integratus systems - vendor_test

integratus systems

Exchange Platform Services

Join Now-Sign Up
Log In

Search Results

vendor_test

IS Security Alerts Advisories

CVE-2007-2674 | Pre Shopping Mall 1.0 detail.php prodid sql injection (EDB-3842 / XFDB-34034)
A vulnerability was found in Pre Shopping Mall 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file detail.php. The manipulation of ... read more
CVE-2023-37232 | Loftware Spectrum up to 4.6 Log information disclosure
A vulnerability, which was classified as problematic, has been found in Loftware Spectrum up to 4.6. This issue affects some unknown processing of the component Log Handler. The manipulation leads ... read more
CVE-2024-45393 | cvat up to 2.17.x authorization (GHSA-p3c9-m7jr-jxxj)
A vulnerability has been found in cvat up to 2.17.x and classified as critical. This vulnerability affects unknown code. The manipulation leads to missing authorization. This vulnerability was named CVE-2024-45393. ... read more
CVE-2024-45044 | Bareos up to 21.1.10/22.1.5/23.0.3 ACL improper authorization (GHSA-jfww-q346-r2r8)
A vulnerability classified as critical has been found in Bareos up to 21.1.10/22.1.5/23.0.3. Affected is an unknown function of the component ACL. The manipulation leads to improper authorization. This vulnerability ... read more
CVE-2023-37233 | Loftware Spectrum up to 4.6 HF13 xml external entity reference
A vulnerability, which was classified as critical, was found in Loftware Spectrum up to 4.6 HF13. Affected is an unknown function. The manipulation leads to xml external entity reference. This ... read more
CVE-2024-45412 | yeti up to 2.1.10 Unicode allocation of resources
A vulnerability classified as problematic was found in yeti up to 2.1.10. This vulnerability affects unknown code of the component Unicode Handler. The manipulation leads to allocation of resources. This ... read more
CVE-2024-45407 | LizardByte Sunshine channel accessible
A vulnerability classified as problematic was found in LizardByte Sunshine. Affected by this vulnerability is an unknown functionality. The manipulation leads to channel accessible by non-endpoint. This vulnerability is known ... read more
CVE-2024-31960 | Samsung Exynos 1480/Exynos 2400 xclipse amdgpu Driver reference count
A vulnerability classified as critical has been found in Samsung Exynos 1480 and Exynos 2400. This affects an unknown part of the component xclipse amdgpu Driver. The manipulation leads to ... read more
CVE-2024-6876 | OSCAT/CODESYS Basic Library up to 3.3.4 out-of-bounds
A vulnerability was found in OSCAT/CODESYS Basic Library up to 3.3.4. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to out-of-bounds ... read more
CVE-2024-42423 | Dell Wyse Proprietary OS 2311/2402 Citrix Workspace App authorization (dsa-2024-229)
A vulnerability was found in Dell Wyse Proprietary OS 2311/2402. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Citrix Workspace App. ... read more
CVE-2024-44815 | Hathway Skyworth Router CM5100 4.1.1.24 SPI flash Firmware W25Q64JV information disclosure
A vulnerability was found in Hathway Skyworth Router CM5100 4.1.1.24. It has been classified as problematic. Affected is an unknown function of the component SPI flash Firmware W25Q64JV. The manipulation ... read more
CVE-2024-43800 | expressjs serve-static up to 1.15.x/2.0.x redirect cross site scripting (GHSA-cm22-4g7w-348p)
A vulnerability was found in expressjs serve-static up to 1.15.x/2.0.x and classified as problematic. This issue affects the function redirect. The manipulation leads to cross site scripting. The identification of ... read more
CVE-2024-44676 | eladmin up to 2.7 LocalStoreController.java cross site scripting
A vulnerability has been found in eladmin up to 2.7 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file LocalStoreController.java. The manipulation leads to ... read more
CVE-2024-25074 | Samsung Exynos Modem 5300 user session
A vulnerability, which was classified as problematic, was found in Samsung Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos ... read more
CVE-2024-25073 | Samsung Exynos Modem 5300 Call Control Module denial of service
A vulnerability, which was classified as problematic, has been found in Samsung Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, ... read more
92.07206
Modified (6)Adware/Fyben!AndroidAdware/RecmAds!AndroidAdware/SpyLoan!AndroidAndroid/Agent.MJI!trAndroid/Banker.DAN!tr.spyAndroid/Hiddad.AYF!tr ... read more
92.07205
Modified (3)Adware/Agent!AndroidAdware/Fyben!AndroidAdware/SMSreg!Android ... read more
CVE-2024-43796 | Express.js fino 4.19.x response.redirect cross site scripting
Un punto di criticita di livello problematico è stato rilevato in Express.js fino 4.19.x. Da questa vulnerabilità è interessato la funzione response.redirect. Mediante la manipolazione di un input sconosciuto conseguenza ... read more
