1080 matches found
PT-2022-4306 · Microsoft · Azure Sphere
Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to a lack of protection for service data in the Azure Sphere operating system. Exploitation of this issue may allow an attacker to gain unauthorized access to...
Microsoft Azure Sphere 缓冲区错误漏洞
Microsoft Azure Sphere is an appliance from Microsoft Corporation USA that is used to provide security in cloud environments. A buffer error vulnerability exists in Microsoft Azure Sphere. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor...
ICONICS Suite and Mitsubishi Electric MC Works64 Products (Update C)
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Low attack complexity Vendors: ICONICS, Mitsubishi Electric Equipment: ICONICS Product Suite, MC Works64 Vulnerabilities: Path Traversal, Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere, Out-of-Bounds Read 2...
CVE-2022-33317
Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric...
CVE-2022-31561
The varijkapil13/SphereImageBackend repository through 2019-10-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31561
The varijkapil13/SphereImageBackend repository through 2019-10-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31547
The noamezekiel/sphere repository through 2020-05-31 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31547
The noamezekiel/sphere repository through 2020-05-31 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31547
The CVE-2022-31547 entry concerns the noamezekiel/sphere repository (up to 2020-05-31) where Flask’s send_file is used unsafely, enabling absolute path traversal. Red Hat and other feeds corroborate the flaw in sphere, with vulnerability described as an absolute path traversal due to unsafe send_...
Sphere_ImageBackend 路径遍历漏洞
SphereImageBackend is an image processing repository by the individual developer Varij Kapil in Germany. A security vulnerability exists in SphereImageBackend version 2019-10-03 and earlier, which stems from an incorrect call to Flask's sendfile function leading to absolute path traversal...
sphere 路径遍历漏洞
sphere is a Python library that implements the Brain Command Interface System by the individual developer Noam Ezekiel. A security vulnerability exists in sphere version 2020-05-31 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...
CVE-2022-32530
A CWE-668 Exposure of Resource to Wrong Sphere vulnerability exists that could cause users to be misled, hiding alarms, showing the wrong server connection option or the wrong control request when a mobile device has been compromised by a malicious application. Affected Product: Geo SCADA Mobile...
CVE-2022-32530
A CWE-668 Exposure of Resource to Wrong Sphere vulnerability exists that could cause users to be misled, hiding alarms, showing the wrong server connection option or the wrong control request when a mobile device has been compromised by a malicious application. Affected Product: Geo SCADA Mobile...
CVE-2022-32530
CVE-2022-32530 affects Schneider Electric’s Geo SCADA Mobile (Build 222 and prior). The vulnerability is described as CWE-668: Exposure of Resource to Wrong Sphere, which could mislead users by hiding alarms or presenting incorrect server connection options or control requests when a mobile devic...
CVE-2022-32530
A CWE-668 Exposure of Resource to Wrong Sphere vulnerability exists that could cause users to be misled, hiding alarms, showing the wrong server connection option or the wrong control request when a mobile device has been compromised by a malicious application. Affected Product: Geo SCADA Mobile...
Securing your IoT with Edge Secured-core devices
A recent study conducted by Microsoft in partnership with Ponemon Institute included a survey of companies that have adopted IoT solutions and 65 percent of them mentioned that security is a top priority when implementing IoT. Attacks targeting IoT devices put businesses at risk. Impacted devices...
Exploit for CVE-2022-30190
CVE-2022-30190 Usag...
Parallels H-Sphere Cross-Site Scripting Vulnerability
Parallels H-Sphere is a web-hosting automation control panel from Parallels, Inc. It is used for shared web hosting services. Parallels H-Sphere version 3.6.2 contains a cross-site scripting vulnerability that can be exploited by attackers to perform XSS via indexen.php in the parameters...
