CVE-2020-15329

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak Data.fs permissions...

CVE-2022-23902

Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in exportdata.php via the dname parameter...

PT-2022-16322 · Unknown · Tongda2000

Name of the Vulnerable Software and Affected Versions: Tongda2000 version 11.10 Description: A SQL injection issue was found in export data.php via the d name parameter. This allows for potential exploitation. Recommendations: For Tongda2000 version 11.10, consider restricting access to the expor...

Rockwell Automation Micrologix Improper Access Control (CVE-2017-14473)

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

Rockwell Automation Micrologix Improper Access Control (CVE-2017-14463)

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

Rockwell Automation Micrologix Improper Access Control (CVE-2017-14472)

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2021-43635

A Cross Site Scripting XSS vulnerability exists in Codex before 1.4.0 via Notebook/Page name field, which allows malicious users to execute arbitrary code via a crafted http code in a .json file...

Codex Cross-Site Scripting Vulnerabilities

Codex is a free notebook software for programmers and computer science majors from the US-based individual developer Josh Vickery. A cross-site scripting vulnerability exists in Codex versions prior to 1.4.0, which stems from a lack of effective filtering and escaping of the Name field of...

Design/Logic Flaw

Unprotected transport of credentials vulnerability in IDEC PLCs FC6A Series MICROSmart All-in-One CPU module v2.32 and earlier, FC6A Series MICROSmart Plus CPU module v1.91 and earlier, WindLDR v8.19.1 and earlier, WindEDIT Lite v1.3.1 and earlier, and Data File Manager v2.12.1 and earlier allows...

CVE-2021-20827

CVE-2021-20827 describes plaintext storage of a password vulnerability in IDEC PLCs, allowing an attacker to obtain PLC Web server credentials from SD cards (ZLD files) or file backups and potentially hijack the PLC. Affected products and versions include IDEC FC6A/MICROSmart All-in-One CPU Modul...

IDEC PLC security vulnerabilities

The IDEC PLC is a programmable controller. A security vulnerability exists in the IDEC PLC that could allow an attacker to obtain PLC web server user credentials from the communication between the PLC and the software. The following products and versions are affected: FC6A Series MICROSmart...

PT-2021-14272

Name of the Vulnerable Software and Affected Versions: IDEC FC6A Series MICROSmart All-in-One CPU module versions v2.32 and earlier IDEC FC6A Series MICROSmart Plus CPU module versions v1.91 and earlier WindLDR versions v8.19.1 and earlier WindEDIT Lite versions v1.3.1 and earlier Data File Manag...

PT-2021-14271

Name of the Vulnerable Software and Affected Versions: IDEC FC6A Series MICROSmart All-in-One CPU module versions 2.32 and earlier IDEC FC6A Series MICROSmart Plus CPU module versions 1.91 and earlier IDEC WindLDR versions 8.19.1 and earlier IDEC WindEDIT Lite versions 1.3.1 and earlier IDEC Data...

CVE-2021-40836

A vulnerability affecting F-Secure antivirus engine was discovered whereby scanning MS outlook .pst files can lead to denial-of-service. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the antivirus engine...

F-Secure Anti-Virus security vulnerability

F-secure F-Secure Anti-Virus is a suite of antivirus software from the Finnish company F-Secure F-secure. The program integrates several virus monitoring engines for real-time virus scanning of the operating system and provides powerful background management features. A security vulnerability...

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal leading to code execution.

...

Beckhoff Ipc Improper Input Validation

TwinCAT OPC UA Server in versions up to 2.3.0.12 and IPC Diagnostics UA Server in versions up to 3.1.0.1 from Beckhoff Automation GmbH & Co. KG are vulnerable to denial of service attacks. The attacker needs to send several specifically crafted requests to the running OPC UA server. After some of...

Rockwellautomation Factorytalk Exposure of Sensitive Information to an Unauthorized Actor

All versions of FactoryTalk View SE disclose the hostnames and file paths for certain files within the system. A remote, authenticated attacker may be able to leverage this information for reconnaissance efforts. Rockwell Automation recommends enabling built in security features found within...

[SECURITY] Fedora 33 Update: trace-cmd-2.9.2-2.fc33

trace-cmd is a user interface to Ftrace. Instead of needing to use the debugfs directly, trace-cmd will handle of setting of options and tracers and will record into a data file...

trousers: tss user can be used to create or corrupt existing files, this could lead to DoS

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the creation of the system.data file is prone to symlink attacks. The tss user can be used to create or corrupt existing files, which could possibly lead to a DoS attack...