Lucene search
+L

29 matches found

Circl
Circl
added 2022/09/20 10:39 p.m.8 views

CVE-2022-37205

creationtimestamp| type| source ---|---|--- 2022-09-20 22:39:30+00:00| seen| https://t.me/cibsecurity/50150...

8.8CVSS8.1AI score0.01223EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2022/09/20 5:40 p.m.5 views

CVE-2022-37205

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

8.2AI score0.01223EPSS
SaveExploits2References2
CVE
CVE
added 2022/09/20 5:40 p.m.59 views

CVE-2022-37205

CVE-2022-37205 affects JFinal CMS 5.1.0. SQL Injection stems from multiple interfaces using their own SQL concatenation without filters, enabling high-impact access (C/H, I/H, A/H) per CVSS 3.1. Exploitation PoC exists on GitHub (AgainstTheLight) and a related exploit repo is linked in the connec...

8.8CVSS9.1AI score0.01223EPSS
SaveExploits2References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/03/21 12:0 a.m.80 views

Siemens SIMATIC Industrial Products Missing Release of Memory After Effective Lifetime (CVE-2021-37205)

A vulnerability has been identified in SIMATIC Drive Controller family All versions = V2.9.2 = V21.9 = V4.5.0 = V2.9.2 = V21.9 = V4.0 V4.0 SP1, SIPLUS TIM 1531 IRC All versions V2.3.6, TIM 1531 IRC All versions V2.3.6. An unauthenticated attacker could cause a denial- of-service condition in a PL...

7.5CVSS7.2AI score0.0164EPSS
SaveExploits0References3
Circl
Circl
added 2022/02/09 6:13 p.m.11 views

CVE-2021-37205

creationtimestamp| type| source ---|---|--- 2022-02-09 18:13:16+00:00| seen| https://t.me/cibsecurity/37082 2022-02-11 18:48:18+00:00| published-proof-of-concept| https://t.me/truesecator/2622 2022-02-14 16:20:30+00:00| published-proof-of-concept| https://t.me/icscert/517...

7.5CVSS7.1AI score0.0164EPSS
SaveExploits0References3
OSV
OSV
added 2022/02/09 4:15 p.m.6 views

CVE-2021-37205

A vulnerability has been identified in SIMATIC Drive Controller family All versions = V2.9.2 = V21.9 = V4.5.0 = V2.9.2 = V21.9 = V4.0 V4.0 SP1, SIPLUS TIM 1531 IRC All versions V2.3.6, TIM 1531 IRC All versions V2.3.6. An unauthenticated attacker could cause a denial-of-service condition in a PLC...

7.5CVSS7AI score0.0164EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/02/09 3:16 p.m.5 views

CVE-2021-37205

A vulnerability has been identified in SIMATIC Drive Controller family All versions = V2.9.2 = V21.9 = V4.5.0 = V2.9.2 = V21.9 = V4.0 V4.0 SP1, SIPLUS TIM 1531 IRC All versions V2.3.6, TIM 1531 IRC All versions V2.3.6. An unauthenticated attacker could cause a denial-of-service condition in a PLC...

7.5CVSS7.4AI score0.0164EPSS
SaveExploits0References1
CVE
CVE
added 2022/02/09 3:16 p.m.131 views

CVE-2021-37205

CVE-2021-37205 affects Siemens SIMATIC Drive Controller family and related devices (Drive Controller, ET 200SP Open Controller CPU 1515SP PC2, S7-1200/1500 families, S7-PLCSIM Advanced, TIM 1531 IRC). The issue is a memory-management flaw (MISSING RELEASE OF MEMORY AFTER EFFECTIVE LIFETIME) that ...

7.5CVSS7.4AI score0.0164EPSS
SaveExploits0References1Affected Software1
ICS
ICS
added 2022/02/08 12:0 a.m.89 views

Siemens SIMATIC Industrial Products (Update A)

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

7.5CVSS8.1AI score0.02181EPSS
SaveExploits0References12
Rows per page
Query Builder