CVE-2021-3680

showdoc is vulnerable to Missing Cryptographic Step...

CVE-2021-3680

showdoc is vulnerable to Missing Cryptographic Step...

Design/Logic Flaw

showdoc is vulnerable to Missing Cryptographic Step...

CVE-2021-3680

showdoc is vulnerable to Missing Cryptographic Step...

CVE-2021-3680

showdoc is vulnerable to Missing Cryptographic Step...

CVE-2021-3680

CVE-2021-3680 relates to showdoc and centers on a missing cryptographic step due to a hardcoded salt in the user password hash function. Documents from GHSA-8VH3-29MR-M9XG and PT-2021-21367 confirm this flaw and describe the use of a fixed salt, implying weaknesses in password hashing. No concret...

CVE-2021-3680: Missing Cryptographic Step

showdoc is vulnerable to Missing Cryptographic Step...

OESA-2021-1267 linuxptp security update

Linuxptp is an implementation of the Precision Time Protocol PTP according to IEEE standard 1588 for Linux. The dual design goals are to provide a robust implementation of the standard and to use the most relevant and modern Application Programming Interfaces API offered by the Linux kernel...

Remote Code Execution Vulnerability in Multiple SIMATIC Software Products

Siemens SIMATIC PCS 7 is a process control system from Siemens, Germany.SIMATIC STEP 7 V5.X is the classic engineering software for configuring and programming SIMATIC S7-300/S7-400/C7/WinAC controllers.STARTER is the drive engineering tool for parameterization and debugging. A remote code...

XSS Vulnerability in the Transportation Management Cloud Platform of Shanghai BuBuYiBai Technology Co.

Ltd. is a high-tech enterprise providing information system for domestic small and medium-sized logistics. Shanghai BBYB Technology Co., Ltd. has an XSS vulnerability in its transportation management cloud platform, which can be exploited by attackers to obtain sensitive information such as user...

CVE-2021-31893

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3, SIMATIC PDM All versions V9.2, SIMATIC STEP 7 V5.X All versions V5.6 SP2 HF3, SINAMICS STARTER containing STEP 7 OEM version All versions V5.4 HF2. The affected software...

CVE-2021-31893

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3, SIMATIC PDM All versions V9.2, SIMATIC STEP 7 V5.X All versions V5.6 SP2 HF3, SINAMICS STARTER containing STEP 7 OEM version All versions V5.4 HF2. The affected software...

CVE-2021-31894

CVE-2021-31894 affects Siemens SIMATIC PCS 7 family, PDM, STEP 7, and SINAMICS STARTER with write-permission metafiles. The issue stems from an incorrect permission assignment for a critical resource (metafile directory), allowing an attacker to alter metafile contents and subsequently influence ...

CVE-2021-31893

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3, SIMATIC PDM All versions V9.2, SIMATIC STEP 7 V5.X All versions V5.6 SP2 HF3, SINAMICS STARTER containing STEP 7 OEM version All versions V5.4 HF2. The affected software...

CVE-2021-31893

CVE-2021-31893 affects Siemens SIMATIC PCS 7 family and related tools (PCS 7 v8.2 and earlier; PCS 7 v9.0 prior to SP3; PDM prior to v9.2; STEP 7 v5.X prior to v5.6 SP2 HF3; SINAMICS STARTER prior to v5.4 HF2) and is caused by a buffer overflow when handling certain files. This can allow a local ...

PT-2021-19568

Name of the Vulnerable Software and Affected Versions: SIMATIC PCS 7 versions 8.2 and earlier SIMATIC PCS 7 V9.0 versions prior to V9.0 SP3 SIMATIC PDM versions prior to V9.2 SIMATIC STEP 7 V5.X versions prior to V5.6 SP2 HF3 SINAMICS STARTER containing STEP 7 OEM version versions prior to V5.4 H...

Siemens SIMATIC PCS 7 安全漏洞

Siemens SIMATIC PCS 7 is a process control system from Siemens, Germany.SIMATIC STEP 7 V5.X is the classic engineering software for configuring and programming SIMATIC S7-300/S7-400/C7/WinAC controllers.STARTER is the drive engineering tool for parameterization and debugging. A remote code...

CVE-2021-31894: Incorrect Permission Assignment for Critical Resource

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier All versions, SIMATIC PCS 7 V9.X All versions V9.1 SP2, SIMATIC PDM All versions V9.2 SP2, SIMATIC STEP 7 V5.X All versions V5.7, SINAMICS STARTER containing STEP 7 OEM version All versions V5.4 SP2 HF1. A directory containing...

CVE-2021-31893: Buffer Copy without Checking Size of Input

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3, SIMATIC PDM All versions V9.2, SIMATIC STEP 7 V5.X All versions V5.6 SP2 HF3, SINAMICS STARTER containing STEP 7 OEM version All versions V5.4 HF2. The affected software...

Transactions nearing block.gaslimit may cause issues

Handle hrkrshnn Vulnerability details transactions nearing block.gaslimit may cause issues A general problem with schemes that require multiple steps and whose inputs are dynamically typed is that: a user may be able to "commit" something, but never "execute" it because the "execute" transaction...