Page 3 of 24 results (0.004 seconds)

CVSS: 8.7EPSS: 0%CPEs: 3EXPL: 0

CVE-2024-11316 – Filesize Check

https://notcve.org/view.php?id=CVE-2024-11316

05 Dec 2024 — Fileszie Check vulnerabilities allow a malicious user to bypass size limits or overload to the product. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02 • https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch • CWE-770: Allocation of Resources Without Limits or Throttling •

CVSS: 9.9EPSS: 0%CPEs: 3EXPL: 1

CVE-2024-6784 – SSRF Server Side Request Forgery

https://notcve.org/view.php?id=CVE-2024-6784

05 Dec 2024 — Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resources and unintended information disclosure. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02 • https://packetstorm.news/files/id/183078 • CWE-918: Server-Side Request Forgery (SSRF) •

CVSS: 9.3EPSS: 0%CPEs: 3EXPL: 4

CVE-2024-6516 – Cross Site Scripting XSS

https://notcve.org/view.php?id=CVE-2024-6516

05 Dec 2024 — Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a client browser. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02 ABB Cylon Aspect version 3.08.02 suffers from an authenticated blind command injection vulnerability. Input passed to several POST parameters is not properly sanitized when writing files, allowing attackers to execute arbitrary shell commands on the system. There is also an off-by-... • https://packetstorm.news/files/id/183448 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 9.6EPSS: 0%CPEs: 2EXPL: 0

CVE-2024-6515 – unauthorized file access

https://notcve.org/view.php?id=CVE-2024-6515

05 Dec 2024 — Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintended credentails exposure. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02 • https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch • CWE-319: Cleartext Transmission of Sensitive Information •