IBM PowerSC 1.3, 2.0, and 2.1 fails to properly restrict access to a URL or resource, which may allow a remote attacker to obtain unauthorized access to application functionality and/or resources. IBM X-Force ID: 275115.
AFFECTED_PRODUCTS:
IBM Powersc,
IBM Powersc,
IBM Powersc
IBM PowerSC 1.3, 2.0, and 2.1 uses single-factor authentication which can lead to unnecessary risk of compromise when compared with the benefits of a dual-factor authentication scheme. IBM X-Force ID: 275114.
AFFECTED_PRODUCTS:
IBM Powersc,
IBM Powersc,
IBM Powersc
IBM PowerSC 1.3, 2.0, and 2.1 may allow a remote attacker to view session identifiers passed via URL query strings. IBM X-Force ID: 275110.
AFFECTED_PRODUCTS:
IBM Powersc,
IBM Powersc,
IBM Powersc
Zoho ManageEngine ADAudit Plus through 7250 allows SQL Injection in the aggregate report feature.
AFFECTED_PRODUCTS:
Zohocorp Manageengine Adaudit Plus,
Zohocorp Manageengine Adaudit Plus
Zoho ManageEngine ADAudit Plus through 7250 is vulnerable to SQL Injection in the report export option.
AFFECTED_PRODUCTS:
Zohocorp Manageengine Adaudit Plus,
Zohocorp Manageengine Adaudit Plus
A vulnerability in Solar-Log Base 15 Firmware 6.0.1 Build 161, and possibly other Solar-Log Base products, allows an attacker to escalate their privileges by exploiting a stored cross-site scripting (XSS) vulnerability in the switch group function under /#ilang=DE&b=c_smartenergy_swgroups in the web...
AFFECTED_PRODUCTS:
Solar-Log 2000 Pm\+ Firmware
IBM Maximo Asset Management 7.6.1.3 could allow a remote attacker to log into the admin panel due to improper access controls. IBM X-Force ID: 255073.
AFFECTED_PRODUCTS:
IBM Maximo Asset Management
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Edge Chromium
IBM PowerSC 1.3, 2.0, and 2.1 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. IBM X-Force ID: 275130.
AFFECTED_PRODUCTS:
IBM Powersc,
IBM Powersc,
IBM Powersc
IBM PowerSC 1.3, 2.0, and 2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 275117.
AFFECTED_PRODUCTS:
IBM Powersc,
IBM Powersc,
IBM Powersc
IBM PowerSC 1.3, 2.0, and 2.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 275116.
AFFECTED_PRODUCTS:
IBM Powersc,
IBM Powersc,
IBM Powersc
IBM PowerSC 1.3, 2.0, and 2.1 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 275113.
AFFECTED_PRODUCTS:
IBM Powersc,
IBM Powersc,
IBM Powersc
IBM PowerSC 1.3, 2.0, and 2.1 uses insecure HTTP methods which could allow a remote attacker to perform unauthorized file request modification. IBM X-Force ID: 275109.
AFFECTED_PRODUCTS:
IBM Powersc,
IBM Powersc,
IBM Powersc
IBM PowerSC 1.3, 2.0, and 2.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 275107.
AFFECTED_PRODUCTS:
IBM Powersc,
IBM Powersc,
IBM Powersc
In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can append path traversal characters to the filename when using a specific command, allowing them to read arbitrary files from the system.
AFFECTED_PRODUCTS:
Rapidscada Rapid Scada
In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to the Scada directory. This may allow privilege escalation.
AFFECTED_PRODUCTS:
Rapidscada Rapid Scada
In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product stores plaintext credentials in various places. This may allow an attacker with local access to see them.
AFFECTED_PRODUCTS:
Rapidscada Rapid Scada
In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product responds back with an error message containing sensitive data if it receives a specific malformed request.
AFFECTED_PRODUCTS:
Rapidscada Rapid Scada
In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can redirect users to malicious pages through the login page.
AFFECTED_PRODUCTS:
Rapidscada Rapid Scada
In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the product uses hard-coded credentials, which may allow an attacker to connect to a specific port.
AFFECTED_PRODUCTS:
Rapidscada Rapid Scada
IBM PowerSC 1.3, 2.0, and 2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 275129.
AFFECTED_PRODUCTS:
IBM Powersc,
IBM Powersc,
IBM Powersc
Crafatar serves Minecraft avatars based on the skin for use in external applications. Files outside of the `lib/public/` directory can be requested from the server. Instances running behind Cloudflare (including crafatar.com) are not affected. Instances using the Docker container as shown in the REA...
AFFECTED_PRODUCTS:
Crafatar Crafatar
Cross Site Scripting vulnerability in the input parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL.
AFFECTED_PRODUCTS:
Eyoucms Eyoucms
Cross Site Scripting vulnerability in the path parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL.
AFFECTED_PRODUCTS:
Eyoucms Eyoucms
Cross Site Scripting vulnerability in num parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL.
AFFECTED_PRODUCTS:
Eyoucms Eyoucms
Cross Site Scripting (XSS) vulnerability in is_water parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL.
