Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ntication Bypass. See SEL Service Bulletin dated 2022-11-15 for more details. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security-notifications/external-reports/ - https://www.nozominetworks.com/blog/
CVE ID: CVE-2023-31153 State: PUBLISHED Published: 2023-05-10T19:22:06.307Z Last Updated: 2025-01-24T19:05:05.448Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Schweitzer Engineering Laboratories Products: SEL-3505, SEL-3505-3, SEL-3530, SEL-3530-4, SEL-3532, SEL-3555, SEL-3560S, SEL-3560E, SEL-2241 RTAC module, SEL-3350 Problem Types: CWE-79 Description: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.See SEL Service
C) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.See SEL Service Bulletin dated 2022-11-15 for more details. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security-notifications/external-reports/ - https://www.nozominetworks.com/blog/
CVE ID: CVE-2023-31154 State: PUBLISHED Published: 2023-05-10T19:22:18.749Z Last Updated: 2025-01-24T19:05:24.335Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Schweitzer Engineering Laboratories Products: SEL-3505, SEL-3505-3, SEL-3530, SEL-3530-4, SEL-3532, SEL-3555, SEL-3560S, SEL-3560E, SEL-2241 RTAC module, SEL-3350 Problem Types: CWE-79 Description: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Servic
C) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security-notifications/external-reports/ - https://www.nozominetworks.com/blog/
CVE ID: CVE-2023-31155 State: PUBLISHED Published: 2023-05-10T19:22:32.651Z Last Updated: 2025-01-24T19:05:41.753Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Schweitzer Engineering Laboratories Products: SEL-3505, SEL-3505-3, SEL-3530, SEL-3530-4, SEL-3532, SEL-3555, SEL-3560S, SEL-3560E, SEL-2241 RTAC module, SEL-3350 Problem Types: CWE-79 Description: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Servic
CVE ID: CVE-2023-31156 State: PUBLISHED Published: 2023-05-10T19:22:44.225Z Last Updated: 2025-01-24T19:08:49.377Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Schweitzer Engineering Laboratories Products: SEL-3505, SEL-3505-3, SEL-3530, SEL-3530-4, SEL-3532, SEL-3555, SEL-3560S, SEL-3560E, SEL-2241 RTAC module, SEL-3350 Problem Types: CWE-79 Description: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Servic
CVE ID: CVE-2023-31157 State: PUBLISHED Published: 2023-05-10T19:22:58.877Z Last Updated: 2025-01-24T19:09:33.094Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Schweitzer Engineering Laboratories Products: SEL-3505, SEL-3505-3, SEL-3530, SEL-3530-4, SEL-3532, SEL-3555, SEL-3560S, SEL-3560E, SEL-2241 RTAC module, SEL-3350 Problem Types: CWE-79 Description: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Servic
CVE ID: CVE-2023-31158 State: PUBLISHED Published: 2023-05-10T19:23:15.171Z Last Updated: 2025-01-24T19:09:47.546Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Schweitzer Engineering Laboratories Products: SEL-3505, SEL-3505-3, SEL-3530, SEL-3530-4, SEL-3532, SEL-3555, SEL-3560S, SEL-3560E, SEL-2241 RTAC module, SEL-3350 Problem Types: CWE-79 Description: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Servic
CVE ID: CVE-2023-31159 State: PUBLISHED Published: 2023-05-10T19:23:29.182Z Last Updated: 2025-01-24T19:10:07.456Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Schweitzer Engineering Laboratories Products: SEL-3505, SEL-3505-3, SEL-3530, SEL-3530-4, SEL-3532, SEL-3555, SEL-3560S, SEL-3560E, SEL-2241 RTAC module, SEL-3350 Problem Types: CWE-79 Description: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Servic
CVE ID: CVE-2023-31160 State: PUBLISHED Published: 2023-05-10T19:23:43.200Z Last Updated: 2025-01-24T19:19:25.906Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Schweitzer Engineering Laboratories Products: SEL-3505, SEL-3505-3, SEL-3530, SEL-3530-4, SEL-3532, SEL-3555, SEL-3560S, SEL-3560E, SEL-2241 RTAC module, SEL-3350 Problem Types: CWE-79 Description: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Servic
CVE ID: CVE-2023-31161 State: PUBLISHED Published: 2023-05-10T19:24:03.543Z Last Updated: 2025-01-24T19:20:00.256Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Schweitzer Engineering Laboratories Products: SEL-3532, SEL-3555, SEL-3560S, SEL-3560E, SEL-3350 Problem Types: CWE-20 Description: An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow an authenticated remote attacker to use internal resources, allowing a variety of potential effects. See SEL Service Bulletin dated 2022-11-15 for more details. Additional Analyst Notes: - CVE Program Container: - CI
cts. See SEL Service Bulletin dated 2022-11-15 for more details. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security-notifications/external-reports/ - https://www.nozominetworks.com/blog/
CVE ID: CVE-2023-31162 State: PUBLISHED Published: 2023-05-10T19:24:20.480Z Last Updated: 2025-01-24T19:26:55.712Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:L) Vendors: Schweitzer Engineering Laboratories Products: SEL-3505, SEL-3505-3, SEL-3530, SEL-3530-4, SEL-3532, SEL-3555, SEL-3560S, SEL-3560E, SEL-2241 RTAC module, SEL-3350 Problem Types: CWE-20 Description: An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to arbitrarily alter the content of a configuration file. See SEL Service Bulletin dated 2022-11-15 for more details.
