14003 matches found
Cross site scripting
Cross Site Scripting XSS in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver...
Microsoft Power Platform Connector Spoofing Vulnerability
...
CVE-2023-49563
Cross Site Scripting XSS in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver...
CVE-2023-36019: External Control of File Name or Path
Microsoft Power Platform Connector Spoofing Vulnerability...
CVE-2023-49563
Summary: CVE-2023-49563 affects Voltronic Power SNMP Web Pro, version 1.1. The issue is a Cross Site Scripting (XSS) vulnerability in the web interface that allows an attacker to execute arbitrary code via a crafted script in a request to the webserver. The description across sources consistently...
PT-2023-31259 · Voltronic Power · Voltronic Power Snmp Web Pro
Name of the Vulnerable Software and Affected Versions: Voltronic Power SNMP Web Pro version 1.1 Description: The issue allows an attacker to execute arbitrary code via a crafted script within a request to the webserver. This is a Cross Site Scripting XSS issue. Recommendations: For Voltronic Powe...
PT-2023-7607 · Microsoft · Power Platform Connector
Name of the Vulnerable Software and Affected Versions: Microsoft Power Platform Connector affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can allow a remote attacker to conduct a spoofing attack by sendi...
Microsoft Power Platform Connector Security Vulnerability
The Microsoft Power Platform Connector is a proxy or wrapper for an API from Microsoft Corporation USA. A security vulnerability exists in Microsoft Power Platform Connector. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products and versions are affected...
CVE-2023-49563: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver...
Voltronic Power SNMP Web Pro security vulnerability
Voltronic Power SNMP Web Pro is an SNMP network card management software from Voltronic Power. Voltronic Power SNMP Web Pro suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary code via specially crafted scripts...
addRewardToken() does note remove old entries before adding new ones
Lines of code 455, 280, 378, 411 Vulnerability details Each time addRewardToken is called, new entries are added to the array, but doing so does not remove any old entries. By calling the function multiple times, an attacker can can increase their voting power indefinitely, without having to...
Moderate: fence-agents security update
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fixes: python-certifi: Removal of e-Tugra root certificate CVE-2023-37920...
ALSA-2023:7753 Moderate: fence-agents security update
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fixes: python-certifi: Removal of e-Tugra root certificate CVE-2023-37920...
addRewardToken() does note remove old entries before adding new ones
Lines of code 455, 280, 378, 411 Vulnerability details Each time addRewardToken is called, new entries are added to the array, but doing so does not remove any old entries. By calling the function multiple times, an attacker can can increase their voting power indefinitely, without having to...
Siemens SCALANCE and RUGGEDCOM M-800/S615 Family
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
Security Bulletin: Vulnerability in Java IBM SDK (CVE-2023-22049) affects Power HMC
Summary Java IBM SDK is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-22049 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries component could allow a remote attacker to cause low integrity...
Security Bulletin: Vulnerability in bind (CVE-2022-2795) affects Power HMC
Summary BIND is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2022-2795 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by a flaw in resolver code. By flooding the target resolver with queries, a remote...
Security Bulletin: Vulnerability in httpd (CVE-2023-25690) affects Power HMC
Summary HTTPD is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-25690 DESCRIPTION: Apache HTTP Server is vulnerable to HTTP request splitting attacks, caused by an error when modproxy is enabled along with some form of...
power-week.com Improper Access Control vulnerability OBB-3807302
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
power-and-revolution.com Improper Access Control vulnerability OBB-3807294
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...