Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2023-1142PUBLISHED: 2023-03-27In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use URL decoding to retrieve system files, credentials, and bypass authentication resulting in privilege escalation.
CVE-2023-1143PUBLISHED: 2023-03-27In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use Lua scripts, which could allow an attacker to remotely execute arbitrary code.
CVE-2023-1144PUBLISHED: 2023-03-27Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contains an improper access control vulnerability in which an attacker can use the Device-Gateway service and bypass authorization, which could result in privilege escalation.
CVE-2023-1145PUBLISHED: 2023-03-27Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a deserialization vulnerability targeting the Device-DataCollect service, which could allow deserialization of requests prior to authentication, resulting in remote code execution.
CVE-2023-1655PUBLISHED: 2023-03-27Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0.
User Rank: Apprentice
3/28/2017 | 11:51:35 AM
Just read your article, Data Visualization: Keeping an Eye on Security. Good job! As a data discovery and visual analytics software company, we here at ADVIZOR Solutions are all about helping people identify the 6 – 8 key questions they want to be able to answer from their data in order to drive the data that's needed, the visual displays that are most appropriate, and the metrics that matter. What's really cool is that, once you've got all that, the visualizations help you "see the stories" and also drive you to questions you may not have thought to ask until you see the data visually. Security visualization is a great application for our software and we are doing a lot of work in this area.