r to arbitrarily alter the content of a configuration file. See SEL Service Bulletin dated 2022-11-15 for more details. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security-notifications/external-reports/ - https://www.nozominetworks.com/blog/
CVE ID: CVE-2023-31163 State: PUBLISHED Published: 2023-05-10T19:24:45.965Z Last Updated: 2025-01-24T19:27:13.760Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Schweitzer Engineering Laboratories Products: SEL-3505, SEL-3505-3, SEL-3530, SEL-3530-4, SEL-3532, SEL-3555, SEL-3560S, SEL-3560E, SEL-2241 RTAC module, SEL-3350 Problem Types: CWE-79 Description: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Servic
CVE ID: CVE-2023-31164 State: PUBLISHED Published: 2023-05-10T19:25:16.534Z Last Updated: 2025-01-24T19:27:38.573Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Schweitzer Engineering Laboratories Products: SEL-3505, SEL-3505-3, SEL-3530, SEL-3530-4, SEL-3532, SEL-3555, SEL-3560S, SEL-3560E, SEL-2241 RTAC module, SEL-3350 Problem Types: CWE-79 Description: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Servic
CVE ID: CVE-2023-31165 State: PUBLISHED Published: 2023-05-10T19:25:34.186Z Last Updated: 2025-01-24T19:27:55.295Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Schweitzer Engineering Laboratories Products: SEL-3505, SEL-3505-3, SEL-3530, SEL-3530-4, SEL-3532, SEL-3555, SEL-3560S, SEL-3560E, SEL-2241 RTAC module, SEL-3350 Problem Types: CWE-79 Description: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Servic
CVE ID: CVE-2023-31166 State: PUBLISHED Published: 2023-05-10T19:25:59.606Z Last Updated: 2025-01-24T19:28:19.480Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL-3505, SEL-3505-3, SEL-3530, SEL-3530-4, SEL-3532, SEL-3555, SEL-3560S, SEL-3560E, SEL-2241 RTAC module, SEL-3350 Problem Types: CWE-22 Description: An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to create folders in arbitrary paths of the file system. See SEL
Interface could allow a remote authenticated attacker to create folders in arbitrary paths of the file system. See SEL Service Bulletin dated 2022-11-15 for more details. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security-notifications/external-reports/ - https://www.nozominetworks.com/blog/
CVE ID: CVE-2023-31167 State: PUBLISHED Published: 2023-08-31T15:29:11.745Z Last Updated: 2024-09-27T18:55:28.386Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL-5036 acSELerator Bay Screen Builder Software Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Schweitzer Engineering Laboratories SEL-5036 acSELerator Bay Screen Builder Software on Windows allows Relative Path Traversal. SEL acSELerator Bay Screen Builder software is distributed by SEL-5033 SEL acSELerator RTAC, SEL-5030 Quickset, and SEL Compass. CVE-2023-31167 and was
der software is distributed by SEL-5033 SEL acSELerator RTAC, SEL-5030 Quickset, and SEL Compass. CVE-2023-31167 and was patched in the acSELerator Bay Screen Builder release available on 20230602. Please contact SEL for additional details. This issue affects SEL-5036 acSELerator Bay Screen Builder Software: before 1.0.49152.778. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security-notifications/external-reports/ - https://dragos.com
CVE ID: CVE-2023-31168 State: PUBLISHED Published: 2023-08-31T15:30:14.809Z Last Updated: 2024-09-27T18:52:57.616Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL-5030 acSELerator QuickSet Software Problem Types: CWE-829 Description: An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5030 acSELerator Q
Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5030 acSELerator QuickSet Software: through 7.1.3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security-notifications/external-reports/ - https://www.nozominetworks.com/blog/
CVE ID: CVE-2023-31169 State: PUBLISHED Published: 2023-08-31T15:30:23.541Z Last Updated: 2024-09-27T18:49:59.858Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL-5030 acSELerator QuickSet Software Problem Types: CWE-176 Description: An Improper Handling of Unicode Encoding vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5030 acSELerator QuickSet Software: t
Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5030 acSELerator QuickSet Software: through 7.1.3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security-notifications/external-reports/ - https://www.nozominetworks.com/blog/
CVE ID: CVE-2023-31170 State: PUBLISHED Published: 2023-08-31T15:30:32.665Z Last Updated: 2024-09-27T18:49:02.329Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL-5030 acSELerator QuickSet Software Problem Types: CWE-829 Description: An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5030 acSELerator Q
CVE ID: CVE-2023-31171 State: PUBLISHED Published: 2023-08-31T15:30:41.030Z Last Updated: 2024-09-27T18:48:28.691Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL-5030 acSELerator QuickSet Software Problem Types: CWE-89 Description: An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue aff
