An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01.
AFFECTED_PRODUCTS:
Korenix Jetnet 5310g Firmware,
Korenix Jetnet 4508 Firmware,
Korenix Jetnet 4508i W Firmware
... (+41)
An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01.
AFFECTED_PRODUCTS:
Korenix Jetnet 5310g Firmware,
Korenix Jetnet 4508 Firmware,
Korenix Jetnet 4508i W Firmware
... (+41)
A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcenter Visualization V14.1 (All versions < V14.1.0.12), Teamcenter Visualization V14.2 (All versions < V14.2.0.9), Teamcenter Visualization V14.3 (All versions < V...
AFFECTED_PRODUCTS:
Siemens Jt2go,
Siemens Teamcenter Visualization,
Siemens Teamcenter Visualization
... (+2)
A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcenter Visualization V14.1 (All versions < V14.1.0.12), Teamcenter Visualization V14.2 (All versions < V14.2.0.9), Teamcenter Visualization V14.3 (All versions < V...
AFFECTED_PRODUCTS:
Siemens Jt2go,
Siemens Teamcenter Visualization,
Siemens Teamcenter Visualization
... (+2)
A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcenter Visualization V14.1 (All versions < V14.1.0.12), Teamcenter Visualization V14.2 (All versions < V14.2.0.9), Teamcenter Visualization V14.3 (All versions < V...
AFFECTED_PRODUCTS:
Siemens Jt2go,
Siemens Teamcenter Visualization,
Siemens Teamcenter Visualization
... (+2)
A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcenter Visualization V14.1 (All versions < V14.1.0.12), Teamcenter Visualization V14.2 (All versions < V14.2.0.9), Teamcenter Visualization V14.3 (All versions < V...
AFFECTED_PRODUCTS:
Siemens Jt2go,
Siemens Teamcenter Visualization,
Siemens Teamcenter Visualization
... (+2)
A vulnerability has been identified in SIMATIC IPC1047E (All versions with maxView Storage Manager < V4.14.00.26068 on Windows), SIMATIC IPC647E (All versions with maxView Storage Manager < V4.14.00.26068 on Windows), SIMATIC IPC847E (All versions with maxView Storage Manager < V4.14.00.26068 on Win...
AFFECTED_PRODUCTS:
Microchip Maxview Storage Manager
Network port 8899 open in WiFi firmware of BCC101/BCC102/BCC50 products, that allows an attacker to connect to the device via same WiFi network.
AFFECTED_PRODUCTS:
Bosch Bcc101 Firmware,
Bosch Bcc102 Firmware,
Bosch Bcc50 Firmware
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate installation" system state of the affected application uses default credential with admin privileges. An attacker could use the credentials to gain complete control of the affected device.
AFFECTED_PRODUCTS:
Siemens Simatic Cn 4100
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The affected application allows IP configuration change without authentication to the device. This could allow an attacker to cause denial of service condition.
AFFECTED_PRODUCTS:
Siemens Simatic Cn 4100
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate installation" system state of the affected application allows an attacker to add their own login credentials to the device. This allows an attacker to remotely login as root and take control of the device...
AFFECTED_PRODUCTS:
Siemens Simatic Cn 4100
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current pr...
AFFECTED_PRODUCTS:
Siemens Solid Edge Se2023,
Siemens Solid Edge Se2023
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current pr...
AFFECTED_PRODUCTS:
Siemens Solid Edge Se2023,
Siemens Solid Edge Se2023
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current pr...
AFFECTED_PRODUCTS:
Siemens Solid Edge Se2023,
Siemens Solid Edge Se2023
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain a stack overflow vulnerability while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
AFFECTED_PRODUCTS:
Siemens Solid Edge Se2023,
Siemens Solid Edge Se2023
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to execute code in the context of the curr...
AFFECTED_PRODUCTS:
Siemens Solid Edge Se2023,
Siemens Solid Edge Se2023
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the cur...
AFFECTED_PRODUCTS:
Siemens Solid Edge Se2023,
Siemens Solid Edge Se2023
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the cur...
AFFECTED_PRODUCTS:
Siemens Solid Edge Se2023,
Siemens Solid Edge Se2023
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the cur...
AFFECTED_PRODUCTS:
Siemens Solid Edge Se2023,
Siemens Solid Edge Se2023
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
AFFECTED_PRODUCTS:
Siemens Solid Edge Se2023,
Siemens Solid Edge Se2023
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
AFFECTED_PRODUCTS:
Siemens Solid Edge Se2023,
Siemens Solid Edge Se2023
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
AFFECTED_PRODUCTS:
Siemens Solid Edge Se2023,
Siemens Solid Edge Se2023
A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q4). The affected product's sudo configuration permits the local administrative account to execute several entries as root user. This could allow an authenticated local attacker to inject arbitrary code and gain root access.
AFFECTED_PRODUCTS:
Siemens Spectrum Power 7
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.20), CP-8050 MASTER MODULE (All versions < CPCI85 V05.20). The network configuration service of affected devices contains a flaw in the conversion of ipv4 addresses that could lead to an uninitialized variable be...
AFFECTED_PRODUCTS:
Siemens Sicam A8000 Cp 8050 Firmware,
Siemens Sicam A8000 Cp 8031 Firmware
The Spreadsheet::ParseXLSX package before 0.28 for Perl can encounter an out-of-memory condition during parsing of a crafted XLSX document. This occurs because the memoize implementation does not have appropriate constraints on merged cells.
AFFECTED_PRODUCTS:
Tozt Spreadsheet\
Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs to utilize the...
AFFECTED_PRODUCTS:
Qualys Web Application Screening
Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access and access to configure or e...
AFFECTED_PRODUCTS:
Qualys Policy Compliance
In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials.
