10392 matches found
CVE-2021-22681
Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730,...
CVE-2021-22681
Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730,...
CVE-2021-22681
CVE-2021-22681 affects Rockwell Automation Studio 5000 Logix Designer (versions 21+) and RSLogix 5000 (16–20). The issue is “Insufficiently Protected Credentials” (CWE-522): an unauthenticated attacker could bypass the verification key used to confirm Logix controller communication and authentica...
CVE-2021-22681
Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730,...
Fuzzing Image Parsing in Windows, Part Two: Uninitialized Memory
Continuing our discussion of image parsing vulnerabilities in Windows, we take a look at a comparatively less popular vulnerability class: uninitialized memory. In this post, we will look at Windows’ inbuilt image parsers—specifically for vulnerabilities involving the use of uninitialized memory...
The vulnerability of Microsoft Visual Studio software, related to insufficient validation of input data, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Visual Studio software relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
CVE-2021-26700
Visual Studio Code npm-script Extension Remote Code Execution Vulnerability...
CVE-2021-26700
Visual Studio Code npm-script Extension Remote Code Execution Vulnerability...
CVE-2021-1721
.NET Core and Visual Studio Denial of Service Vulnerability...
CVE-2021-1721
.NET Core and Visual Studio Denial of Service Vulnerability...
CVE-2021-1639
Visual Studio Code Remote Code Execution Vulnerability...
CVE-2021-1639
Visual Studio Code Remote Code Execution Vulnerability...
Denial of service
.NET Core and Visual Studio Denial of Service Vulnerability...
Remote code execution
Visual Studio Code Remote Code Execution Vulnerability...
CVE-2021-26700
Visual Studio Code npm-script Extension Remote Code Execution Vulnerability...
CVE-2021-1721
.NET Core and Visual Studio Denial of Service Vulnerability...
Remote code execution
Visual Studio Code npm-script Extension Remote Code Execution Vulnerability...
CVE-2021-26700 Visual Studio Code npm-script Extension Remote Code Execution Vulnerability
...
CVE-2021-26700
The CVE affects the Visual Studio Code npm-script Extension (eg2.vscode-npm-script). A malicious project can cause the extension to execute commands when a user views package.json, via a crafted repository and settings.json, enabling remote code execution in the user’s context. Public exploitatio...