Lucene search
+L

6856 matches found

CVE
CVE
added 2021/10/26 9:55 a.m.69 views

CVE-2021-34595

The CVE-2021-34595 issue affects CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT versions prior to V2.4.7.56. A crafted request with invalid offsets can trigger an out-of-bounds read or write, leading to a denial-of-service condition or local memory overwrite. The issue’s impact is reflected ...

8.1CVSS7.9AI score0.00879EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2021/10/26 12:00 a.m.2 views

PT-2021-4893 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2021.07 and earlier Description: The issue is related to a stack-based buffer overflow, which can potentially result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...

9.3CVSS7.7AI score0.05811EPSS
SaveExploits3References97
Positive Technologies
Positive Technologies
added 2021/10/26 12:00 a.m.10 views

PT-2021-20571 · 3S Smart Software Solutions · Codesys V2 Runtime Toolkit +1

Name of the Vulnerable Software and Affected Versions: CODESYS V2 Runtime Toolkit 32 Bit full versions prior to V2.4.7.56 PLCWinNT versions prior to V2.4.7.56 Description: A crafted request may cause a read access to an uninitialized pointer, resulting in a denial-of-service condition...

6.5CVSS7AI score0.00855EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/10/26 12:00 a.m.7 views

CODESYS 缓冲区错误漏洞

CODESYS is a controller development system from Germany's 3S-Smart Software Solutions A buffer error vulnerability exists in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT versions prior to V2.4.7.56, which stems from a crafted request that could result in a denial-of-service condition due t...

6.5CVSS6.7AI score0.00855EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/10/26 12:00 a.m.3 views

PT-2021-4774 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2021.07 and earlier Description: The issue is related to a stack-based buffer overflow, which can potentially result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...

9.3CVSS7.9AI score0.05811EPSS
SaveExploits3References98
Positive Technologies
Positive Technologies
added 2021/10/26 12:00 a.m.4 views

PT-2021-4775 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2021.07 and earlier Description: The issue is related to a stack-based buffer overflow, which can potentially result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...

9.3CVSS7.9AI score0.05811EPSS
SaveExploits3References97
Adobe
Adobe
added 2021/10/26 12:00 a.m.48 views

APSB21-108: Security update available for Adobe XMP Toolkit SDK

Adobe has released updates for XMP-Toolkit-SDK. These updates resolve critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution and application denial of service...

7.3AI score
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2021/10/26 12:00 a.m.2 views

PT-2021-4892 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2021.07 and earlier Description: The issue is related to a stack-based buffer overflow, which can potentially result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...

9.3CVSS7.7AI score0.05811EPSS
SaveExploits3References97
Positive Technologies
Positive Technologies
added 2021/10/26 12:00 a.m.5 views

PT-2021-6801 · Adobe +4 · Xmp Toolkit +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit versions 2021.07 and earlier Description: The issue is related to a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an...

9.3CVSS6.8AI score0.05811EPSS
SaveExploits3References96
CNNVD
CNNVD
added 2021/10/26 12:00 a.m.40 views

CODESYS 安全漏洞

CODESYS is a controller development system from 3S-Smart Software Solutions, Germany. A security vulnerability exists in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT versions prior to V2.4.7.56, which stems from a crafted invalid request without authentication in the affected software may...

7.5CVSS7.2AI score0.02736EPSS
SaveExploits4References7
Positive Technologies
Positive Technologies
added 2021/10/26 12:00 a.m.18 views

PT-2021-20569 · 3S Smart Software Solutions · Codesys V2 Runtime Toolkit

Name of the Vulnerable Software and Affected Versions: CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT versions prior to V2.4.7.56 Description: The issue allows unauthenticated crafted invalid requests to result in several denial-of-service conditions. This can cause running PLC programs to b...

7.5CVSS7.2AI score0.02736EPSS
SaveExploits4References9
CNNVD
CNNVD
added 2021/10/26 12:00 a.m.9 views

CODESYS 缓冲区错误漏洞

CODESYS is a controller development system from 3S-Smart Software Solutions, Germany. A security vulnerability exists in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT versions prior to V2.4.7.56, which stems from a request with an invalid offset in the affected software that could result in...

8.1CVSS7.7AI score0.00879EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/10/26 12:00 a.m.8 views

PT-2021-20570 · 3S Smart Software Solutions · Codesys V2 Runtime Toolkit +1

Name of the Vulnerable Software and Affected Versions: CODESYS V2 Runtime Toolkit 32 Bit full versions prior to V2.4.7.56 PLCWinNT versions prior to V2.4.7.56 Description: A crafted request with invalid offsets may cause an out-of-bounds read or write access, resulting in a denial-of-service...

8.1CVSS7.8AI score0.00879EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/10/25 2:00 p.m.12 views

CVE-2021-34593

In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in several denial-of-service conditions. Running PLC programs may be stopped, memory may be leaked, or further communication clients may be blocked from accessing...

7.5CVSS7AI score0.02736EPSS
SaveExploits4References5
ATTACKERKB
ATTACKERKB
added 2021/10/25 2:00 p.m.5 views

CVE-2021-34596

A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition...

6.5CVSS6.6AI score0.00855EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/10/25 2:00 p.m.8 views

CVE-2021-34595

A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite...

8.1CVSS7.2AI score0.00879EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/10/25 12:00 a.m.10 views

Nxp Semiconductors Nxp Mcu Xpresso Sdk 安全漏洞

The Nxp Semiconductors Nxp Mcu Xpresso Sdk is a comprehensive software support package from Nxp Semiconductors in the Netherlands. It is used to customize and download the Sdk for a specific processor or evaluation board selection, accelerating software development. A security vulnerability exist...

7.8CVSS7.7AI score0.00323EPSS
SaveExploits1References2
Fedora
Fedora
added 2021/10/24 11:03 p.m.39 views

[SECURITY] Fedora 34 Update: python-reportlab-3.6.2-1.fc34

This is the ReportLab PDF Toolkit. It allows rapid creation of rich PDF documents, and also creation of charts in a variety of bitmap and vector formats...

6.5CVSS2AI score0.01487EPSS
SaveExploits1
OSV
OSV
added 2021/10/19 7:15 p.m.10 views

CVE-2021-31350

An Improper Privilege Management vulnerability in the gRPC framework, used by the Juniper Extension Toolkit JET API on Juniper Networks Junos OS and Junos OS Evolved, allows a network-based, low-privileged authenticated attacker to perform operations as root, leading to complete compromise of the...

8.8CVSS5.8AI score0.00873EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/19 7:15 p.m.29 views

CVE-2021-31350

An Improper Privilege Management vulnerability in the gRPC framework, used by the Juniper Extension Toolkit JET API on Juniper Networks Junos OS and Junos OS Evolved, allows a network-based, low-privileged authenticated attacker to perform operations as root, leading to complete compromise of the...

9CVSS0.00873EPSS
SaveExploits0References1
Rows per page
Query Builder