CVE-2022-22727

A CWE-20: Improper Input Validation vulnerability exists that could allow an unauthenticated attacker to view data, change settings, impact availability of the software, or potentially impact a user�s local machine when the user clicks a specially crafted link. Affected Product: EcoStruxure Power...

CVE-2022-22726

A CWE-20: Improper Input Validation vulnerability exists that could allow arbitrary files on the server to be read by authenticated users through a limited operating system service account. Affected Product: EcoStruxure Power Monitoring Expert Versions 2020 and prior...

CVE-2022-22727

CVE-2022-22727 is an instance of an improper input validation (CWE-20) vulnerability in Schneider Electric’s EcoStruxure Power Monitoring Expert (versions 2020 and prior). The CVE describes that an unauthenticated attacker could view data, change settings, or impact availability, potentially affe...

CVE-2022-22726

CVE-2022-22726 affects EcoStruxure Power Monitoring Expert (versions 2020 and prior). The vulnerability is due to improper input validation (CWE-20) that could allow an authenticated user with a limited OS service account to read arbitrary files on the server. Impact indications in the sources sh...

SUSE-SU-2022:0330-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2021-3999: Fixed incorrect errno in getcwd bsc1194640 - CVE-2022-23219: Fixed buffer overflow in sunrpc clntcreate for 'unix' bsc1194768 - CVE-2022-23218: Fixed buffer overflow in sunrpc svcunixcreate bsc1194770 Features added: - IBM Power 1...

OPENSUSE-SU-2022:0330-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2021-3999: Fixed incorrect errno in getcwd bsc1194640 - CVE-2022-23219: Fixed buffer overflow in sunrpc clntcreate for 'unix' bsc1194768 - CVE-2022-23218: Fixed buffer overflow in sunrpc svcunixcreate bsc1194770 Features added: - IBM Power 1...

Schneider Electric EcoStruxure Power Monitoring Expert has a vulnerability in input validation.

The Schneider Electric EcoStruxure Power Monitoring Expert is a device from Schneider Electric, a French company, for power distribution monitoring in IoT environments. The Schneider Electric EcoStruxure Power Monitoring Expert has a security vulnerability that stems from an incorrect input...

CVE-2022-22727: Improper Input Validation

A CWE-20: Improper Input Validation vulnerability exists that could allow an unauthenticated attacker to view data, change settings, impact availability of the software, or potentially impact a user�s local machine when the user clicks a specially crafted link. Affected Product: EcoStruxure Power...

Security update for glibc (important)

openSUSE Security Update: Security update for glibc Announcement ID: openSUSE-SU-2022:0330-1 Rating: important References: 1194640 1194768 1194770 1194785 SLE-18195 Cross-References: CVE-2021-3999 CVE-2022-23218 CVE-2022-23219 CVSS scores: CVE-2021-3999 SUSE: 7.4...

PT-2022-15689

Name of the Vulnerable Software and Affected Versions EcoStruxure Power Monitoring Expert versions 2020 and prior Description A Cross-site Scripting vulnerability exists that could allow an authenticated attacker to view data, change settings, or impact availability of the software when the user...

CVE-2022-22726: Improper Input Validation

A CWE-20: Improper Input Validation vulnerability exists that could allow arbitrary files on the server to be read by authenticated users through a limited operating system service account. Affected Product: EcoStruxure Power Monitoring Expert Versions 2020 and prior...

IBM OPENBMC OP910 information leakage vulnerability

IBM OPENBMC OP910 is a POWER8 and POWER9 emulator from International Business Machines Corporation IBM.IBM OPENBMC OP920, OP930 and OP940 have a security vulnerability that could be exploited by an unauthenticated attacker to gain access to sensitive information...

Schneider Electric EcoStruxure Power Monitoring Expert has a vulnerability in input validation.

Schneider Electric EcoStruxure Power Monitoring Expert is a device from Schneider Electric, a French company, used for power distribution monitoring in IoT environments. The Schneider Electric EcoStruxure Power Monitoring Expert suffers from an input validation error vulnerability that stems from...

CVE-2022-22804: Improper Neutralization of Input During Web Page Generation

A CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could allow an authenticated attacker to view data, change settings, or impact availability of the software when the user visits a page containing the injected payload. Affected...

Security Bulletin: This Power System update is being released to address CVE 2021-38960

Summary POWER9: In response to a security issue with BMC's HTTPS server, a new Power System firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE 2021-38960 Vulnerability Details CVEID: CVE-2021-38960 DESCRIPTION: IBM OPENBMC could allow an...

LP pricing formula is vulnerable to flashloan manipulation

Handle shw Vulnerability details Impact The LP pricing formula used in the burnAsset function of LimboDAO is vulnerable to flashloan manipulation. By swapping a large number of EYE into the underlying pool, an attacker can intentionally inflate the value of the LP tokens to get more fate than he ...

CVE-2022-22561

Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contain an improper restriction of excessive authentication attempts. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to compromised accounts...

CVE-2022-22549

Dell PowerScale OneFS, 8.2.x-9.3.x, contains a Improper Certificate Validation. A unauthenticated remote attacker could potentially exploit this vulnerability, leading to a man-in-the-middle capture of administrative credentials...

CVE-2021-22827

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22826. Affected Product: EcoStruxure� Power Monitoring Expert 9.0 and prior versions...

CVE-2021-22814

A CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists which could cause arbritrary script execution when a malicious file is read and displayed. Affected Products: 1-Phase Uninterruptible Power Supply UPS using NMC2 including Smart-UPS,...