CVE-2021-20596

CVE-2021-20596 affects Mitsubishi Electric MELSEC-F Series MELSEC-F FX3U-ENET family (FX3U-ENET, FX3U-ENET-L, FX3U-ENET-P502) with firmware versions 1.14 and prior. The vulnerability is a NULL pointer dereference in the Ethernet interface block that allows a remote unauthenticated attacker to cau...

PT-2021-14067

Name of the Vulnerable Software and Affected Versions: MELSEC-F Series FX3U-ENET firmware versions 1.14 and prior MELSEC-F Series FX3U-ENET-L firmware versions 1.14 and prior MELSEC-F Series FX3U-ENET-P502 firmware versions 1.14 and prior Description: A NULL Pointer Dereference issue allows a...

CVE-2021-20596: NULL Pointer Dereference

NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502 firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a DoS condition in communication by sending specially crafted...

PT-2021-4033

Name of the Vulnerable Software and Affected Versions TCExam versions prior to 14.8.4 Description A reflected cross-site scripting issue exists due to improper validation of the paths provided in the f, d, and dir parameters in tce filemanager.php. This could cause reflected XSS via the unsanitiz...

PT-2021-4018

Name of the Vulnerable Software and Affected Versions TCExam versions prior to 14.8.5 Description A reflected cross-site scripting issue exists due to improper validation of paths provided in the f, d, and dir parameters in tce select mediafile.php. This could cause reflected XSS via unsanitized...

ICS Focused Malware

Updated July 20, 2021: The U.S. Government attributes this activity to Russian nation-state cyber actors and assess that Russian nation-state cyber actors deployed Havex malware against industrial control systems. For more information on Russian malicious cyber activity, refer...

Mitsubishi Electric MELSEC-F Series

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: MELSEC-F Series Vulnerability: NULL Pointer Dereference 2. RISK EVALUATION Successful exploitation of this vulnerability may cause a denial-of-service condition in...

CVE-2021-33540

In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists...

CVE-2021-33540

The CVE affects Phoenix Contact AXL F BK and IL BK devices, where an undocumented password-protected FTP access to the root directory exists. The root cause is an insecure/undocumented FTP auth path, enabling access to the device’s root filesystem. The available data indicate a high-severity impa...

Phoenix Contact AXL F BK and IL BK 信任管理问题漏洞

Phoenix Contact AXL F BK PN is a bus coupler from Phoenix Contact, Germany. A security vulnerability exists in the Phoenix Contact AXL F BK and IL BK that stems from the program having undocumented password-protected FTP access to the root directory...

CVE-2021-33540: Use of Hard-coded Credentials

In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists...

PT-2021-20187

Name of the Vulnerable Software and Affected Versions Phoenix Contact AXL F BK and IL BK product families affected versions not specified Description The issue concerns an undocumented password-protected FTP access to the root directory in certain devices. There is no information provided about t...

CVE-2021-33572

A Denial-of-Service DoS vulnerability was discovered in F-Secure Linux Security whereby the FSAVD component used in certain F-Secure products can crash while scanning larger packages/fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in...

Denial of service

A Denial-of-Service DoS vulnerability was discovered in F-Secure Linux Security whereby the FSAVD component used in certain F-Secure products can crash while scanning larger packages/fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in...

CVE-2021-33572

CVE-2021-33572 is a DoS vulnerability in the FSAVD component of F-Secure Linux Security. The FSAVD process can crash when scanning larger packages or fuzzed files, with a remote attacker able to trigger the issue and cause DoS of the Anti-Virus engine. The provided sources do not specify affected...

CVE-2021-33572 Denial-of-Service (DoS) Vulnerability

A Denial-of-Service DoS vulnerability was discovered in F-Secure Linux Security whereby the FSAVD component used in certain F-Secure products can crash while scanning larger packages/fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in...

CVE-2021-33572: NULL Pointer Dereference

A Denial-of-Service DoS vulnerability was discovered in F-Secure Linux Security whereby the FSAVD component used in certain F-Secure products can crash while scanning larger packages/fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in...

PT-2021-20209

Name of the Vulnerable Software and Affected Versions F-Secure Linux Security affected versions not specified Description A Denial-of-Service DoS issue was found in the FSAVD component, which can crash when scanning larger or fuzzed files. This can be triggered remotely, resulting in a...

PT-2021-28300

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a negative-size-param, which occurs in the mrb str format function, called by mrb f sprintf and mrb vm exec...

F-Secure antivirus 代码问题漏洞

F-secure F-Secure Anti-Virus is a suite of antivirus software from the Finnish company F-Secure F-secure. The software integrates several virus monitoring engines for real-time virus scanning of the operating system and provides powerful background management features. A security vulnerability...