Lucene search
K

16 matches found

Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.2 views

PT-2026-4283

Name of the Vulnerable Software and Affected Versions Project File Management System affected versions not specified Description An attacker with access to the project file could use exposed credentials to impersonate users, escalate privileges, or gain unauthorized access to systems and services...

6.1CVSS5.4AI score0.00006EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2026/01/20 11:26 p.m.4 views

CVE-2026-22218

Chainlit versions prior to 2.9.4 contain an arbitrary file read vulnerability in the /project/element update flow. An authenticated client can send a custom Element with a user-controlled path value, causing the server to copy the referenced file into the attacker’s session. The resulting element...

7.1CVSS5.6AI score0.00044EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/01/19 11:14 p.m.2 views

CVE-2026-22218

Chainlit versions prior to 2.9.4 contain an arbitrary file read vulnerability in the /project/element update flow. An authenticated client can send a custom Element with a user-controlled path value, causing the server to copy the referenced file into the attacker’s session. The resulting element...

7.1CVSS5.5AI score0.00044EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2026/01/09 11:21 a.m.2 views

CVE-2021-22781

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

5.5CVSS6.9AI score0.00052EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/07 4:35 a.m.3 views

CVE-2025-3784

Cleartext Storage of Sensitive Information Vulnerability in GX Works2 all versions allows an attacker to disclose credential information stored in plaintext from project files. As a result, the attacker may be able to open project files protected by user authentication using disclosed credential...

5.5CVSS6.5AI score0.00011EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-2630

Malware in sbrugna...

9CVSS8.6AI score0.00369EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-5747

Malware in sbrugna...

5.5CVSS5.5AI score0.00028EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-35121

Malicious code in bioql PyPI...

6.2CVSS5.7AI score0.00074EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 4:34 a.m.5 views

CVE-2023-30757

A vulnerability has been identified in Totally Integrated Automation Portal TIA Portal V14 All versions, Totally Integrated Automation Portal TIA Portal V15 All versions, Totally Integrated Automation Portal TIA Portal V15.1 All versions, Totally Integrated Automation Portal TIA Portal V16 All...

6.2CVSS6.8AI score0.00074EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:21 a.m.2 views

CVE-2019-10916

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier All versions, SIMATIC PCS 7 V8.1 All versions V8.1 with WinCC V7.3 Upd 19, SIMATIC PCS 7 V8.2 All versions V8.2 SP1 with WinCC V7.4 SP1 Upd11, SIMATIC PCS 7 V9.0 All versions V9.0 SP2 with WinCC V7.4 SP1 Upd11, SIMATIC WinCC TI...

9CVSS6.9AI score0.00369EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/11/24 12:0 a.m.2 views

PT-2022-6320 · Mitsubishi · Gx Works3

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Corporation GX Works3 versions from 1.015R to 1.095Z Description: The issue is related to the use of hard-coded passwords in the software, allowing a remote unauthenticated attacker to obtain information about the project...

7.8CVSS7.7AI score0.01157EPSS
Exploits0References9
Prion
Prion
added 2021/07/14 3:15 p.m.22 views

Design/Logic Flaw

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

2.1CVSS6.3AI score0.00052EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/07/14 2:26 p.m.22 views

CVE-2021-22782

Missing Encryption of Sensitive Data vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

5.5AI score0.00022EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/07/14 2:26 p.m.18 views

CVE-2021-22781

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...

5.8AI score0.00052EPSS
Exploits0References1
Prion
Prion
added 2021/01/05 10:15 p.m.12 views

Design/Logic Flaw

An issue was discovered in Viki Vera 4.9.1.26180. A user without access to a project could download or upload project files by opening the Project URL directly in the browser after logging in...

5.5CVSS7.9AI score0.00219EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2019/05/14 8:29 p.m.2 views

CVE-2019-10916

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier All versions, SIMATIC PCS 7 V8.1 All versions V8.1 with WinCC V7.3 Upd 19, SIMATIC PCS 7 V8.2 All versions V8.2 SP1 with WinCC V7.4 SP1 Upd11, SIMATIC PCS 7 V9.0 All versions V9.0 SP2 with WinCC V7.4 SP1 Upd11, SIMATIC WinCC TI...

8.8CVSS7.3AI score
Exploits0References2
Rows per page
Query Builder