CVE-2021-42565

myfactory.FMS before 7.1-912 allows XSS via the UID parameter...

CVE-2021-42565

Summary : CVE-2021-42565 affects myfactory FMS; versions up to 7.1-912 are vulnerable to Cross-Site Scripting via the UID parameter. The Nuclei/NVD entries corroborate the issue and describe it as a client-side script execution risk in login/UID handling. The connected documents specify the affec...

PT-2021-23631

Name of the Vulnerable Software and Affected Versions myfactory.FMS versions prior to 7.1-912 Description The issue allows for cross-site scripting XSS attacks via the UID parameter. This means an attacker can inject malicious scripts into the website, potentially stealing user data or taking...

CVE-2021-42565: Improper Neutralization of Input During Web Page Generation

myfactory.FMS before 7.1-912 allows XSS via the UID parameter...

myfactory.FMS cross-site scripting vulnerability

myfactory.FMS is a transaction management system. A cross-site scripting vulnerability exists in Myfactory.FMS that stems from the product's UID parameter failing to properly validate user input data. The vulnerability can be exploited to execute client-side code. The following products and...

CVE-2021-25485

Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Oct-2021 Release 1 allows attackers to write file as system UID via BT remote socket...

CVE-2021-25485

Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Oct-2021 Release 1 allows attackers to write file as system UID via BT remote socket...

PT-2021-16675

Name of the Vulnerable Software and Affected Versions: FactoryAirCommnadManger versions prior to SMR Oct-2021 Release 1 Description: The issue allows attackers to write files as system UID via BT remote socket due to a path traversal vulnerability. Recommendations: For versions prior to SMR...

CVE-2021-25485: Improper Input Validation

Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Oct-2021 Release 1 allows attackers to write file as system UID via BT remote socket...

CVE-2021-25450

Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Sep-2021 Release 1 allows attackers to write file as system uid via remote socket...

Path traversal

Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Sep-2021 Release 1 allows attackers to write file as system uid via remote socket...

CVE-2021-25450

Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Sep-2021 Release 1 allows attackers to write file as system uid via remote socket...

PT-2021-16640

Name of the Vulnerable Software and Affected Versions: FactoryAirCommnadManger versions prior to SMR Sep-2021 Release 1 Description: The issue allows attackers to write files as system uid via a remote socket, exploiting a path traversal vulnerability. Recommendations: For versions prior to SMR...

Samsung SMR path traversal vulnerability

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. Samsung SMR suffers from a path traversal vulnerability that stems from a path traversal vulnerability in FactoryAirCommnadManger prior to the September 2021 release of SMR. An...

CVE-2021-25450: Improper Input Validation

Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Sep-2021 Release 1 allows attackers to write file as system uid via remote socket...

CVE-2021-28372

ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek TUTK device given a valid 20-byte uniquely assigned identifier UID. This could result in an attacker hijacking a victim's connection and forcing them into supplying credentials needed to access the...

CVE-2021-28372

ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek TUTK device given a valid 20-byte uniquely assigned identifier UID. This could result in an attacker hijacking a victim's connection and forcing them into supplying credentials needed to access the...

CVE-2021-28372

ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek TUTK device given a valid 20-byte uniquely assigned identifier UID. This could result in an attacker hijacking a victim's connection and forcing them into supplying credentials needed to access the...

CVE-2021-28372: Authentication Bypass by Spoofing

ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek TUTK device given a valid 20-byte uniquely assigned identifier UID. This could result in an attacker hijacking a victim's connection and forcing them into supplying credentials needed to access the...

Huawei EulerOS: Security Advisory for dbus (EulerOS-SA-2021-2240)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...