orized device operator. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5030 acSELerator QuickSet Software: through 7.1.3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security-notifications/external-reports/ - https://www.nozominetworks.com/blog/
CVE ID: CVE-2023-31172 State: PUBLISHED Published: 2023-08-31T15:30:49.213Z Last Updated: 2024-09-27T18:42:58.512Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL-5030 acSELerator QuickSet Software Problem Types: CWE-791 Description: An Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5030 acSELerator QuickSet Software
ual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5030 acSELerator QuickSet Software: through 7.1.3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security-notifications/external-reports/ - https://www.nozominetworks.com/blog/
CVE ID: CVE-2023-31173 State: PUBLISHED Published: 2023-08-31T15:30:58.262Z Last Updated: 2024-10-01T17:21:39.818Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL-5037 SEL Grid Configurator Problem Types: CWE-798 Description: Use of Hard-coded Credentials vulnerability in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator on Windows allows Authentication Bypass. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
d Configurator: before 4.5.0.20. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security-notifications/external-reports/ - https://www.nozominetworks.com/blog/
CVE ID: CVE-2023-31174 State: PUBLISHED Published: 2023-08-31T15:31:26.657Z Last Updated: 2024-09-30T15:47:25.305Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL-5037 SEL Grid Configurator Problem Types: CWE-352 Description: A Cross-Site Request Forgery (CSRF) vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20. Additional Anal
x E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security-notifications/external-reports/ - https://www.nozominetworks.com/blog/
CVE ID: CVE-2023-31175 State: PUBLISHED Published: 2023-08-31T15:31:33.536Z Last Updated: 2024-10-01T17:03:31.524Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Schweitzer Engineering Laboratories Products: SEL-5037 SEL Grid Configurator Problem Types: CWE-250 Description: An Execution with Unnecessary Privileges vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run system commands with the highest level privilege on the system. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20. Additional Analyst
dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security-notifications/external-reports/ - https://www.nozominetworks.com/blog/
CVE ID: CVE-2023-31176 State: PUBLISHED Published: 2023-11-30T16:53:11.383Z Last Updated: 2024-10-16T19:21:05.142Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL-451 Problem Types: CWE-331 Description: An Insufficient Entropy vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow an unauthenticated remote attacker to brute-force session tokens and bypass authentication. See product Instruction Manual Appendix A dated 20230830 for more details. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security-notifications/externa
CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security-notifications/external-reports/ - https://www.nozominetworks.com/blog/
CVE ID: CVE-2023-31177 State: PUBLISHED Published: 2023-11-30T16:53:34.046Z Last Updated: 2024-08-02T14:45:25.869Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Schweitzer Engineering Laboratories Products: SEL-451 Problem Types: CWE-79 Description: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the Schweitzer Engineering Laboratories SEL-451 could allow an attacker to craft a link that could execute arbitrary code on a victim's system. See product Instruction Manual Appendix A dated 20230830 for more details. Additional Analyst Notes: - CVE Program Container: References: - https://selinc.com/support/security-not
r more details. Additional Analyst Notes: - CVE Program Container: References: - https://selinc.com/support/security-notifications/external-reports/ - https://www.nozominetworks.com/blog/
CVE ID: CVE-2023-31178 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-02-03T20:04:25.987Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: AgilePoint Products: NX Problem Types: Arbitrary File Delete Description: AgilePoint NX v8.0 SU2.2 & SU2.3 – Arbitrary File Delete Vulnerability allows arbitrary file deletion, by an unspecified request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-31179 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-02-03T20:06:21.732Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: AgilePoint Products: NX Problem Types: CWE-22 Description: AgilePoint NX v8.0 SU2.2 & SU2.3 - Path traversal - Vulnerability allows path traversal and downloading files from the server, by an unspecified request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-31180 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T16:23:49.906Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: WJJ Software Products: InnoKB Server, InnoKB/Console Problem Types: CWE-79 Description: WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - Reflected cross-site scripting (RXSS) through an unspecified request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories