Lucene search
+L

866 matches found

CNNVD
CNNVD
•added 2021/08/12 12:00 a.m.•19 views

Horner Automation Cscape 缓冲区错误漏洞

Horner Automation Cscape is a suite of programming software for industrial control system development from Horner Automation. A buffer error vulnerability exists in Horner Automation Cscape due to a lack of effective data validation when parsing project files, which could lead to an out-of-bounds...

7.8CVSS7.6AI score0.00995EPSS
SaveExploits0References4
OSV
OSV
•added 2021/08/11 1:15 p.m.•11 views

CVE-2021-32939

FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to an out-of-bounds write while processing project files, allowing an attacker to craft a project file that may permit arbitrary code execution...

7.8CVSS7.3AI score0.0156EPSS
SaveExploits0References2
OSV
OSV
•added 2021/08/11 1:15 p.m.•12 views

CVE-2021-32931

An uninitialized pointer in FATEK Automation FvDesigner, Versions 1.5.88 and prior may be exploited while the application is processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution...

7.8CVSS5.9AI score0.0201EPSS
SaveExploits0References3
NVD
NVD
•added 2021/08/11 1:15 p.m.•29 views

CVE-2021-32939

FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to an out-of-bounds write while processing project files, allowing an attacker to craft a project file that may permit arbitrary code execution...

7.8CVSS0.0156EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/08/11 1:15 p.m.•10 views

CVE-2021-32931

An uninitialized pointer in FATEK Automation FvDesigner, Versions 1.5.88 and prior may be exploited while the application is processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution...

7.8CVSS7.1AI score0.0201EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2021/08/11 1:15 p.m.•9 views

CVE-2021-32939

FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to an out-of-bounds write while processing project files, allowing an attacker to craft a project file that may permit arbitrary code execution...

7.8CVSS7.1AI score0.0156EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2021/08/11 12:44 p.m.•35 views

CVE-2021-32939

FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to an out-of-bounds write while processing project files, allowing an attacker to craft a project file that may permit arbitrary code execution...

8.1AI score0.0156EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/08/11 12:44 p.m.•45 views

CVE-2021-32931

An uninitialized pointer in FATEK Automation FvDesigner, Versions 1.5.88 and prior may be exploited while the application is processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution...

8AI score0.0201EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/11 12:00 a.m.•3 views

CVE-2021-32939: Out-of-bounds Write

FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to an out-of-bounds write while processing project files, allowing an attacker to craft a project file that may permit arbitrary code execution...

7.8CVSS6.3AI score0.0156EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/08/09 12:00 a.m.•8 views

PT-2021-7090

Name of the Vulnerable Software and Affected Versions Delta Electronic DOPSoft 2 versions 2.00.07 and prior Description The issue is caused by a lack of proper validation of user-supplied data when parsing specific project files, which could result in multiple out-of-bounds write instances. An...

7.8CVSS7.9AI score0.76428EPSS
SaveExploits0References20
OSV
OSV
•added 2021/07/14 3:15 p.m.•15 views

CVE-2021-22778

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

7.1CVSS7AI score0.00216EPSS
SaveExploits0References1
OSV
OSV
•added 2021/07/14 3:15 p.m.•13 views

CVE-2021-22780

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

7.1CVSS7AI score0.00217EPSS
SaveExploits0References1
Prion
Prion
•added 2021/07/14 3:15 p.m.•31 views

Design/Logic Flaw

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

3.6CVSS7.3AI score0.00217EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/07/14 3:15 p.m.•8 views

CVE-2021-22780

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

7.1CVSS7AI score0.00217EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/07/14 3:15 p.m.•12 views

CVE-2021-22782

Missing Encryption of Sensitive Data vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

5.5CVSS6.1AI score0.00109EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/07/14 2:26 p.m.•55 views

CVE-2021-22780

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

7.1AI score0.00217EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/07/14 12:00 a.m.•18 views

Schneider Electric EcoStruxure Control Expert 安全漏洞

Schneider Electric EcoStruxure Control Expert formerly known as Unity Pro is a suite of programming software for Schneider Electric logic controller products from Schneider Electric, France. A security vulnerability exists in a number of Schneider Electric EcoStruxure Control Expert products, whi...

5.5CVSS5.8AI score0.00109EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/07/14 12:00 a.m.•14 views

Schneider Electric EcoStruxure Control Expert 安全漏洞

Schneider Electric EcoStruxure Control Expert formerly known as Unity Pro is a suite of programming software for Schneider Electric logic controller products from Schneider Electric, France. A security vulnerability exists in a number of Schneider Electric EcoStruxure Control Expert products, whi...

5.5CVSS5.8AI score0.00236EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/07/14 12:00 a.m.•16 views

Schneider Electric EcoStruxure Control Expert 安全漏洞

Schneider Electric EcoStruxure Control Expert formerly Unity Pro is a suite of programming software for Schneider Electric logic controller products from Schneider Electric, France. A security vulnerability exists in various EcoStruxure products and stems from an under-protected credential...

7.1CVSS7.1AI score0.00216EPSS
SaveExploits0References3
NVD
NVD
•added 2021/07/02 11:15 a.m.•34 views

CVE-2021-27455

Delta Electronics DOPSoft Versions 4.0.10.17 and prior are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to disclose information...

5.5CVSS0.00736EPSS
SaveExploits0References1
Rows per page
Query Builder