CVE-2022-2003

CVE-2022-2003 affects AutomationDirect DirectLOGIC D0-06 series CPUs (D0-06DD1/2/DR/DA/AR/AA and variants) with serial communication prior to firmware version 2.72. Root cause: a specially crafted serial message to the CPU serial port elicits the PLC to respond with the PLC password in cleartext,...

CVE-2003-0001

creationtimestamp| type| source ---|---|--- 2022-07-20 18:11:59+00:00| seen| https://t.me/cibsecurity/46659...

Hackers Distributing Password Cracking Tool for PLCs and HMIs to Target Industrial Systems

Industrial engineers and operators are the target of a new campaign that leverages password cracking software to seize control of Programmable Logic Controllers PLCs and co-opt the machines to a botnet. The software "exploited a vulnerability in the firmware which allowed it to retrieve the...

CVE-2022-2003

creationtimestamp| type| source ---|---|--- 2022-06-21 10:54:55+00:00| seen| https://t.me/truesecator/3080 2022-08-31 20:37:20+00:00| seen| https://t.me/cibsecurity/49126 2025-04-16 17:56:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12118...

Microsoft DFSCoerce Domain Control Privilege Vulnerability

Windows Server is a server operating system for Windows introduced by Microsoft on April 24, 2003, with the Microsoft Windows Server System WSS at its core. Microsoft DFSCoerce has a domain control privilege exploit, which can be exploited by an attacker to request the certificate of a domain...

openSUSE: Security Advisory for mariadb (SUSE-SU-2022:2003-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

JBossWS vulnerable to uncontrolled recursion

DOMUtils.java in org.jboss.ws:jbossws-common does not properly handle recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted request containing an XML document with a DOCTYPE declaration and a large number of nested...

GHSA-RJ4P-7MM6-GM9J JBossWS vulnerable to uncontrolled recursion

DOMUtils.java in org.jboss.ws:jbossws-common does not properly handle recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted request containing an XML document with a DOCTYPE declaration and a large number of nested...

Slackware: Security Advisory (SSA:2016-308-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2003-195-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2003-5001

creationtimestamp| type| source ---|---|--- 2022-03-29 00:40:33+00:00| seen| https://t.me/cibsecurity/39682...

CVE-2003-5003

creationtimestamp| type| source ---|---|--- 2022-03-29 00:40:28+00:00| seen| https://t.me/cibsecurity/39678...

CVE-2003-5002

creationtimestamp| type| source ---|---|--- 2022-03-29 00:40:27+00:00| seen| https://t.me/cibsecurity/39676...

CVE-2003-5003

The CVE-2003-5003 entry concerns IBM ISS BlackICE PC Protection. Affected component: the Update Handler. Root cause: manipulation of an unknown input leads to cross-site scripting. Impact: potential remote exploitation with constrained integrity/availability (per sources, XSS could affect a clien...

CVE-2003-5002

ISS BlackICE PC Protection is affected by a vulnerability in the Update Handler component that allows cleartext data transmission. Affected products are noted as no longer supported by the maintainer. Public documents describe this as a problematic issue without details on a fix. In practice, the...

CVE-2003-5001

The CVE-2003-5001 entry concerns ISS BlackICE PC Protection, specifically the Cross Site Scripting Detection component. The vulnerability arises from manipulation of POST/PUT/DELETE/OPTIONS requests, enabling privilege escalation. The attack surface is remote, and exploitation has been disclosed ...

CVE-2003-5001 ISS BlackICE PC Protection Cross Site Scripting Detection privileges management

A vulnerability was found in ISS BlackICE PC Protection and classified as critical. Affected by this issue is the component Cross Site Scripting Detection. The manipulation as part of POST/PUT/DELETE/OPTIONS Request leads to privilege escalation. The attack may be launched remotely. The exploit h...

CVE-2022-25265

In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 e.g., with GCC 3.2.2 and Linux kernel 2.4.20. This can cause execution of bytes located in supposedly non-executable regions of a file...

DEBIAN-CVE-2022-25265

In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 e.g., with GCC 3.2.2 and Linux kernel 2.4.20. This can cause execution of bytes located in supposedly non-executable regions of a file...

VulnCheck KEV: CVE-2013-3956

The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2 on Windows Vista and Windows Server 2008; and Novell Client 2 SP3 on Windows Server 2008 R2, Windows 7, Windows 8, and Windows Server 2012 allows local users to gain privileges...