Lucene search
+L

21799 matches found

Vulnrichment
Vulnrichment
•added 2024/05/16 3:13 p.m.•23 views

CVE-2024-4609 Rockwell Automation Datalog Function within in FactoryTalk® View SE contains SQL Injection Vulnerability

A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploited, the attack could result in...

8.8CVSS7.3AI score0.00652EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/16 3:13 p.m.•94 views

CVE-2024-4609

CVE-2024-4609 affects Rockwell Automation FactoryTalk View SE Datalog function. The vulnerability allows SQL injection when the SQL database has no authentication or legitimate credentials are stolen, potentially exposing sensitive information and allowing modification/deletion of remote database...

9.8CVSS7.1AI score0.00652EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/05/16 3:13 p.m.•48 views

CVE-2024-4609 Rockwell Automation Datalog Function within in FactoryTalk® View SE contains SQL Injection Vulnerability

A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploited, the attack could result in...

8.8CVSS7.2AI score0.00652EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/05/16 12:00 a.m.•26 views

Unspecified Vulnerability in Siemens SICAM Products

The SICAM 8 power automation platform is a universal, integrated hardware and software-based solution for all applications in the power supply sector.The SICAM A8000 RTU Remote Terminal Unit series is a modular family of devices for remote control and automation applications in all areas of energ...

7.8CVSS7.2AI score0.00468EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/16 12:00 a.m.•9 views

CVE-2024-3640: Unquoted Search Path or Element

An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote code execution if exploited. While running the FTRA installer package, the executable path is not properly quoted, which could allow a threat actor to enter a malicious executabl...

7CVSS6.3AI score0.00272EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/16 12:00 a.m.•20 views

Rockwell Automation FactoryTalk Remote Access 安全漏洞

Rockwell Automation FactoryTalk Remote Access is a solution from Rockwell Automation that allows users to securely access, monitor and control their industrial automation equipment and systems from any location. A security vulnerability exists in Rockwell Automation FactoryTalk Remote Access that...

7CVSS7.6AI score0.00272EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/05/16 12:00 a.m.•20 views

PT-2024-3630 · Rockwell Automation · Factorytalk View Se

Name of the Vulnerable Software and Affected Versions: Rockwell Automation FactoryTalk View SE Datalog function Description: A threat actor could inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. This could result in...

9.8CVSS7.8AI score0.00652EPSS
SaveExploits0References15
CNNVD
CNNVD
•added 2024/05/16 12:00 a.m.•23 views

Rockwell Automation FactoryTalk View SE 安全漏洞

Rockwell Automation FactoryTalk View SE is an industrial automation system view interface from Rockwell Automation. Rockwell Automation FactoryTalk View SE suffers from a SQL injection vulnerability that can be exploited by an attacker to view, add, modify, or delete information in a back-end...

9.8CVSS7.6AI score0.00652EPSS
SaveExploits0References2
CNVD
CNVD
•added 2024/05/16 12:00 a.m.•22 views

Siemens Industrial Products Out-of-Bounds Read Vulnerability

S7 PCT Port Configuration Tool is a PC-based software for parameterizing Siemens IO link master modules and third-party IO link devices.Security Configuration Tool SCT is an engineering software for security devices such as the SCALANCE-S or CP 443- 1Advanced.SIMATIC Automation Tool allows...

8.2CVSS6.8AI score0.00262EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2024/05/15 1:11 p.m.•517 views

Exploit for CVE-2024-29895

Cacti RCE - CVE-2024-29895 !imagehttps://github.com/Stuub...

10CVSS7.2AI score0.9849EPSS
SaveExploits4
SUSE CVE
SUSE CVE
•added 2024/05/15 2:29 a.m.•16 views

SUSE CVE-2024-31444

Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, some of the data stored in automationtreerulesformsave function in automationtreerules.php is not thoroughly checked and is used to concatenate the HTML statement in formconfirm function from...

5.4CVSS6.7AI score0.14664EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
•added 2024/05/15 2:29 a.m.•10 views

SUSE CVE-2024-31460

Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, some of the data stored in automationtreerules.php is not thoroughly checked and is used to concatenate the SQL statement in createallheadernodes function from lib/apiautomation.php , finally resulti...

8.8CVSS7.9AI score0.01791EPSS
SaveExploits1References5
NVD
NVD
•added 2024/05/14 8:15 p.m.•35 views

CVE-2021-22280

Improper DLL loading algorithms in B&R Automation Studio versions =4.0 and 4.12 may allow an authenticated local attacker to execute code in the context of the product...

7.2CVSS6.9AI score0.00166EPSS
SaveExploits0References1
OSV
OSV
•added 2024/05/14 8:15 p.m.•19 views

CVE-2021-22280

Improper DLL loading algorithms in B&R Automation Studio versions =4.0 and 4.12 may allow an authenticated local attacker to execute code in the context of the product...

7.2CVSS5.9AI score0.00166EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/14 7:36 p.m.•68 views

CVE-2021-22280

CVE-2021-22280 крат: B&R Automation Studio versions 4.0–4.11 suffer from improper DLL loading, enabling an authenticated local attacker to execute code in the product context. The issue is confirmed across multiple sources (PT-2024-10875, Red Hat/NVD records). Impact is local code execution with ...

7.2CVSS6.9AI score0.00166EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/05/14 7:36 p.m.•19 views

CVE-2021-22280 DLL Hijacking Vulnerability in Automation Studio

Improper DLL loading algorithms in B&R Automation Studio versions =4.0 and 4.12 may allow an authenticated local attacker to execute code in the context of the product...

7.2CVSS7AI score0.00166EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/14 7:15 p.m.•32 views

CVE-2024-2637

An Uncontrolled Search Path Element vulnerability in B&R Industrial Automation Scene Viewer, B&R Industrial Automation Automation Runtime, B&R Industrial Automation mapp Vision, B&R Industrial Automation mapp View, B&R Industrial Automation mapp Cockpit, B&R Industrial Automation mapp Safety, B&R...

7.2CVSS6.9AI score0.00168EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/14 6:49 p.m.•86 views

CVE-2024-2637

The CVE-2024-2637 issue is an Uncontrolled Search Path Element vulnerability affecting multiple B&R Industrial Automation products: Scene Viewer, Automation Runtime, mapp Vision, mapp View, mapp Cockpit, mapp Safety, VC4, APROL, various CAN drivers, Tou0ch Lock, B&R Single-Touch Driver, Serial Us...

7.2CVSS7AI score0.00168EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/14 6:49 p.m.•45 views

CVE-2024-2637 Insecure Loading of Code in B&R Products

An Uncontrolled Search Path Element vulnerability in B&R Industrial Automation Scene Viewer, B&R Industrial Automation Automation Runtime, B&R Industrial Automation mapp Vision, B&R Industrial Automation mapp View, B&R Industrial Automation mapp Cockpit, B&R Industrial Automation mapp Safety, B&R...

7.2CVSS7.2AI score0.00168EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/14 6:49 p.m.•35 views

CVE-2024-2637 Insecure Loading of Code in B&R Products

An Uncontrolled Search Path Element vulnerability in B&R Industrial Automation Scene Viewer, B&R Industrial Automation Automation Runtime, B&R Industrial Automation mapp Vision, B&R Industrial Automation mapp View, B&R Industrial Automation mapp Cockpit, B&R Industrial Automation mapp Safety, B&R...

7.2CVSS7AI score0.00168EPSS
SaveExploits0References1
Rows per page
Query Builder