AFFECTED_PRODUCTS:
Eyoucms Eyoucms
Cross Site Scripting (XSS) vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL.
AFFECTED_PRODUCTS:
Eyoucms Eyoucms
In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can supply a malicious configuration file by utilizing a Zip Slip vulnerability in the unpacking routine to achieve remote code execution.
AFFECTED_PRODUCTS:
Rapidscada Rapid Scada
The cloud provider MachineSense uses for integration and deployment for multiple MachineSense devices, such as the programmable logic controller (PLC), PumpSense, PowerAnalyzer, FeverWarn, and others is insufficiently protected against unauthorized access. An attacker with access to the internal pr...
The MachineSense application programmable interface (API) is improperly protected and can be accessed without authentication. A remote attacker could retrieve and modify sensitive information without any authentication.
MachineSense FeverWarn Raspberry Pi-based devices lack input sanitization, which could allow an attacker on an adjacent network to send a message running commands or could overflow the stack.
MachineSense devices use unauthenticated MQTT messaging to monitor devices and remote viewing of sensor data by users.
MachineSense FeverWarn devices are configured as Wi-Fi hosts in a way that attackers within range could connect to the device's web services and compromise the device.
Multiple MachineSense devices have credentials unable to be changed by the user or administrator.
Delegated Admin Privilege virtual attribute provider plugin, when enabled, allows an authenticated user to elevate their permissions in the Directory Server.
AFFECTED_PRODUCTS:
Pingidentity Pingdirectory,
Pingidentity Pingdirectory,
Pingidentity Pingdirectory
... (+4)
discourse-group-membership-ip-block is a discourse plugin that adds support for adding users to groups based on their IP address. discourse-group-membership-ip-block was sending all group custom fields to the client, including group custom fields from other plugins which may expect their custom fiel...
Gessler GmbH WEB-MASTER user account is stored using a weak hashing algorithm. The attacker can restore the passwords by breaking the hashes stored on the device.
AFFECTED_PRODUCTS:
Gesslergmbh Web Master Firmware
Gessler GmbH WEB-MASTER has a restoration account that uses weak hard coded credentials and if exploited could allow an attacker control over the web management of the device.
AFFECTED_PRODUCTS:
Gesslergmbh Web Master Firmware
In Helix Sync versions prior to 2024.1, a local command injection was identified. Reported by Bryan Riggins.
AFFECTED_PRODUCTS:
Perforce Helix Sync
Objectplanet Opinio version 7.22 and prior uses a cryptographically weak pseudo-random number generator (PRNG) coupled to a predictable seed, which could lead to an unauthenticated account takeover of any user on the application.
AFFECTED_PRODUCTS:
Objectplanet Opinio
ConnectWise ScreenConnect through 23.8.4 allows man-in-the-middle attackers to achieve remote code execution via crafted messages.
AFFECTED_PRODUCTS:
Connectwise ScreenConnect
ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers via implicit trust of proxy settings
AFFECTED_PRODUCTS:
Connectwise ScreenConnect
A stored cross-site scripting (XSS) vulnerability in Travel Journal Using PHP and MySQL with Source Code v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Share Your Moments parameter at /travel-journal/write-journal.php.
AFFECTED_PRODUCTS:
Remyandrade Travel Journal Using Php And Mysql With Source Code
A stored cross-site scripting (XSS) vulnerability in Travel Journal Using PHP and MySQL with Source Code v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the location parameter at /travel-journal/write-journal.php.
AFFECTED_PRODUCTS:
Remyandrade Travel Journal Using Php And Mysql With Source Code
The Pixee Java Code Security Toolkit is a set of security APIs meant to help secure Java code. `ZipSecurity#isBelowCurrentDirectory` is vulnerable to a partial-path traversal bypass. To be vulnerable to the bypass, the application must use toolkit version <=1.1.1, use ZipSecurity as a guard against...
AFFECTED_PRODUCTS:
Pixee Java Code Security Toolkit
Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2...
AFFECTED_PRODUCTS:
Openexr Openexr
GLPI is a Free Asset and IT Management Software package. A malicious URL can be used to execute XSS on reports pages. Upgrade to 10.0.12.
AFFECTED_PRODUCTS:
Glpi-Project Glpi
When SEW-EURODRIVE MOVITOOLS MotionStudio processes XML information unrestricted file access can occur.
AFFECTED_PRODUCTS:
Seweurodrive Movitools Motionstudio
GLPI is a Free Asset and IT Management Software package. When authentication is made against a LDAP, the authentication form can be used to perform LDAP injection. Upgrade to 10.0.12.
AFFECTED_PRODUCTS:
Glpi-Project Glpi
Statamic is a Laravel and Git powered CMS. HTML files crafted to look like jpg files are able to be uploaded, allowing for XSS. This affects the front-end forms with asset fields without any mime type validation, asset fields in the control panel, and asset browser in the control panel. Additionally...
AFFECTED_PRODUCTS:
Statamic Statamic,
Statamic Statamic