CVE-2021-32996

CVE-2021-32996 affects FANUC R-30iA/R-30iB family controllers (and related mate/Plus variants) as documented by ICS-TIP and CISA: vulnerable component is integer coercion (CWE-192) that can crash the device, with a related out-of-bounds write (CWE-787) potentially enabling remote code execution. ...

CVE-2021-32996

The FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to crash. A restart is required...

CVE-2021-32998: Out-of-bounds Write

The FANUC R-30iA and R-30iB series controllers are vulnerable to an out-of-bounds write, which may allow an attacker to remotely execute arbitrary code. INIT START/restore from backup required...

PT-2022-15330

Name of the Vulnerable Software and Affected Versions Bixby Routines versions prior to 3.1.21.8 Description A vulnerability in Bixby Routines allows attackers to execute privileged actions by hijacking and modifying the intent using PendingIntent. This issue affects devices running Android R 11.0...

CVE-2022-22285: Improper Control of Generation of Code

A vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R11.0 and 12.3.02.1000 in Android S12.0 allows attackers to execute privileged action by hijacking and modifying the intent...

CVE-2021-32996: Integer Coercion Error

The FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to crash. A restart is required...

PT-2022-10181

Name of the Vulnerable Software and Affected Versions FANUC R-30iA series controllers affected versions not specified FANUC R-30iB series controllers affected versions not specified Description The issue is related to integer coercion errors, which can cause the device to crash, requiring a...

PT-2022-10183

Name of the Vulnerable Software and Affected Versions FANUC R-30iA series controllers affected versions not specified FANUC R-30iB series controllers affected versions not specified Description The issue allows an attacker to potentially execute arbitrary code remotely due to an out-of-bounds...

lockWithPermit() function allows for replay attacks and signature malleability

Handle jayjonah8 Vulnerability details Impact In XDEFIDistribution.sol the lockWithPermit function calls permit on the XDEFI token. The problem with simply using permit alone for this is the message that is signed by the owner using the ECDSA algorithm. The message only contains the receiver...

n-e-r-v-o-u-s.com Cross Site Scripting vulnerability OBB-2322536

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2021-27999

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 4 crash has been reported. The crash state includes zend jit fetch dim r helper, zero, and zend execute. No information is...

Advantech R-SeeNet telnet_form.php Cross-Site Scripting (CVE-2021-21799)

A reflected cross-site scripting vulnerability exists in Advantech R-SeeNet. The vulnerability is due to improper input validation in telnetform.php...

The vulnerability of the “name_filter” parameter in the “company_list” component of the Advantech R-SeeNet monitoring software allows a malicious actor to execute arbitrary SQL queries.

The vulnerability of the “namefilter” parameter in the “companylist” component of the Advantech R-SeeNet monitoring software for routers is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary SQL queries remotely...

The vulnerability of the “ord” parameter in the “company_list” component of the Advantech R-SeeNet monitoring software allows a hacker to perform cross-site scripting attacks.

The vulnerability of the monitoring software for the status and functions of Advantech R-SeeNet routers is related to incorrect validation of input data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending specially crafted SQL queries...

CVE-2021-21912

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger...

CVE-2021-21917

An exploitable SQL injection vulnerability exist in the ‘grouplist’ page of the Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted HTTP request at '‘ord’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any authenticated user or...

CVE-2021-21916

An exploitable SQL injection vulnerability exist in the ‘grouplist’ page of the Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted HTTP request at 'descriptionfilter’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any...

CVE-2021-21911

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger...

CVE-2021-21916

An exploitable SQL injection vulnerability exist in the ‘grouplist’ page of the Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted HTTP request at 'descriptionfilter’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any...

CVE-2021-21911

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger...