Electric MC Works64 suffers from an authorization issue vulnerability that stems from an incorrect authentication vulnerability that allows a remote, unauthenticated attacke...

PT-2024-18143

Name of the Vulnerable Software and Affected Versions ICONICS GENESIS64 versions 10.97 to 10.97.2 Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.2 Mitsubishi Electric MC Works64 all versions Description The issue allows a remote unauthenticated attacker to bypass proper authentication and...

CVE-2024-1182: Uncontrolled Search Path Element

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric MC Works64 all versions, Mitsubishi Electri...

PT-2024-17274

Name of the Vulnerable Software and Affected Versions ICONICS GENESIS64 all versions Mitsubishi Electric GENESIS64 all versions Mitsubishi Electric MC Works64 all versions Description The issue allows a local attacker to execute malicious code by storing a specially crafted DLL in a specific fold...

CVE-2024-1573: Missing Authentication for Critical Function

Missing Authentication for Critical Function vulnerability in the mobile monitoring feature of Mitsubishi Electric GENESIS64 versions 10.97.2 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.2 and prior, Mitsubishi Electric Hyper Historian versions 10.97.2 and prior, Mitsubishi Electri...

Malicious code in am-ui-app-dashboards-mc (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1749 Malicious code in am-ui-app-dashboards-mc (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-34819

Missing Authorization vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert.This issue affects MC Woocommerce Wishlist: from n/a through = 1.7.2...

CVE-2024-34819

CVE-2024-34819 refers to a Missing Authorization vulnerability in the WordPress plugin MoreConvert MC Woocommerce Wishlist (aka MC Woocommerce Wishlist). Public records consistently indicate the flaw affects versions up to and including 1.7.2 and is categorized with a base CVSS score of 5.3 (MEDI...

CVE-2024-34813 WordPress WooCommerce Wishlist plugin <= 1.7.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert.This issue affects MC Woocommerce Wishlist: from n/a through = 1.7.8...

CVE-2024-34813

CVE-2024-34813 is a Missing Authorization (broken access control) vulnerability in the WordPress plugin MC Woocommerce Wishlist, affecting versions up to 1.7.8. The connected sources clearly describe that lack of proper authorization could allow unauthorized access/actions within the MC Woocommer...

PT-2024-26215 · Unknown · Moreconvert Mc Woocommerce Wishlist

Name of the Vulnerable Software and Affected Versions: MoreConvert MC Woocommerce Wishlist versions 1.7.2 and earlier Description: The issue is related to a Missing Authorization vulnerability in MoreConvert MC Woocommerce Wishlist. Recommendations: For MoreConvert MC Woocommerce Wishlist version...