Malicious code in virtualize-balance-lambda-pipe-validate (npm)

The package virtualize-balance-lambda-pipe-validate was found to contain malicious code...

Malicious code in wind-pipe-double-parse-static (npm)

The package wind-pipe-double-parse-static was found to contain malicious code...

Malicious code in yyf-pipe (npm)

The package yyf-pipe was found to contain malicious code...

Malicious code in centauri-magnetosphere-virgo-pipe (npm)

The package centauri-magnetosphere-virgo-pipe was found to contain malicious code...

MAL-2025-26651 Malicious code in monitor-rho-pipe-log-zeta (npm)

The package monitor-rho-pipe-log-zeta was found to contain malicious code...

MAL-2025-29318 Malicious code in pipe-hash-minify-thread-char (npm)

The package pipe-hash-minify-thread-char was found to contain malicious code...

MAL-2025-19185 Malicious code in eclipse-thuban-speleology-pipe (npm)

The package eclipse-thuban-speleology-pipe was found to contain malicious code...

MAL-2025-29313 Malicious code in pipe-cors-public-figures (npm)

The package pipe-cors-public-figures was found to contain malicious code...

CVE-2024-54678

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SIMATIC PCS neo V6.0 All versions V6.0 SP1 Update 1, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 V17 All versions V17 Update 9, SIMATIC STEP 7 V18 All versions, SIMATIC STEP 7 V19 A...

CVE-2024-54678

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SIMATIC PCS neo V6.0 All versions V6.0 SP1 Update 1, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 V17 All versions V17 Update 9, SIMATIC STEP 7 V18 All versions, SIMATIC STEP 7 V19 A...

CVE-2024-54678

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SIMATIC PCS neo V6.0 All versions V6.0 SP1 Update 1, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 V17 All versions V17 Update 9, SIMATIC STEP 7 V18 All versions, SIMATIC STEP 7 V19 A...

CVE-2024-54678

CVE-2024-54678 affects a broad set of Siemens industrial products (e.g., SIMATIC PCS neo 4.1–6.0, STEP 7, WinCC, S7-PLCSIM, SIMATIC SIRIUS/SIMOCODE/SCOUT/STArtDrive, TIA Portal Cloud, etc.). The root cause is improper sanitization of Interprocess Communication input via a Windows Named Pipe that ...

CVE-2024-54678

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SIMATIC PCS neo V6.0 All versions V6.0 SP1 Update 1, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 V17 All versions V17 Update 9, SIMATIC STEP 7 V18 All versions, SIMATIC STEP 7 V19 A...

PT-2025-32646 · Siemens · Simatic S7-Plcsim +10

Name of the Vulnerable Software and Affected Versions: SIMATIC PCS neo versions 4.1 through 6.0 SIMATIC S7-PLCSIM version 17 SIMATIC STEP 7 versions 17 through 20 SIMATIC WinCC versions 17 through 20 SIMOCODE ES versions 17 through 20 SIMOTION SCOUT TIA versions 5.4 through 5.7 SINAMICS Startdriv...

Linux Distros Unpatched Vulnerability : CVE-2022-0847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the way the flags member of the new pipe buffer structure was lacking proper initialization in copypagetoiterpipe and pushpipe functions in...

CVE-2024-54678: Deserialization of Untrusted Data

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SIMATIC PCS neo V6.0 All versions V6.0 SP1 Update 1, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 V17 All versions V17 Update 9, SIMATIC STEP 7 V18 All versions, SIMATIC STEP 7 V19 A...

Siemens Engineering Platforms

SUMMARY Affected products do not properly restrict access permissions to a local Windows Named Pipe and do not properly sanitize user-controllable input sent to that Named Pipe. This could allow a local authenticated attacker to cause a type confusion and execute arbitrary code within the...

Linux Distros Unpatched Vulnerability : CVE-2020-1734

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses subprocess.Popen with shell=True, by...

Linux Distros Unpatched Vulnerability : CVE-2021-47086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phonet/pep: refuse to enable an unbound pipe This ioctl implicitly assumed that the socket was already bound to a valid local socket name, i.e. Phonet object. I...

Linux Distros Unpatched Vulnerability : CVE-2025-38021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check of pipectx-planestate for updatedchubpdpp Similar to commit...