CVE-2024-35282 | Fortinet FortiClientiOS fino 7.2.5 rivelazione di un 'informazione (FG-IR-24-139)
In Fortinet FortiClientiOS fino 7.2.5 è stato trovato un punto critico di livello problematico. É interessato una funzione sconosciuta. Attraverso la manipolazione di un input sconosciuto per mezzo di una ... read more
CVE-2024-43799 | pillarjs send fino 0.18.x HTTP Response sendStream.redirect cross site scripting
Un punto di debole di livello problematico è stato rilevato in pillarjs send fino 0.18.x. É interessato la funzione sendStream.redirect del componente HTTP Response Handler. Per causa della manipolazione di ... read more
SSA-097786 V1.0: Insertion of Sensitive Information into Log File Vulnerability in SINUMERIK systems
<p>SINUMERIK systems, that have been provisioned with Create MyConfig (CMC), are affected by a Insertion of Sensitive Information into Log File vulnerability. When using a CMC package on a NCU ... read more
SSA-869574 V1.0: Multiple Vulnerabilities in SINEMA Remote Connect Server Before V3.2 SP2
<p>SINEMA Remote Connect Server before V3.2 SP2 is affected by multiple vulnerabilities.</p> <p>Siemens has released a new version for SINEMA Remote Connect Client and recommends to update to the latest ... read more
SSA-969738 V1.0: Denial of Service Vulnerability in SIMATIC S7-200 SMART Devices
<p>A vulnerability in SIMATIC S7-200 SMART devices could allow an attacker to cause a denial of service condition if a specially crafted TCP packet is sent to the device.</p> <p>Siemens ... read more
SSA-765405 V1.0: Multiple Vulnerabilities in SIMATIC RFID Readers
<p>SIMATIC RFID Readers contain multiple vulnerabilities that could allow an attacker to cause Denial-of-Service, exploit hidden functionality and information exposure.</p> <p>Siemens has released new versions for the affected products and ... read more
SSA-103653 V1.0: Denial-of-Service Vulnerability in Automation License Manager
<p>A vulnerability was identified in the Automation License Manager software that could be triggered by sending specially crafted packets to port 4410/tcp of an affected system. This could cause a ... read more
SSA-629254 V1.0: Remote Code Execution Vulnerability in SIMATIC SCADA and PCS 7 systems
<p>The products listed below contain a remote code execution vulnerability that could allow an unauthenticated remote attacker to execute arbitrary code with high privileges.</p> <p>Siemens has released new versions for ... read more
SSA-039007 V1.0: Heap-based Buffer Overflow Vulnerability in User Management Component (UMC)
<p>Siemens User Management Component (UMC) is affected by a heap-based buffer overflow vulnerability which could allow an unauthenticated remote attacker arbitrary code execution.</p> <p>Siemens has released new versions for several ... read more
SSA-097435 V1.0: Usernames Disclosure Vulnerability in Mendix Runtime
<p>Mendix Runtime contains an observable response discrepancy vulnerability when validating usernames during authentication. This could allow unauthenticated remote attackers to distinguish between valid and invalid usernames.</p> <p>Siemens has released new ... read more
SSA-721642 V1.0: Injection Vulnerability in SCALANCE W700 802.11 AX Family Before V2.4
<p>Siemens has released new versions for the affected products and recommends to update to the latest versions.</p> ... read more
SSA-417159 V1.0: Multiple Vulnerabilities in SINEMA Remote Connect Client Before V3.2 SP2
<p>SINEMA Remote Connect Client before V3.2 SP2 is affected by multiple vulnerabilities.</p> <p>Siemens has released a new version for SINEMA Remote Connect Client and recommends to update to the latest ... read more
SSA-773256 V1.0: Impact of Socket.IO CVE-2024-38355 on Siemens Industrial Products
<p>A Socket.IO vulnerability affects multiple Siemens industrial products. This vulnerability consists of a specially crafted Socket.IO packet that triggers an uncaught exception on the Socket.IO server killing the Node.js process ... read more
SSA-673996 V1.0: Buffer Overflow Vulnerability in Third-Party Component in SICAM and SITIPE Products
<p>Multiple SICAM products are affected by buffer overflow vulnerability in the IEC 61850 Client libraries from Triangle MicroWorks that could allow an unauthenticated remote attacker to create a denial of ... read more
SSA-427715 V1.0: Stack-Based Buffer Overflow Vulnerability in Tecnomatix Plant Simulation
<p>Siemens Tecnomatix Plant Simulation is affected by a stack-based buffer overflow vulnerability that could be triggered when the application reads files in SPP file format. If a user is tricked ... read more
SSA-446545 V1.0: Impact of RegreSSHion (CVE-2024-6387) in Siemens Industrial Products
<p>An OpenSSH vulnerability, known as regreSSHion, affects multiple Siemens industrial products. This security regression vulnerability consists in a race condition which may allow an unauthenticated remote attacker to achieve remote ... read more
