Lucene search
+L

465 matches found

Vulnrichment
Vulnrichment
added 2025/10/03 11:24 a.m.8 views

CVE-2025-40636 SQL injection in the mod_vvisit_counter module

SQL injection vulnerability in Joomla module modvvisitcounter v2.0.4j3. This vulnerability allows an attacker to retrieve database content via the ‘cipvvisitcounter’ cookie at all endpoints where the plugin counts visits...

9.3CVSS7.6AI score0.00271EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/18 5:53 p.m.6 views

CVE-2025-7693 Rockwell Automation Micro800 Vulnerability

A security issue exists due to improper handling of malformed CIP Forward Close packets during fuzzing. The controller enters a solid red Fault LED state and becomes unresponsive. Upon power cycle, the controller will enter recoverable fault where the MS LED and Fault LED become flashing red and...

9.3CVSS7.2AI score0.00369EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/18 5:53 p.m.27 views

CVE-2025-7693

CVE-2025-7693 relates to Rockwell Automation Micro800 devices and describes improper handling of malformed CIP Forward Close packets during fuzzing. The affected controller can enter a solid red Fault LED state and become unresponsive; after a power cycle it enters a recoverable fault with MS and...

9.3CVSS7AI score0.00369EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.1 views

Malicious code in node-cip (npm)

The package node-cip was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.2 views

Malicious code in @zalastax/nolb-cip (npm)

The package @zalastax/nolb-cip was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-10913 Malicious code in @zalastax/nolb-cip (npm)

The package @zalastax/nolb-cip was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-27611 Malicious code in node-cip (npm)

The package node-cip was found to contain malicious code...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/08/14 12:0 a.m.11 views

PT-2025-33294 · 5094-Iy8 · 5094-Iy8

Name of the Vulnerable Software and Affected Versions: 5094-IY8 device affected versions not specified Description: A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited. This causes the module to enter a fault state, indicated by a flashing red...

8.7CVSS6.2AI score0.00322EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/08/14 12:0 a.m.15 views

PT-2025-33285 · 5094-If8 · 5094-If8

Name of the Vulnerable Software and Affected Versions: 5094-IF8 device affected versions not specified Description: A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited. This causes the module to enter a fault state, indicated by a flashing red...

8.7CVSS7AI score0.00322EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 4:37 a.m.7 views

CVE-2023-35769

Uncontrolled search path in some IntelR CIP software before version 2.4.10577 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.1AI score0.00191EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/22 3:42 p.m.6 views

CVE-2020-8829

CSRF on Intelbras CIP 92200 devices allows an attacker to access the panel and perform scraping or other analysis...

8.8CVSS7.1AI score0.00513EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:13 p.m.11 views

CVE-2012-6441

An information exposure of confidential information results when the device receives a specially crafted CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP. Successful exploitation of this vulnerability could cause loss of confidentiality. Rockwell Automation EtherNet/I...

5CVSS6AI score0.54168EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:27 a.m.13 views

CVE-2012-6442

When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that instructs the product to reset, a DoS can occur. This situation could cause loss of availability and a disruption of communicatio...

7.8CVSS6.3AI score0.32807EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/03/10 12:0 a.m.10 views

The vulnerability of the Microprogrammed Software for IP Cameras from Smartwares, models CIP-37210AT and C724IP, arises from the lack of measures to sanitize input data at the control level. This allows intruders to execute arbitrary commands.

The vulnerability of the Microprogrammed Software for Smartwares CIP-37210AT and C724IP cameras is related to the lack of measures for cleaning incoming data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

8.8CVSS7.1AI score0.00694EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/10 12:0 a.m.9 views

The vulnerability of the telnet service provided by the microprogramming-based IP cameras from Smartwares, models CIP-37210AT and C724IP, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the telnet service provided by the microprogramming-based IP cameras from Smartwares, models CIP-37210AT and C724IP, is related to the use of default login credentials. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

7.4CVSS6.8AI score0.00154EPSS
SaveExploits0References4Affected Software2
CNNVD
CNNVD
added 2025/03/06 12:0 a.m.5 views

Smartwares CIP-37210AT和Smartwares C724IP 安全漏洞

The Smartwares CIP-37210AT and Smartwares C724IP are both products of Smartwares, Inc.The Smartwares CIP-37210AT is an IP camera device for home or office security monitoring.The Smartwares C724IP is an IP camera device that is for home or office security monitoring. A security vulnerability exis...

7.7CVSS6.1AI score0.00694EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/02/05 4:53 a.m.11 views

CVE-2024-36482

Improper input validation in some IntelR CIP software before version 2.4.10852 may allow a privileged user to potentially enable escalation of privilege via local access...

8.2CVSS7.1AI score0.00176EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/13 9:15 p.m.4 views

CVE-2024-36482

Improper input validation in some IntelR CIP software before version 2.4.10852 may allow a privileged user to potentially enable escalation of privilege via local access...

6.7CVSS5.8AI score0.00176EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/13 9:15 p.m.12 views

CVE-2024-36482

Improper input validation in some IntelR CIP software before version 2.4.10852 may allow a privileged user to potentially enable escalation of privilege via local access...

8.2CVSS0.00176EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/13 9:15 p.m.19 views

CVE-2024-36276

Insecure inherited permissions for some IntelR CIP software before version 2.4.10852 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS0.00139EPSS
SaveExploits0References1
Rows per page
Query Builder