Archive
24 July 2014
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
Medium 4.6
Omron NS Series HMI Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.
-
Medium 4.0
Omron NS Series HMI Improper Neutralization of Input During Web Page Generation
Cross-site scripting (XSS) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to inject arbitrary web script or HTML via crafted data.
-
Medium 5.0
OleumTech WIO Family Improper Input Validation
OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules allow remote attackers to execute arbitrary code via packets that report a high battery voltage.