Cross-site scripting (XSS) vulnerability in the Schneider Electric PowerLogic PM8ECC module before 2.651 for PowerMeter 800 devices allows remote attackers to inject arbitrary web script or HTML via. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
XSS
Schneider Electric
Powerlogic Pm8Ecc Firmware
NVD
CVSS 3.0
6.1
EPSS
0.3%
Alertus Desktop Notification before 2.9.31.1710 on OS X uses weak permissions for configuration files and unspecified other files, which allows local users to suppress emergency notifications or. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.
Privilege Escalation
Alertus Desktop Notification For Os X
NVD
CVSS 3.0
4.4
EPSS
0.2%