Lucene search
+L

3519 matches found

Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.18 views

LAquis SCADA LGX Report Memory Free Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.5CVSS2.6AI score0.02572EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.20 views

LAquis SCADA LGX Report Edit Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.5CVSS1.8AI score0.02572EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.22 views

LAquis SCADA LGX Report File Open Path Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

5CVSS1.2AI score0.02572EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.25 views

LAquis SCADA Web Server acompanhamentotela PAGINA Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to acompanhamentotela.lhtml. When parsing the PAGINA...

7.5CVSS4.5AI score0.01984EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.27 views

LAquis SCADA Web Server relatorionome NOME Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to relatorionome.lhtml. When parsing the NOME Element, t...

7.5CVSS4.1AI score0.02462EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.25 views

LAquis SCADA Web Server acompanhamentotela TAGALTERE Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to acompanhamentotela.lhtml. When parsing the TAGALTERE...

7.5CVSS4.3AI score0.01984EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.22 views

LAquis SCADA LGX Report File Write Arbitrary File Creation Vulnerability

This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.5CVSS1.6AI score0.02572EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.28 views

LAquis SCADA Web Server relatorioindividual TAG Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to relatorioindividual.lhtml. When parsing the TAG...

7.5CVSS4.3AI score0.01984EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.32 views

LAquis SCADA LGX Report TextFile Write Arbitrary File Creation Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.5CVSS1.8AI score0.02572EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.21 views

LAquis SCADA LGX Report Ini WriteString Arbitrary File Creation Vulnerability

This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.5CVSS1.7AI score0.02572EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.31 views

LAquis SCADA Web Server Hardcoded Credentials Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of LAquis SCADA Software. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of login requests to the product's webserver. The product contains...

7.5CVSS1.6AI score0.02375EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.29 views

LAquis SCADA Web Server URI Parsing Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of LAquis SCADA Software. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of URIs by the product's web server. A crafted URI can cause the w...

5CVSS2.7AI score0.08789EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.22 views

LAquis SCADA LGX Report Memory PChar Untrusted Pointer Dereference Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

5CVSS1.3AI score0.02572EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.20 views

LAquis SCADA LGX Report MemoryWriteLong Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.5CVSS2.6AI score0.02572EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.30 views

LAquis SCADA Web Server relatorionome TAG Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to relatorionome.lhtml. When parsing the TAG Element, th...

7.5CVSS3.9AI score0.02462EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/01/18 12:00 a.m.13 views

Unspecified vulnerability in LCDS LAquis SCADA (CNVD-2019-28111)

LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of equipment with communication technology. A security vulnerability exists in LCDS LAquis SCADA version 4.1.0.3870, whi...

9.8CVSS7.3AI score0.02462EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/01/17 12:00 a.m.12 views

LCDS LAquis SCADA Path Traversal Vulnerability

LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of equipment with communication technology. A path traversal vulnerability in LCDS LAquis SCADA version 4.1.0.3870, whic...

5.3CVSS6.5AI score0.39487EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2019/01/17 12:00 a.m.19 views

LCDS LAquis SCADA Detection (Windows SMB Login)

SMB login-based detection of LCDS LAquis SCADA. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.1AI score
SaveExploits0References1
CNVD
CNVD
added 2019/01/17 12:00 a.m.16 views

LCDS LAquis SCADA Code Injection Vulnerability

LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of equipment with communication technology. A code injection vulnerability exists in LCDS LAquis SCADA version 4.1.0.387...

8.3CVSS7.7AI score0.02668EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/01/17 12:00 a.m.9 views

LCDS LAquis SCADA Out-of-Bounds Read Vulnerability

LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of equipment with communication technology. An out-of-bounds read vulnerability exists in LCDS LAquis SCADA version...

4.3CVSS6.7AI score0.03726EPSS
SaveExploits0References1
Rows per page
Query Builder