OSIsoft PI Vision Cross-Site Request Forgery Vulnerability

OSIsoft PI Vision is a set of commercialized software application platform based on Ckient/Server structure from OSIsoft, supporting data acquisition, analysis and visualization. A cross-site request forgery vulnerability exists in OSIsoft PI Vision, which can be exploited by an attacker to...

OSIsoft PI Vision Information Disclosure Vulnerability

OSIsoft PI Vision is a set of commercialized software application platform based on Ckient/Server structure from OSIsoft, supporting data acquisition, analysis and visualization. An information disclosure vulnerability exists in OSIsoft PI Vision, which can be exploited by an attacker to obtain a...

OSIsoft PI Vision Access Control Error Vulnerability

OSIsoft PI Vision is a set of commercialized software application platform based on Ckient/Server structure from OSIsoft, supporting data acquisition, analysis and visualization. The OSIsoft PI Vision Access Control Error vulnerability can be exploited by an attacker to return unauthorized tagged...

OSIsoft PI Vision

1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: OSIsoft LLC Equipment: PI Vision Vulnerabilities: Improper Access Control, Cross-site Request Forgery CSRF, Cross-site Scripting, Inclusion of Sensitive Information in Log Files 2. RISK EVALUATION...

CVE-2020-6848

Axper Vision II 4 devices allow XSS via the DEVICENAME aka Device Name parameter to the configWebParams.cgi URI...

CVE-2020-6848

Axper Vision II 4 devices allow XSS via the DEVICENAME aka Device Name parameter to the configWebParams.cgi URI...

Design/Logic Flaw

Axper Vision II 4 devices allow XSS via the DEVICENAME aka Device Name parameter to the configWebParams.cgi URI...

CVE-2020-6848

Axper Vision II 4 devices contain a cross-site scripting (XSS) vulnerability via the DEVICE_NAME parameter to the configWebParams.cgi URI. The available documents repeat this description but provide no affected firmware versions, root-cause details, exploit information, or remediation steps. Ther...

CVE-2020-6848

Axper Vision II 4 devices allow XSS via the DEVICENAME aka Device Name parameter to the configWebParams.cgi URI...

Cisco Vision Dynamic Signage Director Access Control Error Vulnerability

Cisco Vision Dynamic Signage Director is an end-to-end dynamic signage and IPTV solution from Cisco USA. An Access Control Error vulnerability exists in the REST API endpoint in Cisco Vision Dynamic Signage Director Release prior to 6.2 SP2, which stems from a lack of authentication for some API...

Fedora Update for opencv FEDORA-2019-20ef0e76fe

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security Bulletin: A security vulnerability has been identified in openssl shipped with PowerAI Vision

Summary Multiple Vulnerabilities CVE-2019-1547, CVE-2019-1549 and CVE-2019-1563 in openssl package Vulnerability Details CVEID: CVE-2019-1547 DESCRIPTION: Normally in OpenSSL, EC groups always have a cofactor that is used in side channel resistant code paths. However, it is possible to construct ...

Security Bulletin: A security vulnerability has been identified in nginx shipped with PowerAI Vision

Summary Multiple vulnerabilities CVE-2019-9516, CVE-2019-9515, CVE-2019-9517, CVE-2019-9518, CVE-2019-9511, CVE-2019-9513 in nginx Vulnerability Details CVEID: CVE-2019-9516 DESCRIPTION: Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The...

Security Bulletin: A security vulnerability has been identified in Kubernetes shipped with PowerAI Vision

Summary Multiple vulnerabilities CVE-2019-11251, CVE-2019-11253 in Kubernetes package. Vulnerability Details CVEID: CVE-2019-11251 DESCRIPTION: Kubernetes could allow a remote attacker to gain unauthorized access to the system, caused by an error in kubectl cp that allows a combination of two...

Security Bulletin: A security vulnerability has been identified in SQLite shipped with PowerAI Vision

Summary Vulnerability CVE-2019-8457 in SQLite package. Vulnerability Details CVEID: CVE-2019-8457 DESCRIPTION: SQLite3 version 3.6.0 - 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode function when handling invalid rtree tables. CVSS Base score: 5.3 CVSS Temporal Score: See:...

Security Bulletin: A security vulnerability has been identified in nginx shipped with PowerAI Vision

Summary Vulnerability CVE-2019-9512, CVE-2019-9514 in nginx Vulnerability Details CVEID: CVE-2019-9512 DESCRIPTION: Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to buil...

Security Bulletin: A security vulnerability has been identified in Kubernetes shipped with PowerAI Vision

Summary Multiple vulnerabilities CVE-2019-11249, CVE-2019-11247 found in Kubernetes package. Vulnerability Details CVEID: CVE-2019-11249 DESCRIPTION: The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the...

Cisco Vision Dynamic Signage Director CVE-2019-16004 Authentication Bypass Vulnerability

Description Cisco Vision Dynamic Signage Director is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass authentication mechanism and perform unauthorized actions with administrative privileges. This may lead to further attacks. This issue is being tracke...

OpenCV Buffer Overflow Vulnerability (CNVD-2020-01149)

OpenCV is an open source, cross-platform, lightweight computer vision library. A buffer overflow vulnerability exists in the 'persistence' mode in OpenCV version 4.1.0. The vulnerability stems from a networked system or product performing operations in memory without properly validating data...

Security Bulletin: A security vulnerability has been identified in Kubernetes shipped with PowerAI Vision

Summary Vulnerability CVE-2019-11246 in Kubernetes package. Vulnerability Details CVEID: CVE-2019-11246 DESCRIPTION: The kubectl cp command allows copying files between containers and the user's machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar...