1607 matches found
PT-2022-34135 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.10.121 through 5.10.136 Description: The issue is related to the global state lock backoff in the drm/msm/mdp5 module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...
Hitachi Energy MSM Product
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: MSM Product Vulnerability: Reliance on Uncontrolled Component 2. RISK EVALUATION Successful exploitation of this vulnerability could disrupt the functionality of the MSM web...
msm-tech.com Cross Site Scripting vulnerability OBB-2874965
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GSD-2022-1004746 drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf
drm/msm/mdp4: Fix refcount leak in mdp4modesetinitintf This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.202 by commit...
GSD-2022-1004631 drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf
drm/msm/mdp4: Fix refcount leak in mdp4modesetinitintf This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.127 by commit...
CVE-2021-40336
A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This causes a possible HTTP response splitting, which if exploited could lead an attacker to channel down harmful code into the user’s web browser, such as to steal the session...
CVE-2021-40335
A vulnerability exists in the HTTP web interface where the web interface does not sufficiently verify if a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. This cause a Cross Site Request Forgery CSRF, which if exploited could lead an attack...
CVE-2021-40336
A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This causes a possible HTTP response splitting, which if exploited could lead an attacker to channel down harmful code into the user’s web browser, such as to steal the session...
CVE-2021-40335
A vulnerability exists in the HTTP web interface where the web interface does not sufficiently verify if a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. This cause a Cross Site Request Forgery CSRF, which if exploited could lead an attack...
Design/Logic Flaw
A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This causes a possible HTTP response splitting, which if exploited could lead an attacker to channel down harmful code into the user’s web browser, such as to steal the session...
Cross site request forgery (csrf)
A vulnerability exists in the HTTP web interface where the web interface does not sufficiently verify if a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. This cause a Cross Site Request Forgery CSRF, which if exploited could lead an attack...
CVE-2021-40336
Hitachi Energy MSM (versions 2.2 and prior) is affected by CVE-2021-40336 due to improper validation of data in HTTP headers, enabling HTTP response splitting and potential in-browser code execution to steal session cookies. ED docs indicate a remediation path: update to a fixed MSM version, and ...
CVE-2021-40336 HTTP Response Splitting in Hitachi Energy’s MSM Product
A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This causes a possible HTTP response splitting, which if exploited could lead an attacker to channel down harmful code into the user’s web browser, such as to steal the session...
CVE-2021-40335 Cross Site Request Forgery (CSRF) in Hitachi Energy’s MSM Product
A vulnerability exists in the HTTP web interface where the web interface does not sufficiently verify if a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. This cause a Cross Site Request Forgery CSRF, which if exploited could lead an attack...
CVE-2021-40335
Hitachi Energy MSM (Mon i toring System for high‑voltage switchgear) is affected by CVE-2021-40335. The vulnerability is a Cross‑Site Request Forgery (CSRF) in the HTTP web interface caused by insufficient verification of user‑intended, well‑formed requests. A successful exploit could allow an at...
Hitachi Energy MSM 跨站请求伪造漏洞
Hitachi Energy MSM is Hitachi Energy Switzerland's solution for monitoring, managing and analyzing the performance of all types of high-voltage switchgear in new installations, as well as retrofitting existing high-voltage assets. A security vulnerability exists in Hitachi Energy MSM version 2.2...
PT-2022-5005 · Hitachi Energy · Hitachi Energy Msm
Name of the Vulnerable Software and Affected Versions: Hitachi Energy MSM versions V2.2 and prior Description: A vulnerability exists in the HTTP web interface where it does not sufficiently verify if a well-formed, valid, consistent request was intentionally provided by the user who submitted th...
Hitachi Energy MSM 注入漏洞
Hitachi Energy MSM is Hitachi's solution for monitoring, managing, and analyzing the performance of all types of high-voltage switchgear in new installations, as well as retrofitting existing high-voltage assets. An injection vulnerability exists in Hitachi Energy MSM 2.2 and prior versions, whic...
CVE-2021-40335
A vulnerability exists in the HTTP web interface where the web interface does not sufficiently verify if a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. This cause a Cross Site Request Forgery CSRF, which if exploited could lead an attack...