5837 matches found
PT-2025-12725
Name of the Vulnerable Software and Affected Versions B&R APROL versions prior to 4.4-00P5 Description A Server-Side Request Forgery issue may allow an authenticated network-based attacker to force the web server to request arbitrary URLs. Recommendations For versions prior to 4.4-00P5, update to...
PT-2025-12739
Name of the Vulnerable Software and Affected Versions B&R APROL versions prior to 4.4-005P Description The issue allows an authenticated network-based attacker to access data from the file system due to an External Control of File Name or Path vulnerability in the APROL Web Portal. Recommendation...
CVE-2024-10210: External Control of File Name or Path
An External Control of File Name or Path vulnerability in the APROL Web Portal used in B&R APROL 4.4-005P may allow an authenticated network-based attacker to access data from the file system...
CVE-2024-10208: Improper Neutralization of Input During Web Page Generation
An Improper Neutralization of Input During Web Page Generation vulnerability in the APROL Web Portal used in B&R APROL 4.4-00P5 may allow an authenticated network-based attacker to insert malicious code which is then executed in the context of the user’s browser session...
CVE-2024-45480: Improper Control of Generation of Code
An improper control of generation of code 'Code Injection' vulnerability in the AprolCreateReport component of B&R APROL 4.4-00P5 may allow an unauthenticated network-based attacker to read files from the local system...
PT-2025-12732
Name of the Vulnerable Software and Affected Versions B&R APROL versions prior to 4.4-00P5 Description The issue is related to an Allocation of Resources Without Limits or Throttling vulnerability in the operating system network configuration. This vulnerability may allow an unauthenticated...
CVE-2024-10209: Incorrect Permission Assignment for Critical Resource
An Incorrect Permission Assignment for Critical Resource vulnerability in the file system used in B&R APROL 4.4-01 may allow an authenticated local attacker to read and alter the configuration of another engineering or runtime user...
CVE-2024-8315: Improper Handling of Insufficient Permissions or Privileges
An Improper Handling of Insufficient Permissions or Privileges vulnerability in scripts used in B&R APROL 4.4-00P5 may allow an authenticated local attacker to read credential information...
CVE-2024-8313: Exposure of Sensitive System Information to an Unauthorized Control Sphere
An Exposure of Sensitive System Information to an Unauthorized Control Sphere and Initialization of a Resource with an Insecure Default vulnerability in the SNMP component of B&R APROL 4.4-00P5 may allow an unauthenticated adjacent-based attacker to read and alter configuration using SNMP...
CVE-2024-10207: Server-Side Request Forgery (SSRF)
A Server-Side Request Forgery vulnerability in the APROL Web Portal used in B&R APROL 4.4-00P5 may allow an authenticated network-based attacker to force the web server to request arbitrary URLs...
CVE-2024-10206: Server-Side Request Forgery (SSRF)
A Server-Side Request Forgery vulnerability in the APROL Web Portal used in B&R APROL 4.4-00P5 may allow an unauthenticated network-based attacker to force the web server to request arbitrary URLs...
PT-2025-12728
Name of the Vulnerable Software and Affected Versions B&R APROL versions prior to 4.4-00P5 Description An improper control of generation of code, also known as 'Code Injection', in the AprolCreateReport component may allow an unauthenticated network-based attacker to read files from the local...
PT-2025-12729
Name of the Vulnerable Software and Affected Versions B&R APROL versions prior to 4.4-00P5 Description The issue is related to an Incomplete Filtering of Special Elements vulnerability in scripts using the SSH server, which may allow an authenticated local attacker to authenticate as another...
PT-2025-12730
Name of the Vulnerable Software and Affected Versions B&R APROL versions prior to 4.4-00P1 Description The issue is related to an Inclusion of Functionality from Untrusted Control Sphere vulnerability in the SSH server, which may allow an authenticated local attacker from a trusted remote server ...
PT-2025-12731
Name of the Vulnerable Software and Affected Versions B&R APROL versions prior to 4.4-01 Description A Missing Authentication for Critical Function vulnerability in the GRUB configuration may allow an unauthenticated physical attacker to alter the boot configuration of the operating system...
PT-2025-12735
Name of the Vulnerable Software and Affected Versions B&R APROL versions prior to 4.4-00P5 Description The issue is related to an Improper Handling of Insufficient Permissions or Privileges vulnerability in scripts used in the software. This may allow an authenticated local attacker to read...
Malicious code in my-local-b-off (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55183046ab5c00a4004d794bf477003beb964f8267681dcd3e19c8cc97c628f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2577 Malicious code in my-local-b-off (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55183046ab5c00a4004d794bf477003beb964f8267681dcd3e19c8cc97c628f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-25580
creationtimestamp| type| source ---|---|--- 2025-03-18 17:44:26+00:00| seen| https://t.me/cvedetector/20588 2025-03-18 18:13:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkobidkfze2w 2025-08-12 13:33:28+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e996 2025-08-21...
