PT-2025-20854 · Siemens · User Management +4

Name of the Vulnerable Software and Affected Versions: SIMATIC PCS neo versions 4.1 through 5.0 SINEC NMS affected versions not specified SINEMA Remote Connect affected versions not specified Totally Integrated Automation Portal TIA Portal versions 17 through 20 User Management Component UMC...

CVE-2025-3684

A vulnerability was found in Xianqi Kindergarten Management System 2.0 Bulid 20190808. It has been rated as critical. This issue affects some unknown processing of the file stulist.php of the component Child Management. The manipulation of the argument sex leads to sql injection. The attack may b...

Denial of Service Vulnerability in Oracle Application Object Library

Oracle Application Object Library is a system management component of Oracle Corporation. A denial of service vulnerability exists in Oracle Application Object Library, which can be exploited by an attacker to cause a denial of service...

CVE-2025-30707

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: User Management. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks ...

UBUNTU-CVE-2025-21972

In the Linux kernel, the following vulnerability has been resolved: net: mctp: unshare packets when reassembling Ensure that the fraglist used for reassembly isn't shared with other packets. This avoids incorrect reassembly when packets are cloned, and prevents a memory leak due to circular...

The vulnerability of the mm component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the mm component in the Linux operating system’s kernel is related to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

GNU Binutils 安全漏洞

GNU Binutils GNU Binary Utilities is a set of programming language utility programs developed by the American GNU community. The programs are primarily designed to work with target files in a variety of formats, and provide connectors, assemblers, and other tools for target files and archives. A...

The vulnerability of the mm component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the mm component in the Linux operating system’s kernel is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the smc component in the Linux operating system’s kernel, related to a memory release error, allows for a malfunction that can lead to service failure.

The vulnerability of the smc component in the Linux operating system’s kernel is related to a memory release error. Exploiting this vulnerability can allow an attacker to cause a service failure...

Siemens User Management Component (UMC) Heap Buffer Overflow Vulnerability

SIMATIC PCS neo is a distributed control system DCS. sinec NMS is the new generation of network management systems NMS for the digital enterprise. The system can be used to centrally monitor, manage, and configure networks.Totally Integrated Automation Portal TIA Portal is a PC software that...

Siemens SIMATIC 安全漏洞

SIMATIC PCS neo is a distributed control system DCS. sinec NMS is the new generation of network management systems NMS for the digital enterprise. The system can be used to centrally monitor, manage, and configure networks.Totally Integrated Automation Portal TIA Portal is a PC software that...

PT-2024-6147 · Siemens · Sinec Nms +6

Name of the Vulnerable Software and Affected Versions: SIMATIC Information Server versions 2022 and 2024 SIMATIC PCS neo versions 4.0, 4.1 through 4.1 Update 2, and 5.0 SINEC NMS versions prior to the fixed version Totally Integrated Automation Portal TIA Portal versions 16, 17 through 17 Update ...

Ivanti Avalanche < 6.4.4 Multiple Vulnerabilities

The version of Ivanti Avalanche running on the remote host is prior to 6.4.4. It is, therefore, is affected by multiple vulnerabilities : - An off-by-one error in WLInfoRailService allows a remote unauthenticated attacker to crash the service. CVE-2024-36136 - Improper input validation in the...

The vulnerability of the mctproute_input() function in the implementation of the Management Component Transport Protocol (MCTP) kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mctprouteinput function in the net/mctp/route.c module, which is part of the Management Component Transport Protocol MCTP implementation in the Linux operating system, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an...

The vulnerability of the MCTP (Management Component Transport Protocol) subsystem in the Linux operating system allows attackers to increase their privileges.

The vulnerability of the MCTP Management Component Transport Protocol subsystem in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2024-33499

CVE-2024-33499 affects Siemens SIMATIC RTLS Locating Manager (multiple SKUs: 6GT2780-0DA00/0DA10/0DA20/0DA30/1EA10/1EA20/1EA30) and related components. Reported issue: the应用 assigns incorrect permissions to a user management component, enabling a privileged attacker to escalate from the Administr...

CVE-2024-33499

A vulnerability has been identified in SIMATIC RTLS Locating Manager 6GT2780-0DA00 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA10 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA20 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA30 All versions...

Cross site scripting

A cross-site scripting XSS vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cname parameter...

CVE-2023-49987

A cross-site scripting XSS vulnerability in the component /management/term of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tname parameter...

CVE-2023-49983

A cross-site scripting XSS vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...