Mitsubishi Electric Multiple Products Predictable Exact Value From Previous Values (CVE-2020-16226)

Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

CVE-2020-16226

CVE-2020-16226 affects Mitsubishi Electric PLCs (notably MELSEC iQ-F and numerous CPU/board variants). The root issue is a flaw in TCP session handling and predictable ACK sequence numbers, enabling remote execution of arbitrary commands via impersonation of a legitimate device. Affected products...

CVE-2019-16226

CVE-2019-16226 affects py-lmdb 0.97. The vulnerability arises in the mdb_node_del function, which does not validate a memmove when encountering an unexpected node->mn_hi, leading to an invalid write operation. This is described as occurring when accessing a data.mdb file supplied by an attacke...

CVE-2018-16226

Affected product: Mitel MiVoice Office 400 web admin component. Vulnerability: reflected cross-site scripting (XSS) due to insufficient validation on the start.asp page in versions R5.0 HF3 (v8839a1) and earlier. Impact: unauthenticated attacker could execute arbitrary scripts and access sensitiv...

CVE-2017-16226

creationtimestamp| type| source ---|---|--- 2018-08-06 21:37:06+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-5mjw-6jrh-hvfq...

3d-tiles-tools (>=0.1.0 <=0.1.3), 3m5-coco (>=0.0.2 <=0.0.8) +1133 more potentially affected by CVE-2017-16226 via static-eval (>=0.0.0 <=1.1.1)

static-eval NPM version =0.0.0, =0.1.0, =0.0.2, =0.16.0, =0.0.11, =0.1.27, =0.1.2, =1.0.0, =2.0.15, =1.0.2, =1.1.3, =2.0.2 - @arilotter/tsne-js =1.0.3 and more Source cves: CVE-2017-16226 Source advisory: OSV:GHSA-5MJW-6JRH-HVFQ...

CVE-2017-16226

The static-eval module is intended to evaluate statically-analyzable expressions. In affected versions, untrusted user input is able to access the global function constructor, effectively allowing arbitrary code execution...

CVE-2017-16226

The CVE-2017-16226 issue affects the static-eval module where untrusted input can access the global Function constructor, enabling arbitrary code execution. Exploitation details are present in multiple connected sources (e.g., npm advisory 548 and OSS/GHSA entries) showing that affected versions ...