80 matches found
CVE-2011-10005 EasyFTP MKD Command buffer overflow
A vulnerability, which was classified as critical, was found in EasyFTP 1.7.0.2. Affected is an unknown function of the component MKD Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be...
CVE-2011-10005
CVE-2011-10005 affects EasyFTP 1.7.0.2, specifically the MKD Command Handler. The vulnerability is a buffer overflow that can be exploited remotely; the exploit has been disclosed publicly. Multiple connected sources reiterate the same issue and indicate the vulnerable version, with no confirmed ...
Siemens LOGO! 8 BM Use of a Broken or Risky Cryptographic Algorithm (CVE-2020-25230)
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Due to the usage of an outdated cipher mode on port 10005/tcp, an attacker could extract the encryption key from a captured communication with the device. This plugin only works with Tenable.ot. Please visi...
Siemens LOGO! 8 BM Missing Authentication For Critical Function (CVE-2020-25228)
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. A service available on port 10005/tcp of the affected devices could allow complete access to all services without authorization. An attacker could gain full control over an affected device, if he has access...
Siemens LOGO! 8 BM Missing Authentication For Critical Function (CVE-2019-10919)
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Attackers with access to port 10005/tcp could perform device reconfigurations and obtain project files from the devices. The system manual recommends to protect access to this port. The security vulnerabili...
Siemens LOGO! 8 BM Use of Hard-Coded Cryptographic Key (CVE-2020-25233)
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. The firmware update of affected devices contains the private RSA key that is used as a basis for encryption of communication with the device. This plugin only works with Tenable.ot. Please visit...
Siemens LOGO! 8 BM Use of a Broken or Risky Cryptographic Algorithm (CVE-2020-25232)
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Due to the usage of an insecure random number generation function and a deprecated cryptographic function, an attacker could extract the key that is used when communicating with an affected device on port...
Siemens LOGO! 8 BM Plaintext Storage of a Password (CVE-2019-10921)
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Unencrypted storage of passwords in the project could allow an attacker with access to port 10005/tcp to obtain passwords of the device. The security vulnerability could be exploited by an unauthenticated...
Siemens LOGO! 8 BM Improper Handling of Extra Values (CVE-2019-10920)
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Project data stored on the device, which is accessible via port 10005/tcp, can be decrypted due to a hardcoded encryption key. The security vulnerability could be exploited by an unauthenticated attacker wi...
CVE-2010-10005
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: It is a duplicate of CVE-2010-2799...
CVE-2012-10005
CVE-2012-10005 affects the manikandan170890 php-form-builder-class, specifically the PFBC/Element/Textarea.php component (Textarea Handler). The vulnerability arises from improper handling of the value argument, enabling cross-site scripting (XSS) and allowing a remote attacker to exploit it. The...
CVE-2013-10005
creationtimestamp| type| source ---|---|--- 2022-12-28 00:11:56+00:00| seen| https://t.me/cibsecurity/55446...
CVE-2013-10005
The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow...
CVE-2013-10005 Infinite loop in github.com/btcsuite/go-socks
The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow...
CVE-2013-10005
CVE-2013-10005 applies to the Go SOCKS library github.com/btcsuite/go-socks. The vulnerability arises in the net.Conn implementation where RemoteAddr and LocalAddr call themselves recursively, creating an infinite loop that crashes the program via a stack overflow. Documented impact is a denial o...
CVE-2015-10005
creationtimestamp| type| source ---|---|--- 2022-12-27 12:21:56+00:00| seen| Telegram/PPwhAgQ5lIgVbxJUg1lJp63G-qUyV0xPd08w9PuaHV7k...
CVE-2015-10005
A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...
CVE-2015-10005 markdown-it html_re.js redos
A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...
CVE-2015-10005
Affected software: markdown-it (up to 2.x). Vulnerability: REDOS in an unknown function of lib/common/html_re.js causing inefficient regular expression complexity. Root cause / impact: manipulation leads to performance concerns; lack of explicit exploitation details in the provided documents. Evi...