1203 matches found
Command injection
A vulnerability has been identified in Desigo CC All versions with OIS Extension Module, GMA-Manager All versions with OIS running on Debian 9 or earlier, Operation Scheduler All versions with OIS running on Debian 9 or earlier, Siveillance Control All versions with OIS running on Debian 9 or...
CVE-2021-37181
A vulnerability has been identified in Cerberus DMS V4.0 All versions, Cerberus DMS V4.1 All versions, Cerberus DMS V4.2 All versions, Cerberus DMS V5.0 All versions v5.0 QU1, Desigo CC Compact V4.0 All versions, Desigo CC Compact V4.1 All versions, Desigo CC Compact V4.2 All versions, Desigo CC...
CVE-2021-37181
CVE-2021-37181 describes a deserialization vulnerability in Siemens Desigo CC/Cerberus DMS products (Cerberus DMS v4.x/v5.0 prior to QU1; Desigo CC/Compact v4.x/v5.0 prior to QU1) due to insufficient validation of untrusted data in the CCOM communication component used by Windows App/Click-Once a...
CVE-2021-31891
A vulnerability has been identified in Desigo CC All versions with OIS Extension Module, GMA-Manager All versions with OIS running on Debian 9 or earlier, Operation Scheduler All versions with OIS running on Debian 9 or earlier, Siveillance Control All versions with OIS running on Debian 9 or...
CVE-2021-31891
CVE-2021-31891 describes an OS command injection in Siemens Siveillance OIS. Affected products include Desigo CC (OIS Extension Module), GMA-Manager (OIS on Debian 9 or earlier), Operation Scheduler (OIS on Debian 9 or earlier), Siveillance Control (OIS on Debian 9 or earlier), and Siveillance Co...
多款 Siemens 产品代码问题漏洞
Cerberus DMS is a hazard management station that helps users manage fire safety and security incidents.Desigo CC is an integrated building management platform for managing high-performance buildings.Desigo CC Compact expands the portfolio with solutions tailored for small and medium-sized...
Siemens Desigo CC Family
1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Desigo CC Family Vulnerability: Deserialization of Untrusted Data 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to perform remote code...
Siemens Siveillance OIS
1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Siveillance OIS Vulnerability: OS Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to execute code on...
cc-villas.com Cross Site Scripting vulnerability OBB-2133260
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Experts Uncover Several C&C Servers Linked to WellMess Malware
Cybersecurity researchers on Friday unmasked new command-and-control C2 infrastructure belonging to the Russian threat actor tracked as APT29, aka Cozy Bear, that has been spotted actively serving WellMess malware as part of an ongoing attack campaign. More than 30 C2 servers operated by the...
PT-2021-7711 · Libde265 +3 · Libde265 +3
Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.8 Description: An issue exists due to a SEGV in slice.cc, related to insufficient access control in the libde265 video codec implementation. This could potentially allow a remote attacker to cause a denial of service...
Arbitrary File Read Vulnerability in Zhongxin Golden Shield Firewall System
Golden Shield Firewall is a series of firewall products of Zhongxin Golden Shield specialized in anti-DDoS attack and anti-CC attack. There exists an arbitrary file read vulnerability in the firewall system, which can be exploited by attackers to obtain sensitive information...
WordPress Recently plugin <= 3.0.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Yu Iwama of Secure Sky Technology Inc. and the JPCERT/CC Vulnerability Coordination Group in WordPress Recently plugin versions = 3.0.4. Solution Update the WordPress Recently plugin to the latest available version at least...
Animate CC 缓冲区错误漏洞
Adobe Animate is a multimedia authoring and computer animation program. Adobe Animate suffers from an out-of-bounds read vulnerability. An attacker could exploit this vulnerability to obtain information...
CISA Releases Alert on Exploitation of Pulse Connect Secure Vulnerabilities
CISA is aware of ongoing exploitation of Ivanti Pulse Connect Secure vulnerabilities compromising U.S. government agencies, critical infrastructure entities, and private sector organizations. In response, CISA has released Alert AA21-110A: Exploitation of Pulse Connect Secure Vulnerabilities, as...
TIBCO Security Advisory: March 23, 2021 - TIBCO ActiveSpaces -2021-28824
TIBCO ActiveSpaces Windows Platform Installation vulnerability Original release date: March 23, 2021 Last revised: CVE-2021-28824 Source: TIBCOSoftware Inc. Products Affected TIBCO ActiveSpaces - Community Edition versions 4.5.0 and below TIBCO ActiveSpaces - Developer Edition versions 4.5.0 and...
TIBCO Security Advisory: March 23, 2021 - TIBCO ActiveSpaces -2021-28824
TIBCO ActiveSpaces Windows Platform Installation vulnerability Original release date: March 23, 2021 Last revised: CVE-2021-28824 Source: TIBCOSoftware Inc. Products Affected TIBCO ActiveSpaces - Community Edition versions 4.5.0 and below TIBCO ActiveSpaces - Developer Edition versions 4.5.0 and...
TIBCO Security Advisory: March 23, 2021 - TIBCO Enterprise Message Service -2021-28822
TIBCO Enterprise Message Service Windows Platform Artifact Search vulnerability Original release date: March 23,2021 Last revised: CVE-2021-28822 Source: TIBCO Software Inc. Products Affected TIBCO Enterprise Message Service versions 8.5.1 and below TIBCO Enterprise Message Service - Community...
TIBCO Security Advisory: March 23, 2021 - TIBCO Enterprise Message Service -2021-28821
TIBCO Enterprise Message Service Windows Platform Installation vulnerability Original release date: March 23,2021 Last revised: CVE-2021-28821 Source: TIBCO Software Inc. Products Affected TIBCO Enterprise Message Service versions 8.5.1 and below TIBCO Enterprise Message Service - Community Editi...
TIBCO Security Advisory: March 23, 2021 - TIBCO Enterprise Message Service -2021-28821
TIBCO Enterprise Message Service Windows Platform Installation vulnerability Original release date: March 23,2021 Last revised: CVE-2021-28821 Source: TIBCO Software Inc. Products Affected TIBCO Enterprise Message Service versions 8.5.1 and below TIBCO Enterprise Message Service - Community Editi...