PT-2025-20843 · Siemens · Desigo Cc

Name of the Vulnerable Software and Affected Versions: Desigo CC All versions if access from Installed Clients to Desigo CC server is allowed from networks outside of a highly protected zone Desigo CC All versions if access from Installed Clients to Desigo CC server is only allowed within highly...

Siemens Desigo

SUMMARY Desigo CC deployments that use Installed Client are impacted by an information disclosure vulnerability which could result in information leak from the Desigo CC server. The other Desigo CC client options, Windows App Client and Flex Client, are not affected by this vulnerability...

Siemens Desigo CC 访问控制错误漏洞

Siemens Desigo CC is an open building management platform from Siemens, Germany, used to produce comfortable, safe and efficient facilities. An access control error vulnerability exists in Siemens Desigo CC, which stems from the server application not validating a specific client request, which...

CVE-2025-47442

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CC CC BMI Calculator cc-bmi-calculator allows Stored XSS.This issue affects CC BMI Calculator: from n/a through = 2.1.0...

CISA Releases Five Industrial Control Systems Advisories

CISA released five Industrial Control Systems ICS advisories on May 8, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-128-01 Horner Automation Cscape ICSA-25-128-02 Hitachi Energy RTU500 series ICSA-25-128-03...

CVE-2025-47442

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CC CC BMI Calculator cc-bmi-calculator allows Stored XSS.This issue affects CC BMI Calculator: from n/a through = 2.1.0...

CVE-2025-47442 WordPress CC BMI Calculator plugin <= 2.1.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CC CC BMI Calculator cc-bmi-calculator allows Stored XSS.This issue affects CC BMI Calculator: from n/a through = 2.1.0...

CVE-2025-47442

CVE-2025-47442 : Stored XSS in WordPress plugin CC BMI Calculator due to improper neutralization of input during web page generation. Affected: CC BMI Calculator versions n/a through 2.1.0. Connected documents confirm the vulnerability pattern but do not provide a concrete patch version or remedi...

CVE-2025-47442 WordPress CC BMI Calculator <= 2.1.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CC CC BMI Calculator allows Stored XSS. This issue affects CC BMI Calculator: from n/a through 2.1.0...

PT-2025-20080 · Unknown · Cc Bmi Calculator

Name of the Vulnerable Software and Affected Versions: CC BMI Calculator versions n/a through 2.1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

CVE-2024-40635 affecting package moby-containerd-cc for versions less than 1.7.7-9

CVE-2024-40635 affecting package moby-containerd-cc for versions less than 1.7.7-9. A patched version of the package is available...

CVE-2025-27144 affecting package moby-containerd-cc for versions less than 1.7.7-9

CVE-2025-27144 affecting package moby-containerd-cc for versions less than 1.7.7-9. A patched version of the package is available...

CVE-2024-40635 affecting package moby-containerd-cc for versions less than 1.7.7-11

CVE-2024-40635 affecting package moby-containerd-cc for versions less than 1.7.7-11. A patched version of the package is available...

CVE-2025-27144 affecting package moby-containerd-cc for versions less than 1.7.7-11

CVE-2025-27144 affecting package moby-containerd-cc for versions less than 1.7.7-11. A patched version of the package is available...

CVE-2025-3511

This CVE (CVE-2025-3511) affects Mitsubishi Electric CC-Link IE TSN family modules (Remote I/O, A-D, D-A converters, FPGA, CP620 CP610 LSI, FX5 modules, and FX5-ENET/IP). Root cause: improper validation of specified quantity in input, enabling a remote, unauthenticated attacker to trigger a Denia...

PT-2025-17881

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module affected versions not specified Mitsubishi Electric Corporation CC-Link IE TSN Analog-Digital Converter module affected versions not specified Mitsubishi Electric Corporation...

Mitsubishi Electric多款产品 安全漏洞

Mitsubishi Electric CC-Link IE TSN Remote I/O module and others are products of Mitsubishi Electric Japan.Mitsubishi Electric CC-Link IE TSN Remote I/O module is an industrial Mitsubishi Electric CC-Link IE TSN Remote I/O module is a kind of industrial network technology, Remote I/O module is use...

CVE-2023-44487 affecting package kata-containers-cc for versions less than 0.6.1-2

CVE-2023-44487 affecting package kata-containers-cc for versions less than 0.6.1-2. A patched version of the package is available...

CVE-2025-1559

CVE-2025-1559 (CC-IMG-Shortcode for WordPress) is a stored XSS vulnerability in versions up to 1.1.0 of the CC-IMG-Shortcode plugin. It arises from insufficient input sanitization and output escaping on attributes of the plugin’s img shortcode, allowing an authenticated attacker with contributor-...

CVE-2025-1559 CC-IMG-Shortcode <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The CC-IMG-Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'img' shortcode in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...