1719 matches found
CVE-2024-37364
Ariane Allegro Scenario Player through 2024-03-05, when Ariane Duo kiosk mode is used, allows physically proximate attackers to obtain sensitive information such as hotel invoice content with PII, and potentially create unauthorized room keys, by entering a guest-search quote character and then...
PT-2024-27501 · Microsoft +1 · Windows Os +1
Name of the Vulnerable Software and Affected Versions: Ariane Allegro Scenario Player through 2024-03-05 Description: The issue allows physically proximate attackers to obtain sensitive information, such as hotel invoice content with personally identifiable information PII, and potentially create...
CVE-2024-33471
An issue in the Sensor Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to SMTP credentials in plaintext via a crafted AJAX request. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2024-33471
An issue in the Sensor Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to SMTP credentials in plaintext via a crafted AJAX request. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2024-33471
AVTECH Room Alert 4E v4.4.0 is affected by a Sensor Settings vulnerability that allows an attacker to access SMTP credentials in plaintext via a crafted AJAX request. This affects devices no longer supported by the maintainer. CVSSv3.1: 7.2 (HIGH) with Network attack vector, low complexity, requi...
CVE-2024-33470
An issue in the SMTP Email Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to credentials in plaintext via a passback attack. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2024-33470
An issue in the SMTP Email Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to credentials in plaintext via a passback attack. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2024-33470
An issue in the SMTP Email Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to credentials in plaintext via a passback attack. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2024-33470
The CVE-2024-33470 entry affects AVTECH Room Alert 4E v4.4.0, with a root cause in the SMTP Email Settings that can expose credentials in plaintext via a passback attack. The issue is documented across multiple sources (including PT-2024-25275) and is tied to products that are no longer supported...
PT-2024-25275 · Avtech · Avtech Room Alert 4E
Name of the Vulnerable Software and Affected Versions: AVTECH Room Alert 4E version 4.4.0 Description: An issue in the SMTP Email Settings allows attackers to gain access to credentials in plaintext via a passback attack. This issue only affects products that are no longer supported by the...
PT-2024-25276 · Avtech · Avtech Room Alert 4E
Name of the Vulnerable Software and Affected Versions: AVTECH Room Alert 4E version 4.4.0 Description: An issue in the Sensor Settings allows attackers to gain access to SMTP credentials in plaintext via a crafted AJAX request to an unspecified API endpoint. This issue only affects products that...
AVTECH Software Room Alert 4E 安全漏洞
AVTECH Software Room Alert 4E is an environmental monitoring device from AVTECH Software, Inc. A security vulnerability exists in AVTECH Software Room Alert 4E version v4.4.0, which originates from a vulnerability that allows an attacker to gain access to SMTP credentials in plaintext via a craft...
AVTECH Software Room Alert 4E 安全漏洞
AVTECH Software Room Alert 4E is an environmental monitoring device from AVTECH Software. A security vulnerability exists in AVTECH Software Room Alert 4E version v4.4.0, which originated from a vulnerability that allows an attacker to gain access to plaintext credentials via a pass-back attack...
CVE-2024-33302
SourceCodester Product Show Room 1.0 and before is vulnerable to Cross Site Scripting XSS via "Middle Name" under Add Users...
CVE-2024-33303
SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting XSS via "First Name" under Add Users...
CVE-2024-33302
CVE-2024-33302 affects SourceCodester Product Show Room 1.0 and earlier. The vulnerability is a cross-site scripting (XSS) flaw in the Middle Name field under Add Users, enabling script injection. Per the CVSS data, the attack vector is local with low privileges, no user interaction required, and...
CVE-2024-33303
SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting XSS via "First Name" under Add Users...
CVE-2024-33303
CVE-2024-33303 affects SourceCodester Product Show Room 1.0 with a Cross Site Scripting (XSS) vulnerability exploitable via the First Name field under Add Users. The NVD entry lists CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N with base score 8.2 (HIGH); impact is confidentiality high, integrit...