CVE-2022-1806 Cross-site Scripting (XSS) - Reflected in rtxteam/rtx

Cross-site Scripting XSS - Reflected in GitHub repository rtxteam/rtx prior to checkpoint2022-05-18...

CVE-2022-1806

CVE-2022-1806 describes a reflected Cross-site Scripting (XSS) vulnerability in RTX (rtxteam/rtx) prior to checkpoint_2022-05-18. The public records indicate the root cause is input reflection leading to script execution, with PoCs showing exploitation via a callback parameter in the /rtxcomplete...

RTX 跨站脚本漏洞

RTX is RTXteam's prototype translation reasoning tool. versions prior to RTX checkpoint2022-05-18 have a cross-site scripting vulnerability that can be exploited by attackers to conduct cross-site scripting XSS attacks...

CVE-2022-1531

SQL injection vulnerability in ARAX-UI Synonym Lookup functionality in GitHub repository rtxteam/rtx prior to checkpoint2022-04-20 . This vulnerability is critical as it can lead to remote code execution and thus complete server takeover...

CVE-2022-1531

SQL injection vulnerability in ARAX-UI Synonym Lookup functionality in GitHub repository rtxteam/rtx prior to checkpoint2022-04-20 . This vulnerability is critical as it can lead to remote code execution and thus complete server takeover...

CVE-2022-1531 SQL injection vulnerability in ARAX-UI Synonym Lookup functionality in rtxteam/rtx

SQL injection vulnerability in ARAX-UI Synonym Lookup functionality in GitHub repository rtxteam/rtx prior to checkpoint2022-04-20 . This vulnerability is critical as it can lead to remote code execution and thus complete server takeover...

CVE-2022-1531

The CVE-2022-1531 entry corresponds to a SQL injection in ARAX-UI Synonym Lookup in the rtxteam/rtx repo, prior to checkpoint_2022-04-20. Root cause: vulnerability in the ARAX-UI synonym lookup function enabling arbitrary SQL execution. Impact (as stated): remote code execution and possible full ...

CVE-2022-1531 SQL injection vulnerability in ARAX-UI Synonym Lookup functionality in rtxteam/rtx

SQL injection vulnerability in ARAX-UI Synonym Lookup functionality in GitHub repository rtxteam/rtx prior to checkpoint2022-04-20 . This vulnerability is critical as it can lead to remote code execution and thus complete server takeover...

rtxteam/rtx SQL注入漏洞

rtxteam/rtx is a software repository. A SQL injection vulnerability exists in the GitHub repository rtxteam/rtx in versions prior to checkpoint2022-04-20, which stems from an SQL injection in the ARAX-UI synonym lookup function. An attacker could exploit this vulnerability to cause remote code...

Siemens PROFINET Stack Integrated on Interniche Stack Uncontrolled Resource Consumption (CVE-2022-25622)

A vulnerability has been identified in SIMATIC CFU DIQ All versions, SIMATIC CFU PA All versions, SIMATIC S7-1500 CPU family incl. related ET200 CPUs and SIPLUS variants All versions V2.0.0, SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC S7-400 H V6 C...

Siemens Simatic Insufficiently Protected Credentials

A vulnerability has been identified in SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC S7-400 CPU family incl. SIPLUS variants All versions, SIMATIC WinAC RTX F 2010 All versions, SINUMERIK 840D sl All versions. The authentication protocol between a...

Updated nvidia-current packages fix security vulnerabilities

Updated nvidia-current packages fix security vulnerabilities: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer nvidia.ko where improper access control may lead to denial of service, information disclosure, or data corruption CVE-2021-1076. NVIDIA GPU Display...

Unable to power-on a VM that uses a RTX A6000 vGPU

When you configure your VM to use an NVIDIA RTX A6000 card for its vGPU, the VM can fail to power on and XenCenter displays the error: "Internal Error:Can't determine the number of VFs for PCI"...

Nvidia's Anti-Cryptomining GPU Chip May Not Discourage Attacks

Nvidia, the chip company known for its gaming-friendly graphical processing units GPUs, said that its hotly anticipated GeForce RTX 3060 chipset, launching Thursday, has an added bonus of thwarting crypto-mining. Experts applaud the effort, but are skeptical the move will take the bullseye off th...

Authentication flaw

A vulnerability has been identified in SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC S7-400 CPU family incl. SIPLUS variants All versions, SIMATIC WinAC RTX F 2010 All versions, SINUMERIK 840D sl All versions. The authentication protocol between a...

CVE-2020-15791

A vulnerability has been identified in SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC S7-400 CPU family incl. SIPLUS variants All versions, SIMATIC WinAC RTX F 2010 All versions, SINUMERIK 840D sl All versions. The authentication protocol between a...

CVE-2019-13940

CVE-2019-13940 affects Siemens SIMATIC S7/SIMATIC ET200/SIPLUS variants and related WinAC RTX, with a denial-of-service vulnerability in the web server triggered by specially crafted HTTP requests to ports 80/tcp and 443/tcp. The issue is outlined across multiple sources (NVD, Red Hat, CNVD, Tena...

Siemens SIMATIC WinAC RTX 2010 Uncontrolled Resource Consumption (ICSA-19-281-03)

Binary data 720315.prm...

CVE-2019-13921

A vulnerability has been identified in SIMATIC WinAC RTX F 2010 All versions SP3 Update 1. Affected versions of the software contain a vulnerability that could allow an unauthenticated attacker to trigger a denial-of-service condition. The vulnerability can be triggered if a large HTTP request is...

CVE-2019-13921

A vulnerability has been identified in SIMATIC WinAC RTX F 2010 All versions SP3 Update 1. Affected versions of the software contain a vulnerability that could allow an unauthenticated attacker to trigger a denial-of-service condition. The vulnerability can be triggered if a large HTTP request is...