735 matches found
Wanzhou WOES Intelligent Optimization Energy Saving System 注入漏洞
Wanzhou WOES Intelligent Optimization Energy Saving System is an Intelligent Optimization Energy Saving System from the Chinese company Wanzhou. An injection vulnerability exists in version 1.0 of the Wanzhou WOES Intelligent Optimization Energy Saving System, which is caused by incorrect operati...
PT-2025-32337 · Wanzhou · Woes Intelligent Optimization Energy Saving System
Name of the Vulnerable Software and Affected Versions: Wanzhou WOES Intelligent Optimization Energy Saving System version 1.0 Description: A critical vulnerability exists in the Energy Overview Module of Wanzhou WOES Intelligent Optimization Energy Saving System. The manipulation of the BP ProID...
PT-2025-32338 · Wanzhou · Woes Intelligent Optimization Energy Saving System
Name of the Vulnerable Software and Affected Versions: Wanzhou WOES Intelligent Optimization Energy Saving System version 1.0 Description: A vulnerability has been found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0 and classified as critical. The vulnerability affects an...
CVE-2025-8702 Wanzhou WOES Intelligent Optimization Energy Saving System Historical Data Query Module GetVariableByOneIDNew sql injection
A vulnerability classified as critical has been found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. This affects an unknown part of the file /CommonSolution/GetVariableByOneIDNew of the component Historical Data Query Module. The manipulation of the argument ObjectID leads to...
CVE-2025-8701
A vulnerability was found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /OLOprationLog/GetPageList. The manipulation of the argument optUser leads to sql injection. The attack may ...
CVE-2025-8701 Wanzhou WOES Intelligent Optimization Energy Saving System GetPageList sql injection
A vulnerability was found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /OLOprationLog/GetPageList. The manipulation of the argument optUser leads to sql injection. The attack may ...
CVE-2025-8701
CVE-2025-8701 affects Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. The vulnerability lies in the /OL_OprationLog/GetPageList function, where manipulating the optUser parameter leads to SQL injection. Exploitation can be remote, and public disclosures exist. Remediation details ...
PT-2025-32325 · Wanzhou · Woes Intelligent Optimization Energy Saving System
Name of the Vulnerable Software and Affected Versions: Wanzhou WOES Intelligent Optimization Energy Saving System version 1.0 Description: A critical issue exists in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0, specifically within the Historical Data Query Module. The...
CVE-2025-5023
The CVE-2025-5023 entry affects Mitsubishi Electric EcoGuideTAB PV-DR004J and PV-DR004JA, all versions, with a root cause related to hard-coded credentials. An attacker in Wi‑Fi range between the measurement unit and display unit can disclose generated power data and grid-revenue information, tam...
CVE-2025-5022
Weak Password Requirements vulnerability in Mitsubishi Electric Corporation photovoltaic system monitor “EcoGuideTAB” PV-DR004J all versions and PV-DR004JA all versions allows an attacker within the Wi-Fi communication range between the units of the product measurement unit and display unit to...
CVE-2025-5022
CVE-2025-5022 affects Mitsubishi Electric Corporation’s photovoltaic system monitor “EcoGuideTAB” PV-DR004J (all versions) and PV-DR004JA (all versions). The vulnerability is described as a weak password requirement that enables an attacker within the Wi‑Fi range between the measurement unit and ...
PT-2025-29073 · Mitsubishi · Ecoguidetab Pv-Dr004J +1
Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Corporation EcoGuideTAB PV-DR004J all versions Mitsubishi Electric Corporation EcoGuideTAB PV-DR004JA all versions Description: A weakness in password requirements exists in Mitsubishi Electric Corporation’s EcoGuideTAB...
CVE-2025-48379 Pillow Vulnerable to Write Buffer Overflow on BCn encoding
Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large 64k encoded with default settings image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save...
CVE-2025-6435
If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the .download file extension. This could have led to the user inadvertently running a malicious executable. This vulnerability affects Firefox 140 and...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state There are several issues with the way the hyp code lazily saves the host’s FPSIMD/SVE state. These include: The host SVE state is unexpectedly discarded due to...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: “Revert ‘drm/amd/display: Use HW lock mgr for PSR1’” This revertment is associated with the commit a2b5a9956269 “drm/amd/display: Use HW lock mgr for PSR1”. It may cause system hangs when connecting with the two EDP panels...
The vulnerability of the RevertAction.Php and ApiFileRevert.Php files, which are part of the MediaWiki software used for implementing hypertext environments, allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the RevertAction.Php and ApiFileRevert.Php files, which are part of the MediaWiki software used for implementing hypertext environments, is related to improper saving of permissions. Exploiting this vulnerability could allow an attacker who operates remotely to gain...
CVE-2024-1577
Remote Code Execution vulnerability in MegaBIP software allows to execute arbitrary code on the server without requiring authentication by saving crafted by the attacker PHP code to one of the website files. This issue affects MegaBIP software versions through 5.11.2...
CVE-2024-4082
The Joli FAQ SEO – WordPress FAQ Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.2. This is due to missing or incorrect nonce validation when saving settings. This makes it possible for unauthenticated attackers to change the...