CVE-2024-1914

CVE-2024-1914 affects ABB RobotWare components (IRC5 and OmniCore) with vulnerable RobotWare 6.x < 6.15.06 (except 6.10.10 and 6.13.07) and RobotWare 7.x

CVE-2024-1913

An attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller inaccessible, or execute arbitrary code. The vulnerability could potentially be exploited to perform unauthorized actions by an attacker. This vulnerability arises under specific...

CVE-2024-1913

CVE-2024-1913 affects ABB RobotWare on IRC5 OmniCore: RobotWare 6.00–6.15.05 (excluding 6.10.10 and 6.13.07) and RobotWare 7.00–7.13 are vulnerable. A specially crafted message processing condition can cause the robot to stop, make the controller inaccessible, or allow arbitrary code execution. R...

May 14, 2024—KB5037803 (Security-only update)

None None...

May 14, 2024—KB5037780 (Monthly Rollup)

None None...

Siemens多款产品 缓冲区错误漏洞

S7 PCT Port Configuration Tool is a PC-based software for parameterizing Siemens IO link master modules and third-party IO link devices.Security Configuration Tool SCT is an engineering software for security devices such as the SCALANCE-S or CP 443- 1Advanced.SIMATIC Automation Tool allows...

WordPress Integration for Contact Form 7 and Salesforce Plugin <=1.3.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software Integration for Contact Form 7 and Salesforce Type Plugin Vulnerable versions =1.3.9 Fixed in 1.4.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-34755 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e633c3bb684...

WordPress Integration for Contact Form 7 HubSpot Plugin <=1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Integration for Contact Form 7 HubSpot Type Plugin Vulnerable versions =1.3.1 Fixed in 1.3.2 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-34756 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID bb0e35516917 Credi...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2024-12377)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12377 advisory. - KVM: x86: Add BHINO Daniel Sneddon Orabug: 36496846 CVE-2024-2201 - x86/bhi: Mitigate KVM by default Pawan Gupta Orabug: 36496846 CVE-2024-2201 - x86/bhi...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2024-12378)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12378 advisory. - netfilter: nftables: reject QUEUE/DROP verdict parameters Florian Westphal Orabug: 36466544 CVE-2024-1086 Tenable has extracted the preceding description blo...

RHEL 7 : libwebp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libwebp: use of uninitialized value in ReadSymbol CVE-2018-25014 - A heap-based buffer overflow was found...

RHEL 7 : perl-crypt-openssl-rsa (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - perl-Crypt-OpenSSL-RSA: side-channel attack in PKCS1 v1.5 padding mode Marvin Attack CVE-2024-2467 Note that Nessus...

RHEL 7 : libqb (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libqb: Buffer overflow in logblackbox.c CVE-2023-39976 Note that Nessus has not tested for this issue but has inste...

RHEL 7 : ibm_jdk (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - IBM JDK: unsafe deserialization flaw in the Object Request Broker ORB CVE-2022-40609 - IBM JDK: Object...

RHEL 7 : junit4 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - junit4: TemporaryFolder is shared between all users across system which could result in information disclosure...

RHEL 7 : snakeyaml (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - snakeyaml: Denial of Service due to missing nested depth limitation for collections CVE-2022-25857 - Usin...

RHEL 7 : gnome (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gnome: heap memory corruption on gdk-pixbuf CVE-2022-48622 Note that Nessus has not tested for this issue but has...

RHEL 7 : dhcp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - dhcp: DHCP memory leak CVE-2022-2929 - In ISC DHCP 4.4.0 - 4.4.3, ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16-P1,...

RHEL 7 : autotrace (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - autotrace: bitmap double free in main.c allows attackers to cause an unspecified impact CVE-2019-19005 -...

RHEL 7 : bzr (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - bzr: does not strip bzr+ssh SSH options CVE-2017-14176 Note that Nessus has not tested for this issue but has inste...