24 matches found
EUVD-2023-33771
Malicious code in bioql PyPI...
EUVD-2023-33773
Malicious code in bioql PyPI...
EUVD-2023-33770
Malicious code in bioql PyPI...
EUVD-2023-33772
Malicious code in bioql PyPI...
Schweitzer Engineering Laboratories SEL-411L Input Validation Error Vulnerability
The Schweitzer Engineering Laboratories SEL-411L is a state-of-the-art line differential protection, automation and control system from Schweitzer Engineering Laboratories, USA. An input validation error vulnerability exists in the Schweitzer Engineering Laboratories SEL-411L, which can be...
CVE-2023-2267
An Improper Input Validation vulnerability in Schweitzer Engineering Laboratories SEL-411L could allow an attacker to perform reflection attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more details...
CVE-2023-2267
An Improper Input Validation vulnerability in Schweitzer Engineering Laboratories SEL-411L could allow an attacker to perform reflection attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more details...
CVE-2023-2265
An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and authorized user. See product Instruction Manual Appendix A dated 20230830 for more...
Cross site scripting
An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more...
Input validation
An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and authorized user. See product Instruction Manual Appendix A dated 20230830 for more...
Input validation
An improper input validation vulnerability in the Schweitzer Engineering Laboratories SEL-411L could allow a malicious actor to manipulate authorized users to click on a link that could allow undesired behavior. See product Instruction Manual Appendix A dated 20230830 for more details...
CVE-2023-2267
CVE-2023-2267 describes an input validation error in the Schweitzer Engineering Laboratories SEL-411L (a line differential protection, automation and control system). The connected documents state that this vulnerability could allow an attacker to perform reflection attacks against an authorized ...
CVE-2023-2267 Improper input validation could lead to reflection injection attacks
An Improper Input Validation vulnerability in Schweitzer Engineering Laboratories SEL-411L could allow an attacker to perform reflection attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more details...
CVE-2023-2266
The CVE-2023-2266 entry concerns Schweitzer Engineering Laboratories SEL-411L, where an improper neutralization of input during web page generation enables cross-site scripting (XSS). The root cause is input handling during web page rendering, allowing an attacker to execute scripts in the contex...
CVE-2023-2266 Improper neutralization of input during web page generation could lead to cross-site scripting based attacks
An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more...
CVE-2023-2265 Improper restriction of rendered UI layers or frames could lead to clickjacking attack
An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and authorized user. See product Instruction Manual Appendix A dated 20230830 for more...
CVE-2023-2264
The CVE-2023-2264 entry concerns the Schweitzer Engineering Laboratories SEL-411L. Affected component: the SEL-411L system; root cause: improper input validation that could allow an attacker to cause authorized users to click a link and trigger undesired behavior. Documented impact is high for co...
CVE-2023-2264 Improper input validition could lead to code injection
An improper input validation vulnerability in the Schweitzer Engineering Laboratories SEL-411L could allow a malicious actor to manipulate authorized users to click on a link that could allow undesired behavior. See product Instruction Manual Appendix A dated 20230830 for more details...
CVE-2023-2267: Improper Input Validation
An Improper Input Validation vulnerability in Schweitzer Engineering Laboratories SEL-411L could allow an attacker to perform reflection attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more details...
CVE-2023-2265: Improper Restriction of Rendered UI Layers or Frames
An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and authorized user. See product Instruction Manual Appendix A dated 20230830 for more...