CVE-2021-22280

Improper DLL loading algorithms in B Automation Studio versions =4.0 and 4.12 may allow an authenticated local attacker to execute code in the context of the product...

CVE-2021-22289

Improper Input Validation vulnerability in the project upload mechanism in B Automation Studio version =4.0 may allow an unauthenticated network attacker to execute code...

EUVD-2020-3982

Malware in sbrugna...

EUVD-2019-8737

Malware in sbrugna...

EUVD-2019-8739

Malware in sbrugna...

EUVD-2019-8738

Malware in sbrugna...

EUVD-2024-16119

Malicious code in bioql PyPI...

EUVD-2024-16019

Malicious code in bioql PyPI...

EUVD-2021-9427

Malicious code in bioql PyPI...

EUVD-2021-9435

Malicious code in bioql PyPI...

EUVD-2024-46949

Malicious code in bioql PyPI...

EUVD-2021-9421

Malicious code in bioql PyPI...

EUVD-2024-46948

Malicious code in bioql PyPI...

EUVD-2022-51642

Malicious code in bioql PyPI...

EUVD-2021-9426

Malicious code in bioql PyPI...

EUVD-2023-58286

Malicious code in bioql PyPI...

EUVD-2024-49645

Malicious code in bioql PyPI...

B&R Automation Runtime Improper Neutralization of Input During Web Page Generation (CVE-2023-6028)

A reflected cross-site scripting XSS vulnerability exists in the SVG version of System Diagnostics Manager of B&R Automation Runtime versions = G4.93 that enables a remote attacker to execute arbitrary JavaScript code in the context of the attacked user's browser session. This plugin only works...

B&R Automation Runtime Use of a Cryptographic Primitive with a Risky Implementation (CVE-2024-0323)

The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1. An network- based attacker can exploit the flaws to conduct man-in-the-middle attacks or to decrypt communications between the affected product clients. This plugin only...

B&R Automation Runtime Allocation of Resources Without Limits or Throttling (CVE-2023-3242)

Improper initialization implementation in Portmapper used in B&R Industrial Automation Automation Runtime G4.93 allows unauthenticated network-based attackers to cause permanent denial-of-service conditions. This plugin only works with Tenable.ot. Please visit...