PT-2020-6696 · Siemens · Simocode Es +12

Name of the Vulnerable Software and Affected Versions: Opcenter Execution Discrete versions prior to V3.2 Opcenter Execution Foundation versions prior to V3.2 Opcenter Execution Process versions prior to V3.2 Opcenter Intelligence versions prior to V3.3 Opcenter Quality versions prior to V11.3...

aero.champ:cargojson (1.0), ai.active:webhook-sdk (>=1.0.0, <=1.0.4) +31303 more potentially affected by CVE-2020-14060 via com.fasterxml.jackson.core:jackson-databind (>=2.9.0, <=2.9.10.4)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.9.0, =1.0.0, =4.4.0.0, =local, =thread-pool-0.0.24-dev, =local, =local, =thread-pool-0.0.24-dev, =local, =local, =thread-pool-0.0.24-dev, =local, =0.0.12, =0.0.12, =0.1.2, =0.1.7 and more Source cves: CVE-2020-14060 Source advisory:...

CVE-2020-7585

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3, SIMATIC PDM All versions V9.2, SIMATIC STEP 7 V5.X All versions V5.6 SP2 HF3, SINAMICS STARTER containing STEP 7 OEM version All versions V5.4 HF2. A DLL Hijacking...

CVE-2020-7586

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3, SIMATIC PDM All versions V9.2, SIMATIC STEP 7 V5.X All versions V5.6 SP2 HF3, SINAMICS STARTER containing STEP 7 OEM version All versions V5.4 HF2. A buffer overflow...

Buffer overflow

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3, SIMATIC PDM All versions V9.2, SIMATIC STEP 7 V5.X All versions V5.6 SP2 HF3, SINAMICS STARTER containing STEP 7 OEM version All versions V5.4 HF2. A buffer overflow...

Code injection

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3, SIMATIC PDM All versions V9.2, SIMATIC STEP 7 V5.X All versions V5.6 SP2 HF3, SINAMICS STARTER containing STEP 7 OEM version All versions V5.4 HF2. A DLL Hijacking...

CVE-2020-7586

CVE-2020-7586 is a local, heap-based buffer overflow vulnerability affecting Siemens products (SIMATIC PCS 7, PDM, STEP 7, SINAMICS STARTER). The issue allows a local attacker with existing access to cause a DoS and potentially access confidential information due to memory corruption. Root cause ...

CVE-2020-7585

The connected advisory (ICSA-20-161-05) provides concrete details for CVE-2020-7585. A DLL hijacking flaw (Uncontrolled Search Path Element, CWE-427) in Siemens software could allow a local attacker with access to execute code with elevated privileges, affecting: SIMATIC PCS 7 v8.2 and earlier; S...

PT-2020-5920

Name of the Vulnerable Software and Affected Versions: SIMATIC PCS 7 versions V8.2 and earlier SIMATIC PCS 7 version V9.0 through V9.0 SP2 SIMATIC PDM versions prior to V9.2 SIMATIC STEP 7 versions prior to V5.6 SP2 HF3 SINAMICS STARTER versions prior to V5.4 HF2 Description: A buffer overflow...

CVE-2020-7586: Heap-based Buffer Overflow

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3, SIMATIC PDM All versions V9.2, SIMATIC STEP 7 V5.X All versions V5.6 SP2 HF3, SINAMICS STARTER containing STEP 7 OEM version All versions V5.4 HF2. A buffer overflow...

CVE-2020-7585: Uncontrolled Search Path Element

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3, SIMATIC PDM All versions V9.2, SIMATIC STEP 7 V5.X All versions V5.6 SP2 HF3, SINAMICS STARTER containing STEP 7 OEM version All versions V5.4 HF2. A DLL Hijacking...

