Rockwell Automation/Allen-Bradley MicroLogix 1400 Series B FRN < 21.2 Denial of Service

Binary data 720098.prm...

Rockwell Automation PM3000 M5 w/EtherNetIP,Class 0.5 1404-M5xxx-ENT B

Binary data 753884.prm...

Rockwell Automation PM3000 M8 w/EtherNetIP,Class 0.5 1404-M8xxx-ENT B

Binary data 753892.prm...

Rockwell Automation 1746-A13/B Chassis

Binary data 753522.prm...

Omron CJ1W-PH41U Position Controller Detection

Binary data 755981.prm...

Omron G9SB-301-B Safety Controller Detection

Binary data 756252.prm...

Rockwell Automation 1797-IE8H/B - 8 Channel Non-Isolated Analog HART Input General Purpose HART Analog I/O

Binary data 752854.prm...

Sierra Wireless AirLink ALEOS (Update B)

1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits are available Vendor: Sierra Wireless Equipment: AirLink ALEOS Vulnerabilities: OS Command Injection, Use of Hard-coded Credentials, Unrestricted Upload of File with Dangerous Type,...

CVE-2019-10955

Affected products: Rockwell Automation MicroLogix 1400 (Series A, B up to v15.002), MicroLogix 1100 (v14.00 and earlier), CompactLogix 5370 L1/L2/L3 controllers (up to v30.014), including GuardLogix. Vulnerability type: open redirect in the controller web server that could be exploited by a remot...

CVE-2019-1725

A vulnerability in the local management CLI implementation for specific commands on the Cisco UCS B-Series Blade Servers could allow an authenticated, local attacker to overwrite an arbitrary file on disk. It is also possible the attacker could inject CLI command parameters that should not be...

CVE-2019-1725 Cisco UCS B-Series Blade Servers Local Management CLI Arbitrary File Creation or CLI Parameter Injection Vulnerability

A vulnerability in the local management CLI implementation for specific commands on the Cisco UCS B-Series Blade Servers could allow an authenticated, local attacker to overwrite an arbitrary file on disk. It is also possible the attacker could inject CLI command parameters that should not be...

CVE-2019-1725

CVE-2019-1725 affects Cisco UCS B-Series Blade Servers. A vulnerability in the local management CLI allows an authenticated, local attacker to overwrite arbitrary files on disk or inject CLI parameters for a subset of commands due to insufficient input validation. The issue is specific to certain...

Cisco UCS B-Series Blade Servers Local Management CLI Arbitrary File Creation or CLI Parameter Injection Vulnerability

A vulnerability in the local management CLI implementation for specific commands on the Cisco UCS B-Series Blade Servers could allow an authenticated, local attacker to overwrite an arbitrary file on disk. It is also possible the attacker could inject CLI command parameters that should not be...

USN-3932-1 linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities

It was discovered that a race condition existed in the f2fs file system implementation in the Linux kernel. A local attacker could use this to cause a denial of service. CVE-2017-18249 Wen Xu discovered that the f2fs file system implementation in the Linux kernel did not properly validate metadat...

CVE-2019-9123

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. The "user" account has a blank password...

CVE-2019-5909

CVE-2019-5909 concerns Yokogawa License Manager Service across multiple products (CENTUM VP, CENTUM VP Entry Class, ProSafe-RS, PRM, B/M9000 VP). The vulnerability arises from improper access control that allows a remote attacker to upload arbitrary files to the PC running License Manager, enabli...

Android - binder Use-After-Free via fdget() Optimization Exploit

Android - binder Use-After-Free via fdget Optimization Exploit This bug report describes two different issues in different branches of the binder kernel code. The first issue is in the upstream Linux kernel, commit 7f3dc0088b98 "binder: fix proc-files use-after-free"; the second issue is in the...

Security Bulletin: Multiple vulnerabilities in Java SDK affect IBM b-type SAN directors and switches.

Summary There are multiple vulnerabilities in SDK Java™ affecting IBM b-type SAN directors and switches. These issues were disclosed as part of the Java SDK updates in July 2018. Vulnerability Details CVEID: CVE-2018-2952 DESCRIPTION: An unspecified vulnerability related to the Java SE Concurrenc...

Security Bulletin: Multiple vulnerabilities in Java SDK affect IBM b-type SAN directors and switches.

Summary There are multiple vulnerabilities in SDK Java™ affecting IBM b-type SAN directors and switches. These issues were disclosed as part of the Java SDK updates in April 2018. Vulnerability Details CVEID: CVE-2018-2800 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the...

Kunbus PR100088 Modbus Gateway (Update B)

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Kunbus Equipment: PR100088 Modbus gateway Vulnerabilities: Improper Authentication, Information Exposure Through Query Strings in GET Request, Missing Authentication for Critical Function, Imprope...