AFFECTED_PRODUCTS:
Appwrite Command Line Interface
Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function.
AFFECTED_PRODUCTS:
Tenda A18 Firmware
An issue was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Command injection can occur because the system function is used by davinci to unpack language packs without strict filtering of URL strings.
AFFECTED_PRODUCTS:
Trendnet Tv Ip1314pi Firmware
A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading to arbitrary command execution. This occurs because of lack of length validation during an sscanf of a user-entered scale field in the RTSP playback function of davinci.
AFFECTED_PRODUCTS:
Trendnet Tv Ip1314pi Firmware
An issue was discovered in libremote_dbg.so on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Filtering of debug information is mishandled during use of popen. Consequently, an attacker can bypass validation and execute a shell command.
AFFECTED_PRODUCTS:
Trendnet Tv Ip1314pi Firmware
A vulnerability was found in Totolink NR1800X 9.1.0u.6279_B20210910 and classified as critical. Affected by this issue is the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to stack-based buffer overflow. The attack may be launched remotely. The...
AFFECTED_PRODUCTS:
Totolink Nr1800x Firmware
Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs to...
AFFECTED_PRODUCTS:
Qualys Policy Compliance
The Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the name field label and description field label parameter in all versions up to 6.7 (inclusive) due to insufficient input sanitizat...
AFFECTED_PRODUCTS:
Strategy11 Formidable Form Builder
The Formidable Forms plugin for WordPress is vulnerable to HTML injection in versions up to, and including, 6.7. This vulnerability allows unauthenticated users to inject arbitrary HTML code into form fields. When the form data is viewed by an administrator in the Entries View Page, the injected HTM...
AFFECTED_PRODUCTS:
Strategy11 Formidable Form Builder
An issue was discovered in savignano S/Notify before 4.0.2 for Confluence. While an administrative user is logged on, the configuration settings of S/Notify can be modified via a CSRF attack. The injection could be initiated by the administrator clicking a malicious link in an email or by visiting a...
AFFECTED_PRODUCTS:
Savignano S\/notify
An issue was discovered in savignano S/Notify before 2.0.1 for Bitbucket. While an administrative user is logged on, the configuration settings of S/Notify can be modified via a CSRF attack. The injection could be initiated by the administrator clicking a malicious link in an email or by visiting a...
AFFECTED_PRODUCTS:
Savignano S\/notify
An issue was discovered in savignano S/Notify before 4.0.2 for Jira. While an administrative user is logged on, the configuration settings of S/Notify can be modified via a CSRF attack. The injection could be initiated by the administrator clicking a malicious link in an email or by visiting a malic...
AFFECTED_PRODUCTS:
Savignano S Notify
A vulnerability has been found in Totolink N350RT 9.3.5u.6139_B202012 and classified as critical. Affected by this vulnerability is the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument http_host leads to stack-based buffer overflow. The attack can be launched rem...
AFFECTED_PRODUCTS:
Totolink N350rt Firmware
The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.1. This is due to missing or incorrect nonce validation on the contents function. This makes it possible for unauthenticated attackers to update the o...
AFFECTED_PRODUCTS:
Wpmet Metform Elementor Contact Form Builder
The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 9.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-l...
AFFECTED_PRODUCTS:
Maxfoundry Maxbuttons
Under certain conditions the Microsoft Edge browser extension (SAP GUI connector for Microsoft Edge)Â - version 1.0, allows an attacker to access highly sensitive information which would otherwise be restricted causing high impact on confidentiality.
AFFECTED_PRODUCTS:
SAP Gui Connector
Under certain conditions, Internet Communication Manager (ICM) or SAP Web Dispatcher - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22_EXT, WEBDISP 7.22_EXT, WEBDISP 7.53, WEBDISP 7.54, could allow an attacker to access i...
AFFECTED_PRODUCTS:
SAP NetWeaver,
SAP NetWeaver,
SAP NetWeaver
... (+7)
SAP NetWeaver ABAP Application Server and ABAP Platform do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. An attacker with low privileges can cause limited impact to confidentiality of the application data after successful exploitation.
AFFECTED_PRODUCTS:
SAP Netweaver Application Server Abap,
SAP Netweaver Application Server Abap,
SAP Netweaver Application Server Abap
... (+13)
In SAP Application Interface Framework File Adapter - version 702, a high privilege user can use a function module to traverse through various layers and execute OS commands directly. By this, such user can control the behaviour of the application. This leads to considerable impact on confidentialit...
AFFECTED_PRODUCTS:
SAP Application Interface Framework
SAP S/4HANA Finance for (Advanced Payment Management) - versions SAPSCORE 128, S4CORE 107, does not perform necessary authorization checks. A function import could be triggered allowing the attacker to create in-house bank accounts leading to low impact on the confidentiality of the application.
AFFECTED_PRODUCTS:
SAP S\/4hana Finance,
SAP S\/4hana Finance
Dataiku DSS before 11.4.5 and 12.4.1 has Incorrect Access Control that could lead to a full authentication bypass.
AFFECTED_PRODUCTS:
Dataiku Data Science Studio,
Dataiku Data Science Studio
In Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new installation (in certain installation scenarios) because of a non-unique initial system user password. Although this password must be changed upon the first login, it is possible that an attacker logs in before...
AFFECTED_PRODUCTS:
Gradle Enterprise
An unspecified SQL Injection vulnerability in Ivanti Endpoint Manager released prior to 2022 SU 5 allows an attacker with access to the internal network to execute arbitrary SQL queries and retrieve output without the need for authentication. Under specific circumstances, this may also lead to RCE...
AFFECTED_PRODUCTS:
Ivanti Endpoint Manager,
Ivanti Endpoint Manager