596 matches found
CVE-2019-10943
CVE-2019-10943 affects Siemens SIMATIC devices including Drive Controller family, ET 200SP Open Controller CPUs 1515SP PC/PC2, S7-1200 CPUs, S7-1500 CPUs and related software/S7-PLCSIM Advanced. Root cause: missing integrity check allows an attacker with network access to port 102/tcp to modify t...
Security Updates for Microsoft Office Products (August 2019)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. An attacker who successfully exploited the...
Microsoft Outlook CVE-2019-1200 Remote Code Execution Vulnerability
Description Microsoft Outlook is prone to a remote code-execution vulnerability. Successful exploits may allow an attacker to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Office 2019...
Command injection
A command injection missing input validation, escaping in the ftp upgrade configuration interface on the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows an authenticated remote attacker simple user -- in the same network as the device -- to trigger OS commands like starting telnetd or openin...
CVE-2018-19978
A buffer overflow vulnerability in the DHCP and PPPOE configuration interface of the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows a remote attacker authenticated as simple user in the same network as the device to trigger remote code execution via a POST request ManufacturerName parameter...
CVE-2018-19977
A command injection missing input validation, escaping in the ftp upgrade configuration interface on the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows an authenticated remote attacker simple user -- in the same network as the device -- to trigger OS commands like starting telnetd or openin...
CVE-2018-19978
A buffer overflow vulnerability in the DHCP and PPPOE configuration interface of the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows a remote attacker authenticated as simple user in the same network as the device to trigger remote code execution via a POST request ManufacturerName parameter...
CVE-2018-19978
CVE-2018-19978 affects the Auerswald COMfort 1200 IP phone, firmware 3.4.4.1-10589. The vulnerability is a buffer overflow in the DHCP/PPPOE configuration web interface. An attacker authenticated as a simple user on the same network can trigger a crafted POST request to the web server (via the Ma...
CVE-2018-19977
The CVE-2018-19977 issue affects the Auerswald COMfort 1200 IP phone (3.4.4.1-10589) via the ftp upgrade configuration interface. The vulnerability is a command injection caused by missing input validation/escaping, enabling an authenticated remote attacker on the same network to trigger OS comma...
Siemens S7-1200 Series PLC CPU Recorded Frame Command Execution Replay
Binary data 143.prm...
Siemens SIMATIC S7-1500 < 1.5 and S7-1200 PLCs < 4.0 Cross Site Request Forgery
Binary data 720192.prm...
Siemens SIMATIC S7-1200 Series 2.x PLC Private Key Exposure
Binary data 141.prm...
Rockwell Automation/Allen-Bradley MicroLogix 1200 PLC Detection
Binary data 750426.prm...
Siemens SIMATIC S7-1200 PLCs < 4.0 HTTPS Packets DOS
Binary data 720201.prm...
Siemens SIMATIC S7-1200 PLCs < 4.0 Random Number Generator Insufficient Entropy
Binary data 720193.prm...
Siemens SIMATIC S7-1200 CPUs < 4.1 Open Redirect
Binary data 720057.prm...
Siemens SIMATIC S7-1200 PLCs 2.x and 3.x SNMP Port DOS
Binary data 720188.prm...
Siemens SIMATIC S7-1200 PLCs < 4.0 PROFINET Packets DOS
Binary data 720195.prm...