CVE-2019-7594

Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a hardcoded RC2 key for certain encryption operations involving the Site Management Portal SMP...

EUVD-2021-14403

Malware in sbrugna...

EUVD-2020-29879

Malware in sbrugna...

EUVD-2021-22825

Malware in sbrugna...

EUVD-2014-5315

Malware in sbrugna...

EUVD-2019-17131

Malware in sbrugna...

EUVD-2019-17132

Malware in sbrugna...

EUVD-2014-5316

Malware in sbrugna...

EUVD-2021-22821

Malware in sbrugna...

EUVD-2021-22823

Malware in sbrugna...

EUVD-2021-22828

Malware in sbrugna...

EUVD-2020-29873

Malware in sbrugna...

EUVD-2022-27090

Malicious code in bioql PyPI...

EUVD-2022-27094

Malicious code in bioql PyPI...

EUVD-2022-27092

Malicious code in bioql PyPI...

EUVD-2022-27093

Malicious code in bioql PyPI...

EUVD-2023-54341

Malicious code in bioql PyPI...

EUVD-2022-27091

Malicious code in bioql PyPI...

CVE-2020-9044

XXE vulnerability exists in the Metasys family of product Web Services which has the potential to facilitate DoS attacks or harvesting of ASCII server files. This affects Johnson Controls' Metasys Application and Data Server ADS, ADS-Lite versions 10.1 and prior; Metasys Extended Application and...

Johnson Controls Metasys and Facility Explorer Uncontrolled Resource Consumption (CVE-2023-4486)

Under certain circumstances, invalid authentication credentials could be sent to the login endpoint of Johnson Controls Metasys NAE55, SNE, and SNC engines prior to versions 11.0.6 and 12.0.4 and Facility Explorer F4-SNC engines prior to versions 11.0.6 and 12.0.4 to cause denial-of-service. This...