Lucene search
+L

2416 matches found

Positive Technologies
Positive Technologies
added 2024/06/13 12:0 a.m.9 views

PT-2024-37266 · Deep Sea Electronics · Dse855

Name of the Vulnerable Software and Affected Versions: Deep Sea Electronics DSE855 affected versions not specified Description: This issue allows network-adjacent attackers to bypass authentication on affected installations of Deep Sea Electronics DSE855 devices. The specific flaw exists within t...

6.5CVSS6.8AI score0.00603EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/06/13 12:0 a.m.9 views

Deep Sea Electronics DSE855 Security Vulnerability

Deep Sea Electronics DSE855 is a USB to Ethernet communication device from Deep Sea Electronics, UK. A security vulnerability exists in the Deep Sea Electronics DSE855 that stems from a specific flaw in the Web UI that allows access to functions lacking authentication, which could be exploited by...

7.1CVSS6.6AI score0.00778EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/13 12:0 a.m.6 views

Deep Sea Electronics DSE855 Security Vulnerability

Deep Sea Electronics DSE855 is a USB to Ethernet communication device from Deep Sea Electronics, UK. A security vulnerability exists in the Deep Sea Electronics DSE855 that stems from a specific flaw in the Web UI that allows access to functions lacking authentication, which could be exploited by...

6.5CVSS6.6AI score0.00603EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/06/13 12:0 a.m.9 views

PT-2024-37265 · Deep Sea Electronics · Dse855

Name of the Vulnerable Software and Affected Versions: Deep Sea Electronics DSE855 affected versions not specified Description: This issue allows network-adjacent attackers to bypass authentication on affected installations of Deep Sea Electronics DSE855 devices. The specific flaw exists within t...

7.1CVSS6.9AI score0.00778EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/06/13 12:0 a.m.18 views

PT-2024-37261 · Deep Sea Electronics · Dse855

Name of the Vulnerable Software and Affected Versions: Deep Sea Electronics DSE855 affected versions not specified Description: This issue allows network-adjacent attackers to disclose sensitive information on affected installations of Deep Sea Electronics DSE855 devices. The specific flaw exists...

6.5CVSS6.5AI score0.02418EPSS
SaveExploits3References11
CNNVD
CNNVD
added 2024/06/13 12:0 a.m.11 views

Deep Sea Electronics DSE855 Security Vulnerability

Deep Sea Electronics DSE855 is a USB to Ethernet communication device from Deep Sea Electronics, UK. A security vulnerability exists in the Deep Sea Electronics DSE855 that stems from a specific flaw in the Web UI that allows access to functionality lacking authentication, which could be exploite...

6.5CVSS6.5AI score0.02418EPSS
SaveExploits3References2
CNNVD
CNNVD
added 2024/06/11 12:0 a.m.9 views

Siemens SINEC Traffic Analyzer 输入验证错误漏洞

SINEC Traffic Analyzer is an on-premise application that monitors PNIO PROFINET IO communication between controllers and IO devices. The software detects PROFINET communication problems and reports them to the user via Web-UI. An input validation error vulnerability exists in Siemens SINEC Traffi...

7.5CVSS7AI score0.00345EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/06/11 12:0 a.m.7 views

Siemens SINEC Traffic Analyzer 跨站请求伪造漏洞

SINEC Traffic Analyzer is an on-premise application that monitors PNIO PROFINET IO communication between controllers and IO devices. The software detects PROFINET communication problems and reports them to the user via Web-UI. A cross-site request forgery vulnerability exists in Siemens SINEC...

8.5CVSS6.9AI score0.00155EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/06/06 12:0 a.m.8 views

LoLLMs Security Vulnerabilities

LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. A security vulnerability exists in LoLLMs that stems from a path traversal vulnerability in the application...

7.5CVSS6.8AI score0.00881EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/06/06 12:0 a.m.10 views

LoLLMs Security Vulnerabilities

LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. A security vulnerability exists in LoLLMs that stems from a path traversal vulnerability in the application...

9.8CVSS6.8AI score0.01357EPSS
SaveExploits1References3
CNVD
CNVD
added 2024/06/04 12:0 a.m.10 views

IBM Planning Analytics Local Cross-Site Scripting Vulnerability (CNVD-2024-26494)

IBM Planning Analytics is a suite of business planning analytics solutions from International Business Machines IBM. The solution supports automated execution of processes such as business planning, budgeting and analysis. A cross-site scripting vulnerability exists in IBM Planning Analytics Loca...

5.4CVSS6.2AI score0.00249EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/06/04 12:0 a.m.22 views

IBM Planning Analytics Cross-Site Scripting Vulnerability (CNVD-2024-26495)

IBM Planning Analytics is a suite of business planning analytics solutions from International Business Machines IBM. The solution supports automated execution of processes such as business planning, budgeting and analysis. A cross-site scripting vulnerability exists in IBM Planning Analytics Loca...

5.4CVSS6.2AI score0.00249EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/31 1:15 p.m.11 views

CVE-2024-31889

IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 288136...

5.4CVSS5.4AI score0.00249EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/31 1:15 p.m.7 views

CVE-2024-31908

IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

5.4CVSS5.5AI score0.00249EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/31 1:15 p.m.7 views

CVE-2024-31907

IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 289889...

5.4CVSS5.5AI score0.00249EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/05/31 12:0 a.m.10 views

IBM Planning Analytics Local 跨站脚本漏洞

IBM Planning Analytics is a suite of business planning analytics solutions from International Business Machines IBM. The solution supports automated execution of processes such as business planning, budgeting and analysis. A cross-site scripting vulnerability exists in IBM Planning Analytics Loca...

5.4CVSS4.5AI score0.00249EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/05/31 12:0 a.m.14 views

PT-2024-24276 · Ibm · Ibm Planning Analytics Local

Name of the Vulnerable Software and Affected Versions: IBM Planning Analytics Local versions 2.0 through 2.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...

5.4CVSS4.3AI score0.00249EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/05/31 12:0 a.m.7 views

IBM Planning Analytics 跨站脚本漏洞

IBM Planning Analytics is a suite of business planning analytics solutions from International Business Machines IBM. The solution supports automated execution of processes such as business planning, budgeting and analysis. A cross-site scripting vulnerability exists in IBM Planning Analytics Loca...

5.4CVSS4.5AI score0.00249EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/31 12:0 a.m.10 views

IBM Planning Analytics Local 跨站脚本漏洞

IBM Planning Analytics is a suite of business planning analytics solutions from International Business Machines IBM. The solution supports automated execution of processes such as business planning, budgeting and analysis. A cross-site scripting vulnerability exists in IBM Planning Analytics Loca...

6.4CVSS4.5AI score0.00249EPSS
SaveExploits0References3
OSV
OSV
added 2024/05/30 12:15 p.m.9 views

CVE-2022-43575

IBM Aspera Console 3.4.0 through 3.4.2 PL5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 23864...

5.4CVSS5.4AI score0.00249EPSS
SaveExploits0References2
Rows per page
Query Builder