CVE-2020-25243

CVE-2020-25243 affects Siemens LOGO! Soft Comfort prior to V8.4. The issue is a zip-slip vulnerability triggered when importing a compromised project file, potentially allowing a local attacker to take over the host system if chained with other vulnerabilities. Affected software is LOGO! Soft Com...

CVE-2020-25243

A vulnerability has been identified in LOGO! Soft Comfort All versions V8.4. A zip slip vulnerability could be triggered while importing a compromised project file to the affected software. Chained with other vulnerabilities this vulnerability could ultimately lead to a system takeover by an...

CVE-2020-25244

Siemens LOGO! Soft Comfort is affected by CVE-2020-25244. All versions before V8.4 are vulnerable to DLL hijacking due to insecure library loading, enabling a local attacker to take over the system where the software is installed. Public sources corroborate the issue and Siemens PT Security/Red H...

CVE-2020-25243: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been identified in LOGO! Soft Comfort All versions V8.4. A zip slip vulnerability could be triggered while importing a compromised project file to the affected software. Chained with other vulnerabilities this vulnerability could ultimately lead to a system takeover by an...

PT-2021-11124 · Siemens · Logo! Soft Comfort

Name of the Vulnerable Software and Affected Versions: LOGO! Soft Comfort versions prior to V8.4 Description: A security issue has been identified in the software, where it insecurely loads libraries, making it susceptible to DLL hijacking. This could allow a local attacker to successfully exploi...

CVE-2020-25244: Uncontrolled Search Path Element

A vulnerability has been identified in LOGO! Soft Comfort All versions V8.4. The software insecurely loads libraries which makes it vulnerable to DLL hijacking. Successful exploitation by a local attacker could lead to a takeover of the system where the software is installed...

PT-2021-11123 · Siemens · Logo! Soft Comfort

Name of the Vulnerable Software and Affected Versions: LOGO! Soft Comfort versions prior to V8.4 Description: A zip slip vulnerability could be triggered while importing a compromised project file to the affected software. This issue could ultimately lead to a system takeover by an attacker if...

Joomla! cross-site scripting vulnerability (CNVD-2021-30598)

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A cross-site scripting vulnerability exists in Joomla! versions 3.0.0 through...

CVE-2021-26030

An issue was discovered in Joomla! 3.0.0 through 3.9.25. Inadequate escaping allowed XSS attacks using the logo parameter of the default templates on error page...

CVE-2021-26030

An issue was discovered in Joomla! 3.0.0 through 3.9.25. Inadequate escaping allowed XSS attacks using the logo parameter of the default templates on error page...

CVE-2021-26030

An issue was discovered in Joomla! 3.0.0 through 3.9.25. Inadequate escaping allowed XSS attacks using the logo parameter of the default templates on error page...

CVE-2021-26030: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Joomla! 3.0.0 through 3.9.25. Inadequate escaping allowed XSS attacks using the logo parameter of the default templates on error page...

PT-2021-16923 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.0.0 through 3.9.25 Description: An issue was discovered that allows XSS attacks due to inadequate escaping. This is possible using the logo parameter of the default templates on the error page. Recommendations: For Joomla!...

The vulnerability of Siemens LOGO!8 BM programmable logic controller’s microprogramming software lies in the lack of authentication for a critical function, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of Siemens LOGO!8 BM programmable logic controller’s microprogramming software is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

Siemens LOGO! Soft Comfort 代码问题漏洞

Siemens LOGO! Soft Comfort is a set of automation logic programming software from Siemens Germany. A security vulnerability exists in Siemens LOGO! A local attacker could exploit this vulnerability to cause a takeover of the system on which the software is installed...

Siemens LOGO! Soft Comfort Path Traversal Vulnerability

Siemens LOGO! Soft Comfort is a set of automation logic programming software from Siemens Germany. A path traversal vulnerability exists in Siemens LOGO! An attacker could exploit the vulnerability to cause the system to be taken over by the attacker...

Siemens LOGO! Soft Comfort Uncontrolled Search Path Element Vulnerability

Siemens LOGO! Soft Comfort is a set of automation logic programming software from Siemens Germany. A security vulnerability exists in Siemens LOGO! A local attacker could exploit this vulnerability to cause a takeover of the system on which the software is installed...

Open Source Matters Joomla 跨站脚本漏洞

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A cross-site scripting vulnerability exists in Joomla! versions 3.0.0 through...

Siemens LOGO! Soft Comfort 路径遍历漏洞

Siemens LOGO! Soft Comfort is a set of automation logic programming software from Siemens Germany. A path traversal vulnerability exists in Siemens LOGO! An attacker could exploit the vulnerability to cause the system to be taken over by the attacker...

Siemens LOGO! Soft Comfort

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...