Lucene search
K

39 matches found

Tenable Nessus
Tenable Nessus
added 2026/03/04 12:0 a.m.2 views

Hitachi Energy RTU500 Product Incomplete List of Disallowed Inputs (CVE-2026-1773)

IEC 60870-5-104: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality is configured. Enabling secure communication following IEC 62351-3 does not remediate the vulnerability but mitigates the risk of...

8.7CVSS5.8AI score0.00026EPSS
Exploits0References3
NVD
NVD
added 2026/02/24 2:16 p.m.1 views

CVE-2026-1773

IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality is configured. Enabling secure communication following IEC 62351-3 does not remediate the vulnerability but mitigates...

8.7CVSS0.00026EPSS
Exploits0References1
CVE
CVE
added 2026/02/24 1:13 p.m.11 views

CVE-2026-1773

CVE-2026-1773 impacts IEC 60870-5-104 stack when bi-directional functionality is configured. The issue is a Denial of Service caused by receiving an invalid U-format frame, with impact to availability (HIGH) and no confidentiality/integrity impacts. The vulnerability is exploitable via network wi...

8.7CVSS5.8AI score0.00026EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2026/02/24 1:13 p.m.1 views

EUVD-2026-8462

IEC 60870-5-104: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality is configured. Enabling secure communication following IEC 62351-3 does not remediate the vulnerability but mitigates the risk of...

8.7CVSS5.3AI score0.00026EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/24 1:13 p.m.16 views

CVE-2026-1773

IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality is configured. Enabling secure communication following IEC 62351-3 does not remediate the vulnerability but mitigates...

8.7CVSS0.00026EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/24 12:0 a.m.3 views

PT-2026-21677

Name of the Vulnerable Software and Affected Versions IEC 60870-5-104 affected versions not specified Description The software may experience a denial of service when receiving invalid U-format frames. The issue affects products only if the IEC 60870-5-104 bi-directional functionality is...

8.7CVSS5.9AI score0.00026EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-18209

Malware in sbrugna...

5.3CVSS5.5AI score0.00237EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-18208

Malware in sbrugna...

7.5CVSS7.6AI score0.00334EPSS
Exploits0References2
OSV
OSV
added 2025/07/07 12:0 a.m.2 views

ALSA-2025:10353 Moderate: socat security update

The socat utility establishes bi-directional byte streams and transfers data between them. The utility can establish streams between a large set of channels, such as files, pipes, devices, and sockets. Security Fixes: socat: arbitrary file overwrite via predictable /tmp directory CVE-2024-54661 F...

9.8CVSS6.4AI score0.00169EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2024/07/11 12:0 a.m.16 views

RHEL 7 : gcc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks...

8.3CVSS7.4AI score0.24988EPSS
Exploits4References1
CNVD
CNVD
added 2024/02/02 12:0 a.m.12 views

IBM SOAR QRadar Plugin App Access Control Error Vulnerability

The IBM SOAR QRadar Plugin is a tool from International Business Machines IBM used to provide bi-directional messaging between IBM Security QRadar SIEM and QRadar SOAR. An access control error vulnerability exists in the IBM SOAR QRadar Plugin App, which could be exploited by an attacker to perfo...

8.8CVSS6.7AI score0.0003EPSS
Exploits0References1
CNVD
CNVD
added 2024/02/02 12:0 a.m.6 views

IBM SOAR QRadar Plugin App Log Injection Vulnerability

The IBM SOAR QRadar Plugin is a tool from International Business Machines IBM used to provide bi-directional messaging between IBM Security QRadar SIEM and QRadar SOAR. A log injection vulnerability exists in the IBM SOAR QRadar Plugin App, which can be exploited by an attacker to manipulate the...

4.3CVSS6.7AI score0.00036EPSS
Exploits0References1
CVE
CVE
added 2022/11/22 12:0 a.m.134 views

CVE-2022-41940

CVE-2022-41940 affects Engine.IO, the transport layer used by Socket.IO. A specially crafted HTTP request can trigger an uncaught exception on the Engine.IO server, causing the Node.js process to crash and resulting in a denial of service. Affected are Engine.IO versions prior to patches released...

7.1CVSS6.5AI score0.02169EPSS
Exploits1References3Affected Software1
CNVD
CNVD
added 2022/05/06 12:0 a.m.27 views

JetBrains IntelliJ IDEA has an unspecified vulnerability (CNVD-2022-55673)

JetBrains IntelliJ IDEA is a suite of integrated development environments for the Java language from Czech company Jetbrains. security vulnerability exists in versions of JetBrains IntelliJ IDEA prior to 2022.1, which stems from an insufficient notification mechanism for using Unicode...

2.3CVSS3.9AI score0.00001EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/04/05 12:0 a.m.1 views

fribidi 缓冲区错误漏洞

fribidi is an open source implementation of a bi-directional Unicode algorithm. A security vulnerability exists in fribidi that stems from FriBidi incorrectly handling input strings resulting in memory corruption. An attacker could exploit this vulnerability to cause FriBidi to crash, resulting i...

7.8CVSS7.6AI score0.00045EPSS
Exploits1References23
OSV
OSV
added 2021/11/10 8:32 a.m.25 views

RLSA-2021:4586 Moderate: gcc-toolset-11-gcc security update

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fixes: Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were...

8.5CVSS8.1AI score0.24988EPSS
Exploits4References2
RedHat Linux
RedHat Linux
added 2021/11/01 7:44 a.m.42 views

Moderate: Red Hat Security Advisory: binutils security update

An update for binutils is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

8.3CVSS7.1AI score0.24988EPSS
Exploits4References3
CNVD
CNVD
added 2021/05/29 12:0 a.m.3 views

Information Disclosure Vulnerability in Lipo's Second Generation Firewall System

Leaf's second-generation firewall system is a product that provides comprehensive protection with L2-L7 layers of security visibility, effectively identifies content risks from the network and application layers through bi-directional detection of network traffic, and provides stronger security...

6.7AI score
Exploits0
Talos
Talos
added 2020/03/09 12:0 a.m.77 views

WAGO PFC200 Cloud Connectivity Improper Host Validation Vulnerability

Summary An exploitable improper host validation vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200. A specially crafted HTTPS POST request can cause the software to connect to an unauthorized host, resulting in unauthorized access to firmware update functionality. An...

9.1CVSS8.9AI score0.02153EPSS
Exploits1
Citrix
Citrix
added 2019/08/01 12:0 a.m.4 views

HTML5 receiver - Audio in high quality stops working when Skype for Business loads

The issue originates when a user logs in to a VDA, and in the background automatically launching Skype for Business. As soon as the application launches HDX Audio stops functioning. This only happens if the audio is set to "HIGH" on the VDA. When terminating Skype for Business and you reconnect t...

7AI score
Exploits0
Rows per page
Query Builder