SSA-359713 V1.0: Authorization Bypass Vulnerability in Industrial Edge Management
<p>Industrial Edge Management contains an Authorization Bypass vulnerability that could allow an unauthenticated remote attacker to impersonate other devices onboarded to the system.</p> <p>Siemens has released new versions for the ... read more
SSA-423808 V1.0: Multiple NULL Pointer Dereference Vulnerabilities in Industrial Products
<p>Multiple NULL pointer dereference vulnerabilities in the affected products could allow an attacker with network access to the webserver, to perform a denial of service attack.</p> <p>Siemens has released new ... read more
SSA-342438 V1.0: Privilege Escalation Vulnerability in SINUMERIK ONE, SINUMERIK 840D and SINUMERIK 828D
<p>SINUMERIK ONE, SINUMERIK 840D sl and SINUMERIK 828D are affected by a privilege escalation vulnerability that could allow an authenticated local attacker to escalate their privileges in the underlying system.</p> ... read more
92.07199
Modified (2)Android/Agent.FBE!trAndroid/Banker.CYW!tr.spy ... read more
CVE-2007-2677 | phpChess layout_admin_cfg.php Root_Path Remote Code Execution (EDB-3837 / XFDB-34056)
A vulnerability classified as critical was found in phpChess. Affected by this vulnerability is an unknown functionality of the file layout_admin_cfg.php. The manipulation of the argument Root_Path leads to Remote ... read more
CVE-2024-7698 | Phoenix Contact FL MGUARD 2102 CSRF Token rivelazione di un 'informazione (VDE-2024-039)
È stata rilevata una vulnerabilità di livello problematico in Phoenix Contact FL MGUARD 2102, FL MGUARD 2105, FL MGUARD 4102 PCI, FL MGUARD 4102 PCIE, FL MGUARD 4302, FL MGUARD ... read more
92.07172
Modified (2)Adware/Fyben!AndroidRiskware/Application!Android ... read more
Multiple Alps System Integration products and the OEM products vulnerable to cross-site request forgery
Multiple Alps System Integration products and the OEM products contain a cross-site request forgery vulnerability. ... read more
CVE-2014-6003 | Belasfrasesdeamor Belas Frases de Amor 1.0 X.509 Certificate cryptographic issues (VU#582497)
A vulnerability was found in Belasfrasesdeamor Belas Frases de Amor 1.0. It has been declared as critical. This vulnerability affects unknown code of the component X.509 Certificate Handler. The manipulation ... read more
CVE-2017-13046 | tcpdump up to 4.9.1 BGP Parser print-bgp.c bgp_attr_print memory corruption (Nessus ID 103257 / ID 370625)
A vulnerability, which was classified as critical, has been found in tcpdump up to 4.9.1. This issue affects the function bgp_attr_print of the file print-bgp.c of the component BGP Parser. ... read more
CVE-2017-13045 | Apple macOS up to 10.13.1 tcpdump memory corruption (HT208221 / Nessus ID 100472)
A vulnerability, which was classified as very critical, was found in Apple macOS up to 10.13.1. Affected is an unknown function of the component tcpdump. The manipulation leads to memory ... read more
CVE-2024-8586 | Uniong WebITR bis 2_1_0_27 URL Redirect
In Uniong WebITR bis 2_1_0_27 wurde eine problematische Schwachstelle entdeckt. Dabei geht es um eine nicht genauer bekannte Funktion der Komponente URL Handler. Durch Manipulieren mit unbekannten Daten kann eine ... read more
CVE-2024-45625 | WPMU Forminator Plugin bis 1.34.0 URL Cross Site Scripting
Es wurde eine problematische Schwachstelle in WPMU Forminator Plugin bis 1.34.0 entdeckt. Es geht dabei um eine nicht klar definierte Funktion der Komponente URL Handler. Durch das Manipulieren mit unbekannten ... read more
CVE-2024-8584 | Learning Digital Orca HCM bis 10.x erweiterte Rechte
Eine Schwachstelle wurde in Learning Digital Orca HCM bis 10.x ausgemacht. Sie wurde als kritisch eingestuft. Es geht hierbei um eine nicht näher spezifizierte Funktion. Mittels Manipulieren mit unbekannten Daten ... read more
CVE-2024-8585 | Learning Digital Orca HCM bis 10.x File Download Directory Traversal
In Learning Digital Orca HCM bis 10.x wurde eine Schwachstelle ausgemacht. Sie wurde als kritisch eingestuft. Es geht um eine nicht näher bekannte Funktion der Komponente File Download Handler. Mittels ... read more
CVE-2007-2363 | IrfanView 4.00 memory corruption (EDB-3811 / XFDB-33946)
A vulnerability was found in IrfanView 4.00. It has been classified as very critical. This affects an unknown part. The manipulation leads to memory corruption. This vulnerability is uniquely identified ... read more

integratus systems © 2024

KAVI IS iCOMMEX Platform v 02.25 Friday, September 20, 2024

Login

Login to integratus systems Exchange Platform Services

Forgot password?

Register Now

Hello

Your Account Type is
Your Mail Id is
Your Username is

Security Briefing Search

PDF Library Search

Search

Reset Password

Reset Password

You have no permission to access this content