Open Automation Software OAS Platform V16.00.0121 - Missing Authentication

An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can lead to unauthenticated use of the REST API. An attacker can send a series of HTTP requests to trigger this...

CVE-2022-26067

An information disclosure vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network requests can lead to arbitrary file read. An attacker can send a sequence of requests to trigger this...

CVE-2023-31242

An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specially-crafted series of network requests can lead to arbitrary authentication. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2022-26043

An external config control vulnerability exists in the OAS Engine SecureAddSecurity functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network requests can lead to the creation of a custom Security Group. An attacker can send a sequence of requests t...

CVE-2022-26026

A denial of service vulnerability exists in the OAS Engine SecureConfigValues functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted network request can lead to loss of communications. An attacker can send a network request to trigger this vulnerability...

CVE-2022-26833

An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can lead to unauthenticated use of the REST API. An attacker can send a series of HTTP requests to trigger this...

CVE-2022-26077

A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications functionality of Open Automation Software OAS Platform V16.00.0112. A targeted network sniffing attack can lead to a disclosure of sensitive information. An attacker can sniff...

EUVD-2022-30612

Malicious code in bioql PyPI...

EUVD-2022-30650

Malicious code in bioql PyPI...

EUVD-2023-39032

Malicious code in bioql PyPI...

EUVD-2022-30595

Malicious code in bioql PyPI...

EUVD-2024-19774

Malicious code in bioql PyPI...

EUVD-2024-19481

Malicious code in bioql PyPI...

EUVD-2022-30635

Malicious code in bioql PyPI...

EUVD-2023-36858

Malicious code in bioql PyPI...

EUVD-2024-22339

Malicious code in bioql PyPI...

EUVD-2023-35557

Malicious code in bioql PyPI...

EUVD-2023-36525

Malicious code in bioql PyPI...

EUVD-2023-38433

Malicious code in bioql PyPI...

EUVD-2023-39036

Malicious code in bioql PyPI...