PT-2021-17536

Name of the Vulnerable Software and Affected Versions SAP Manufacturing Execution System Rules versions 15.1 through 15.4 Description The issue allows an authorized attacker to embed malicious code into HTTP parameters and send it to the server because the SAP Manufacturing Execution System Rules...

Unspecified Vulnerability in Camstar Enterprise Platform andOpcenter Execution Core

Opcenter Execution Core formerly known as Camstar Enterprise Platform by Siemens PLM Software is a general-purpose available Manufacturing Execution System MES. A security vulnerability exists in Camstar Enterprise Platform andOpcenter Execution Core, which can be exploited by attackers to obtain...

Siemens Opcenter information leakage vulnerability

Opcenter Execution Core formerly known as Camstar Enterprise Platform by Siemens PLM Software is a general-purpose available Manufacturing Execution System MES. A security vulnerability exists in Camstar Enterprise Platform andOpcenter Execution Core, which can be exploited by attackers to obtain...

CVE-2020-36167

An issue was discovered in the server in Veritas Backup Exec through 16.2, 20.6 before hotfix 298543, and 21.1 before hotfix 657517. On start-up, it loads the OpenSSL library from the Installation folder. This library in turn attempts to load the /usr/local/ssl/openssl.cnf configuration file, whi...

Siemens Opcenter Execution Core Cross-Site Scripting Vulnerability

Opcenter Execution Core formerly known as Camstar Enterprise Platform is a general purpose Manufacturing Execution System MES. A cross-site scripting vulnerability exists in Siemens Opcenter Execution Core. An attacker could exploit the vulnerability to obtain a session cookie from a legitimate...

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. A heap-based buffer over-read in MagickCore/fourier.c allows an attacker to execute code on the system due to incorrect calls to GetCacheViewVirtualPixels...

ICSA-19-281-04 Siemens SIMATIC IT UADM

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC IT Unified Architecture Discrete Manufacturing UADM Vulnerability: Use of Hard-coded Cryptographic Key 2. RISK EVALUATION Successful exploitation of this vulnerability...

Mozilla Firefox ESR Security Advisories (MFSA2019-06, MFSA2019-08) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

MS16-086: Description of the security update for JScript 5.8 and VBScript 5.8: July 12, 2016

MS16-086: Description of the security update for JScript 5.8 and VBScript 5.8: July 12, 2016 Applies To Windows Server 2008 R2 Service Pack 1 Windows Server 2008 R2 Datacenter Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Standard Windows Server 2008 R2 Web Edition Windows Server 2008 ...

[SECURITY] Fedora 19 Update: salt-0.17.1-1.fc19

Salt is a distributed remote execution system used to execute commands and query data. It was developed in order to bring the best solutions found in the world of remote execution together and make them better, faster and more malleable. Salt accomplishes this via its ability to handle larger loa...

Mozilla Firefox ESR Multiple Vulnerabilities - August12 (Windows)

This host is installed with Mozilla Firefox ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxesrmultvulnaug12win.nasl 6079 2017-05-08 09:03:33Z teissa $ Mozilla Firefox ESR Multiple Vulnerabilities - August12 Windows Authors: Arun Kallavi Copyright:...

Core Security Technologies Advisory 2009.1013

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple XSS and Injection Vulnerabilities in TestLink Test Management and Execution System 1. Advisory Information Title: Multiple XSS and Injection Vulnerabilities ...

CVE-2004-2329

Kerio Personal Firewall KPF 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load button in the Firewall Configuration Files option, which does not drop privileges before opening the file loading dialog box...