CVE-2022-23312

A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP9 Security Patch 1. The integrated web application "Online Help" in affected product contains a Cross-Site Scripting XSS vulnerability that could be exploited if unsuspecting users are tricked into accessing a malicious...

CVE-2022-23312

A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP9 Security Patch 1. The integrated web application "Online Help" in affected product contains a Cross-Site Scripting XSS vulnerability that could be exploited if unsuspecting users are tricked into accessing a malicious...

Cross site scripting

A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP9 Security Patch 1. The integrated web application "Online Help" in affected product contains a Cross-Site Scripting XSS vulnerability that could be exploited if unsuspecting users are tricked into accessing a malicious...

CVE-2022-23312

A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP9 Security Patch 1. The integrated web application "Online Help" in affected product contains a Cross-Site Scripting XSS vulnerability that could be exploited if unsuspecting users are tricked into accessing a malicious...

CVE-2022-23312

Spectrum Power 4 (all versions before v4.70 SP9 Security Patch 1) contains a Cross-Site Scripting (XSS) vulnerability in the integrated web app “Online Help.” The issue could be exploited when users click a malicious link, potentially impacting confidentiality and integrity per available reports....

MediaTek chip buffer error vulnerability

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. A security vulnerability exists in the MediaTek chips that originates from a stack-based buffer overflow in the power hal manager service, which may allow privilege bypass...

CVE-2022-23312: Improper Neutralization of Input During Web Page Generation

A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP9 Security Patch 1. The integrated web application "Online Help" in affected product contains a Cross-Site Scripting XSS vulnerability that could be exploited if unsuspecting users are tricked into accessing a malicious...

PT-2022-14287

Name of the Vulnerable Software and Affected Versions power hal manager service affected versions not specified Description The issue is related to a stack-based buffer overflow in the power hal manager service, which could lead to a permission bypass. This might result in local escalation of...

Siemens Spectrum Power cross-site scripting vulnerability

Spectrum Power provides essential components for SCADA, communications and data modeling for control and monitoring systems. Siemens Spectrum Power 4 suffers from a cross-site scripting vulnerability that can be exploited by an attacker to conduct an attack if an unsuspecting user is tricked into...

CVE-2022-23254: Undefined Security Weakness

Microsoft Power BI Information Disclosure Vulnerability...

CVE-2021-0147: Improper Locking

Improper locking in the Power Management Controller PMC for some Intel Chipset firmware before versions pmcfwlbgc1-21ww02a and pmcfwlbgb0-21ww02a may allow a privileged user to potentially enable denial of service via local access...

CVE-2021-23287

The vulnerability exists due to insufficient validation of input of certain resources within the IPM software. This issue affects: Intelligent Power Manager IPM 1 versions prior to 1.70...

CVE-2021-23288

The vulnerability exists due to insufficient validation of input from certain resources by the IPP software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system. This issue affects: Intelligent Power Protector versions prior to 1.69...

Microsoft Power BI Information Disclosure Vulnerability

...

Siemens Spectrum Power 4 Cross-Site Scripting Vulnerability

Spectrum Power provides essential components for SCADA, communications and data modeling for control and monitoring systems. Siemens Spectrum Power 4 suffers from a cross-site scripting vulnerability that can be exploited by an attacker to conduct an attack if an unsuspecting user is tricked into...

Intel Chipset security vulnerabilities

Intel Chipset is a family of chips from the U.S.-based Intel Corporation Intel. Intel Chipset has a security vulnerability that stems from a potential security flaw in the firmware of certain Intel chipsets in Intel Server Platform Services SPS, Intel Active Management Technology AMT, and Intel...

PT-2022-1720 · Microsoft · Power Bi

Name of the Vulnerable Software and Affected Versions: Microsoft Power BI affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Power BI client JS SDK, associated with the error data area. Exploitation of this issue may allow a remote...

KLA12455 Multiple vulnerabilities in Microsoft SQL Server

Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Microsoft Power BI can be exploited remotely ...

Vulnerabilities fixed in Microsoft SQL Server and Power BI

Microsoft has fixed vulnerabilities in Microsoft SQL Server and Power BI. The vulnerabilities allow a malicious party to obtain elevated user privileges. SQL Server: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact |...

PT-2022-6691

Name of the Vulnerable Software and Affected Versions Spectrum Power 4 versions prior to V4.70 SP9 Security Patch 1 Description A Cross-Site Scripting XSS vulnerability has been identified in the integrated web application "Online Help" of the affected product. This issue could be exploited if...