PT-2024-5558

Name of the Vulnerable Software and Affected Versions FortiAIOps version 2.0.0 Description The issue is related to multiple cross-site request forgery CSRF vulnerabilities in the graphical user interface of FortiAIOps, which may allow an unauthenticated remote attacker to perform arbitrary action...

PT-2024-5097 · Siemens · Sinema Remote Connect Server

Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Server versions prior to V3.2 SP1 Description: A vulnerability has been identified in the SINEMA Remote Connect Server, related to errors in security mechanisms. This issue allows an unauthenticated attacker to access an...

The vulnerability in the web interface of Netgear DG834Gv5 integrated software for routers allows a hacker to disclose protected information.

The vulnerability in the web-based management interface of Netgear DG834Gv5 integrated software lies in the unencrypted storage of critical information. Exploiting this vulnerability allows an attacker to disclose the protected data remotely...

The vulnerability in the web interface of the Cisco AsyncOS operating system allows a hacker to carry out an XSS attack using the Cisco Secure Email Gateway security system.

The vulnerability in the Cisco AsyncOS operating system’s web interface exists due to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, who has successfully authenticated themselves remotely, to carry out XSS...

The vulnerability of the corporate version of the PowerPanel Enterprise monitoring and power source management system lies in the lack of authentication for critical functions, allowing attackers to gain unauthorized access to the application.

The vulnerability of the corporate version of the PowerPanel Enterprise monitoring and power source management system is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the...

The vulnerability in the web interface of the Cisco AsyncOS operating system allows for XSS attacks by attackers, enabling them to carry out cross-site scripting attacks.

The vulnerability in the Cisco AsyncOS operating system’s web interface exists due to the lack of security measures taken to protect the structure of the web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the web interface of the monitoring and analysis software for network traffic in industrial networks, SINEC Traffic Analyzer, allows a hacker to perform a CSRF attack.

The vulnerability of the web interface of the monitoring and network traffic analysis software in industrial networks, SINEC Traffic Analyzer, is related to the falsification of cross-site requests. Exploiting this vulnerability allows a perpetrator to carry out a CSRF attack using a specially...

The vulnerability in the web interface of PTC Creo Elements/Direct license servers allows a perpetrator to execute arbitrary code.

The vulnerability of the PTC Creo Elements/Direct license server web interface is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2024-32932

Under certain circumstances the web interface users credentials may be recovered by an authenticated user...

CVE-2024-32755

Under certain circumstances the web interface will accept characters unrelated to the expected input...

CVE-2024-32932

CVE-2024-32932 affects Johnson Controls Illustra Essentials Gen 4 (Illustra.Ess4.01.02.10.5982 and earlier). The issue stems from storing web interface user passwords in a recoverable format, enabling an authenticated user to recover credentials under certain conditions (CWE-257). CVSS v3.1 base ...

CVE-2024-32932 American Dynamics Illustra Essentials Gen 4 - Reversible User Credential - stored web interface

Under certain circumstances the web interface users credentials may be recovered by an authenticated user...

CVE-2024-32932 American Dynamics Illustra Essentials Gen 4 - Reversible User Credential - stored web interface

Under certain circumstances the web interface users credentials may be recovered by an authenticated user...

CVE-2024-32755 American Dynamics Illustra Essentials Gen 4 - Log Filter Input Validation

Under certain circumstances the web interface will accept characters unrelated to the expected input...

CVE-2024-32755

CVE-2024-32755 affects Johnson Controls Illustra Essentials Gen 4 (Illustra.Ess4.x) where the web interface improperly handles input, accepting characters unrelated to expected input. Technical sources (ICS/CISA advisory and vendor notices) confirm the vulnerability stems from improper input vali...

CVE-2024-32755 American Dynamics Illustra Essentials Gen 4 - Log Filter Input Validation

Under certain circumstances the web interface will accept characters unrelated to the expected input...

PT-2024-24828 · Johnson Controls · American Dynamics Illustra Essentials Gen 4 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The web interface may accept characters unrelated to the expected input under certain circumstances. Recommendations: At the moment, there is no information about a newer version that...

Johnson Controls Illustra Essentials Gen 4 Security Vulnerability

Johnson Controls Illustra Essentials Gen 4 is a bullet camera from Johnson Controls, Inc. A security vulnerability exists in Johnson Controls Illustra Essentials Gen 4 Illustra.Ess4.01.02.10.5982 and prior versions, which stems from improper input validation, where the web interface accepts...

Johnson Controls Illustra Essentials Gen 4 Security Vulnerability

Johnson Controls Illustra Essentials Gen 4 is a bullet camera from Johnson Controls USA. A security vulnerability exists in Johnson Controls Illustra Essentials Gen 4 Illustra.Ess4.01.02.10.5982 and prior versions, which originates from the possibility that an authenticated user could recover web...

CVE-2024-28794

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 286831...