|
249191
|
6.1 |
MEDIUM
Network
|
osnexus
|
quantastor
|
On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, if the REST call invoked does not exist, an error will be triggered containing the invalid method previously invoked. The response sent to…
|
CWE-79
Cross-site Scripting
|
CVE-2017-9979
|
2024-11-21 12:37 |
2017-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249192
|
5.3 |
MEDIUM
Network
|
osnexus
|
quantastor
|
On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, a flaw was found with the error message sent as a response for users that don't exist on the system. An attacker could leverage this infor…
|
CWE-200
Information Exposure
|
CVE-2017-9978
|
2024-11-21 12:37 |
2017-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249193
|
7.8 |
HIGH
Local
|
siemens
|
sipass_integrated
|
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to the SiPass integrated server or SiPass integrated client to p…
|
NVD-CWE-noinfo
|
CVE-2017-9942
|
2024-11-21 12:37 |
2017-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249194
|
7.4 |
HIGH
Network
|
siemens
|
sipass_integrated
|
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker in a Man-in-the-Middle position between the SiPass integrated server and SiPass in…
|
NVD-CWE-noinfo
|
CVE-2017-9941
|
2024-11-21 12:37 |
2017-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249195
|
8.1 |
HIGH
Network
|
siemens
|
sipass_integrated
|
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with access to a low-privileged user account to read or write files on the file sy…
|
CWE-269
Improper Privilege Management
|
CVE-2017-9940
|
2024-11-21 12:37 |
2017-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249196
|
9.8 |
CRITICAL
Network
|
siemens
|
sipass_integrated
|
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with network access to the SiPass integrated server to bypass the authentication m…
|
CWE-287
Improper Authentication
|
CVE-2017-9939
|
2024-11-21 12:37 |
2017-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249197
|
7.5 |
HIGH
Network
|
siemens
|
simatic_logon
|
A vulnerability was discovered in Siemens SIMATIC Logon (All versions before V1.6) that could allow specially crafted packets sent to the SIMATIC Logon Remote Access service on port 16389/tcp to caus…
|
CWE-20
Improper Input Validation
|
CVE-2017-9938
|
2024-11-21 12:37 |
2017-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249198
|
7.5 |
HIGH
Network
|
sma
|
sunny_boy_3600_firmware sunny_boy_5000_firmware sunny_tripower_core1_firmware sunny_tripower_15000tl_firmware sunny_tripower_20000tl_firmware sunny_tripower_25000tl_firmware sunny_t…
|
An issue was discovered in SMA Solar Technology products. An attacker can change the plant time even when not authenticated in any way. This changes the system time, possibly affecting lockout polici…
|
NVD-CWE-noinfo
|
CVE-2017-9864
|
2024-11-21 12:37 |
2017-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249199
|
8.8 |
HIGH
Network
|
sma
|
sunny_boy_3600_firmware sunny_boy_5000_firmware sunny_tripower_core1_firmware sunny_tripower_15000tl_firmware sunny_tripower_20000tl_firmware sunny_tripower_25000tl_firmware sunny_t…
|
An issue was discovered in SMA Solar Technology products. If a user simultaneously has Sunny Explorer running and visits a malicious host, cross-site request forgery can be used to change settings in…
|
CWE-352
Origin Validation Error
|
CVE-2017-9863
|
2024-11-21 12:37 |
2017-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249200
|
7.5 |
HIGH
Network
|
sma
|
sunny_explorer
|
An issue was discovered in SMA Solar Technology products. When signed into Sunny Explorer with a wrong password, it is possible to create a debug report, disclosing information regarding the applicat…
|
CWE-200
Information Exposure
|
CVE-2017-9862
|
2024-11-21 12:37 |
2017-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|