PT-2020-5921

Name of the Vulnerable Software and Affected Versions: SIMATIC PCS 7 versions V8.2 and earlier SIMATIC PCS 7 version V9.0 through V9.0 SP2 SIMATIC PDM versions prior to V9.2 SIMATIC STEP 7 versions prior to V5.6 SP2 HF3 SINAMICS STARTER versions prior to V5.4 HF2 Description: A DLL Hijacking...

com.buession.cas:buession-cas-core (>=1.1.1, <=1.1.2), com.buession.cas:buession-cas-metrics (>=1.1.1, <=1.1.2) +525 more potentially affected by CVE-2020-5407 via org.springframework.security:spring-security-core (>=5.3.0.release, <=5.3.1.release)

org.springframework.security:spring-security-core MAVEN version =5.3.0.release, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.0.0, =5.15.0, =5.16.0 and more Source cves: CVE-2020-5407 Source advisory: OSV:GHSA-48RW-J489-928M...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.8, <=0.1.12), ai.grakn:grakn (>=0.17.0, <=0.18.0) +14696 more potentially affected by CVE-2020-9547 via com.fasterxml.jackson.core:jackson-databind (>=2.8.0, <=2.8.11.5)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.8.0, =0.1.8, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.16.0, =0.16.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.18.0 and more Source cves: CVE-2020-9547 Source advisory: GHSA-Q93H-JC49-78GG...

Security Bulletin: IBM Security Information Queue does not invalidate sessions after logout (CVE-2020-4291)

Summary IBM Security Information Queue ISIQ session identifiers are not properly invalidated upon user logout from ISIQ's web UI. This create opportunities for an attacker to hijack a user session token. As of v1.0.6, ISIQ immediately invalidates the session token when a user logs out...

Unauthorized Access Vulnerability in Gas SCADA System of Shandong Starter Measurement and Control Equipment Co.

The gas transmission and distribution height SCADA system is a large-scale network system. SCADA system of Shandong Starter Measurement and Control Equipment Co., Ltd. has an unauthorized access vulnerability, which can be exploited by an attacker to obtain critical information of the enterprise'...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.8, <=0.1.12), ai.grakn:grakn (>=0.17.0, <=0.18.0) +14694 more potentially affected by CVE-2019-20330 via com.fasterxml.jackson.core:jackson-databind (>=2.8.0, <=2.8.11.4)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.8.0, =0.1.8, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.16.0, =0.16.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.18.0 and more Source cves: CVE-2019-20330 Source advisory: OSV:GHSA-GWW7-P5W4-WRFV...

com.hotels.styx:styx-api-testsupport (>=1.0.0.beta3, <=1.0.0.beta6), com.hotels.styx:styx-client (>=1.0.0.beta3, <=1.0.0.beta9) +5 more potentially affected by CVE-2020-6858 via com.hotels.styx:styx-api (>=1.0.0.beta3, <=1.0.0.beta9)

com.hotels.styx:styx-api MAVEN version =1.0.0.beta3, =1.0.0.beta3, =1.0.0.beta3, =1.0.0.beta3, =1.0.0.beta3, =1.0.0.beta3, =1.0.0.beta3, =1.0.0.beta6 Source cves: CVE-2020-6858 Source advisory: OSV:GHSA-6V7P-V754-J89V...

com.hotels.styx:styx-api-testsupport (0.7.9), com.hotels.styx:styx-client (0.7.9) +5 more potentially affected by CVE-2020-6858 via com.hotels.styx:styx-api (0.7.9)

com.hotels.styx:styx-api MAVEN version 0.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.hotels.styx:styx-api and may be impacted: - com.hotels.styx:styx-api-testsupport 0.7.9 - com.hotels.styx:styx-client 0.7.9 - com.hotels.styx:styx-common...

com.hotels.styx:styx-api-testsupport (0.7.7), com.hotels.styx:styx-client (0.7.7) +5 more potentially affected by CVE-2020-6858 via com.hotels.styx:styx-api (0.7.7)

com.hotels.styx:styx-api MAVEN version 0.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hotels.styx:styx-api and may be impacted: - com.hotels.styx:styx-api-testsupport 0.7.7 - com.hotels.styx:styx-client 0.7.7 - com.hotels.styx:styx-common...