CVE-2024-41199

An issue in Ocuco Innovation - JOBMANAGER.EXE v2.10.24.16 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet...

ABB多款产品 安全漏洞

ABB ASPECT-Enterprise and others are products of ABB Switzerland.ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexib...

CVE-2024-41195

An issue in Ocuco Innovation - INNOVASERVICEINTF.EXE v2.10.24.17 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet...

CVE-2024-41196

CVE-2024-41196 affects Ocuco Innovation – REPORTSERVER.EXE v2.10.24.13. The issue is an authentication bypass in the REPORTSERVER.EXE component that allows an attacker to escalate privileges to Administrator via a crafted TCP packet. Several connected sources corroborate the authentication bypass...

CVE-2024-41197

An issue in Ocuco Innovation - INVCLIENT.EXE v2.10.24.5 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet...

PT-2025-22559 · Ocuco Innovation · Jobmanager.Exe

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation - JOBMANAGER.EXE version 2.10.24.16 Description: The issue allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet. Recommendations: For Ocuco Innovation - JOBMANAGER.EXE...

PT-2025-22555 · Ocuco Innovation · Innovaserviceintf.Exe

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation - INNOVASERVICEINTF.EXE version 2.10.24.17 Description: The issue allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet. Recommendations: For Ocuco Innovation -...

PT-2025-22558 · Ocuco Innovation · Reports.Exe

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation - REPORTS.EXE version 2.10.24.13 Description: The issue allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet. Recommendations: For Ocuco Innovation - REPORTS.EXE version...

PT-2025-22519 · Unknown · Nexus Series +2

Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3.08.03 NEXUS Series versions through 3.08.03 MATRIX Series versions through 3.08.03 Description: The issue allows attackers to control TCP/IP port access if session administrator credentials become...

PT-2025-22550 · Ocuco · Ocuco Innovation Tracking.Exe

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation Tracking.exe version 2.10.24.51 Description: The issue allows a local attacker to escalate privileges via the modification of TCP packets. Recommendations: For Ocuco Innovation Tracking.exe version 2.10.24.51, at the moment,...

CVE-2007-6741

The ftpPORT function in FTPServer.py in pyftpdlib before 0.2.0 does not prevent TCP connections to privileged ports if the destination IP address matches the source IP address of the connection from the FTP client, which might allow remote authenticated users to conduct FTP bounce attacks via...

CVE-2008-7199

Phoenix Contact FL IL 24 BK-PAC allows remote attackers to cause a denial of service hang via 1 unspecified manipulations as demonstrated by a Nessus scan or 2 malformed input to TCP port 502...

CVE-2002-2373

The default configuration of the TCP/IP printer configuration utility in Apple LaserWriter 12/640 PS printer contains a blank Telnet password, which allows remote attackers to gain access...

CVE-2002-2179

The dynamic initialization feature of the ClearPath MCP environment allows remote attackers to cause a denial of service crash via a TCP port scan using a tool such as nmap...

CVE-2009-5120

The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0 allows connections to TCP port 1812 from arbitrary source IP addresses, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via UTF-7 text to the 404...

CVE-2003-0677

Cisco CSS 11000 routers on the CS800 chassis allow remote attackers to cause a denial of service CPU consumption or reboot via a large number of TCP SYN packets to the circuit IP address, aka "ONDM Ping failure."...

CVE-2005-2068

FreeBSD 4.x through 4.11 and 5.x through 5.4 allows remote attackers to modify certain TCP options via a TCP packet with the SYN flag set for an already established session...

CVE-2002-2150

Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as 1 TCP SYN flood, 2 UDP flood, or 3 Crikey CRC Flood, which causes the firewall to refuse any new connections...

CVE-2002-2071

Compaq Tru64 4.0 d allows remote attackers to cause a denial of service in 1 telnet, 2 FTP, 3 ypbind, 4 rpc.lockd, 5 snmp, 6 ttdbserverd, and possibly other services via a TCP SYN scan, as demonstrated using nmap...

CVE-2009-3937

Memory leak in Solaris TCP sockets in Sun OpenSolaris snv106 through snv126 allows local users to cause a denial of service kernel memory consumption via unspecified vectors involving tcpsendmsg processing "ancillary data."...