gerhard hechenberger vulnerabilities and exploits

(subscribe to this query)

6.1

CVSSv3

An issue exists in Sage DPW 2020_06_x prior to 2020_06_002. The search field "Kurs suchen" on the page Kurskatalog is vulnerable to Reflected XSS. If the attacker can lure a user into clicking a crafted link, he can execute arbitrary JavaScript code in the user's b...

Sagedpw Sage Dpw

4.6

CVSSv3

A vulnerability in the information storage architecture of several Cisco IP Phone models could allow an unauthenticated, physical malicious user to obtain confidential information from an affected device. This vulnerability is due to unencrypted storage of confidential informatio...

7.5

CVSSv3

In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in several denial-of-service conditions. Running PLC programs may be stopped, memory may be leaked, or further communication clients may be block...

Codesys Plcwinnt Codesys Runtime Toolkit

6.1

CVSSv3

An issue exists in Sage DPW 2020_06_x prior to 2020_06_002. It allows unauthenticated users to upload JavaScript (in a file) via the expenses claiming functionality. However, to view the file, authentication is required. By exploiting this vulnerability, an attacker can persisten...

Sagedpw Sage Dpw

7.5

CVSSv3

Certain NetModule devices have Insecure Password Handling (cleartext or reversible encryption), These models with firmware prior to 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected: NB800, NB1600, NB1601, NB1800, NB1810, NB2700, NB2710, NB2800, NB2810, NB3700, NB3701, NB3710, NB3...

Netmodule Netmodule Router Software

8.8

CVSSv3

An issue exists in Gentics CMS prior to 5.43.1. By uploading a malicious ZIP file, an attacker is able to deserialize arbitrary data and hence can potentially achieve Java code execution.

Gentics Gentics Cms

9.8

CVSSv3

Certain NetModule devices allow Limited Session Fixation via PHPSESSID. These models with firmware prior to 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected: NB800, NB1600, NB1601, NB1800, NB1810, NB2700, NB2710, NB2800, NB2810, NB3700, NB3701, NB3710, NB3711, NB3720, and NB3800.

Netmodule Netmodule Router Software

8.8

CVSSv3

Certain NetModule devices allow credentials via GET parameters to CLI-PHP. These models with firmware prior to 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected: NB800, NB1600, NB1601, NB1800, NB1810, NB2700, NB2710, NB2800, NB2810, NB3700, NB3701, NB3710, NB3711, NB3720, and NB38...

Netmodule Netmodule Router Software

5.4

CVSSv3

An issue exists in Gentics CMS prior to 5.43.1. There is stored XSS in the profile description and in the username.

Gentics Gentics Cms

6.1

CVSSv3

A reflected cross-site scripting (XSS) vulnerability exists in System Diagnostics Manager of B&R Automation Runtime versions >=3.00 and <=C4.93 that enables a remote malicious user to execute arbitrary JavaScript in the context of the users browser session.

Br-automation Automation Runtime

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook