108 matches found
CVE-2025-48021
The CVE-2025-48021 entry concerns Yokogawa Electric Corporation’s Vnet/IP Interface Package for CENTUM VP R6/R7 (VP6C3300/VP7C3300), affected when R1.07.00 or earlier is installed. The vulnerability is triggered by maliciously crafted packets, and may cause the Vnet/IP software stack to terminate...
CVE-2025-48021
A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated. The affected products and versions are as follows: Vnet/IP Interface Package for CENTU...
CVE-2025-48020
A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated. The affected products and versions are as follows: Vnet/IP Interface Package for CENTU...
CVE-2025-48019
The CVE-2025-48019 entry concerns Yokogawa’s Vnet/IP Interface Package. Affected are the Vnet/IP Interface Package for CENTUM VP R6 (VP6C3300) and R7 (VP7C3300) with version R1.07.00 or earlier. If the affected product receives maliciously crafted packets, the Vnet/IP software stack can terminate...
CVE-2025-1924
A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receive maliciously crafted packets, a DoS attack may cause Vnet/IP communication functions to stop or arbitrary programs to be executed. The affected products and versions a...
CVE-2025-1924
A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receive maliciously crafted packets, a DoS attack may cause Vnet/IP communication functions to stop or arbitrary programs to be executed. The affected products and versions a...
CVE-2025-1924
A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receive maliciously crafted packets, a DoS attack may cause Vnet/IP communication functions to stop or arbitrary programs to be executed. The affected products and versions a...
CVE-2025-1924
CVE-2025-1924 affects Yokogawa’s Vnet/IP Interface Package for CENTUM VP (R6/R7: VP6C3300/VP7C3300) as of R1.07.00 or earlier. The sources describe that processing of maliciously crafted packets can cause a DoS in Vnet/IP communication functions and may lead to arbitrary programs to be executed. ...
PT-2026-7966
A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated. The affected products and versions are as follows: Vnet/IP Interface Package for CENTU...
PT-2026-7967
A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated. The affected products and versions are as follows: Vnet/IP Interface Package for CENTU...
MAL-2025-165706 Malicious code in samehada-aazs-r7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68927e2f0e9d7f209bacec1135dae53e5551c2a681e46e246c5a02eaf48b56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in samehada-aazs-r7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68927e2f0e9d7f209bacec1135dae53e5551c2a681e46e246c5a02eaf48b56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-165720 Malicious code in samehada-zhs-r7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6f35766685a5ca7145c9ea021d85c101b9cbcc392211528380bf45a68bb399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in samehada-uaazs-r7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67b63b931095cea4b6f531fce8b882e89c5205be99ddf60aeb7e0f1f71e6acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-165710 Malicious code in samehada-fzhs-r7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9093451aabb3195bc16518c3f0db592c64d580f87f570e09938cc3f768d0a937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-165716 Malicious code in samehada-uaazs-r7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67b63b931095cea4b6f531fce8b882e89c5205be99ddf60aeb7e0f1f71e6acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-165721 Malicious code in samehada-zs-r7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6edcffcf35209448ee5842eda57a5edb839d0bc6b0be49846517681154c9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-10777 JSC R7 R7-Office Document Server downloadas path traversal
A flaw has been found in JSC R7 R7-Office Document Server up to 20250820. Impacted is an unknown function of the file /downloadas/. Executing manipulation of the argument cmd can lead to path traversal. The attack can be launched remotely. Upgrading to version 2025.3.1.923 is recommended to addre...
CVE-2025-10777 JSC R7 R7-Office Document Server downloadas path traversal
A flaw has been found in JSC R7 R7-Office Document Server up to 20250820. Impacted is an unknown function of the file /downloadas/. Executing manipulation of the argument cmd can lead to path traversal. The attack can be launched remotely. Upgrading to version 2025.3.1.923 is recommended to addre...
CVE-2025-10777
CVE-2025-10777 affects the JSC R7 R7-Office Document Server (versions up to 20250820). A flaw in an unknown function of the file /downloadas/ allows remote exploitation by manipulating the cmd argument to trigger a path traversal. The vendor confirms this vulnerability and specifies a fix in rele...