5161 matches found
Uniview NVR301-04S2-P4 - Cross-Site Scripting
Uniview NVR301-04S2-P4 contains a reflected cross-site scripting vulnerability via the PATH of LAPI. CISA and Uniview state that this vulnerability needs to be authenticated. This is incorrect. Any PATH payload can cause XSS. A submission to Mitre has been sent to update the verbiage in the findi...
Rockwell Automation Micro850/870 Uncontrolled Resource Consumption (CVE-2024-7567)
A denial-of-service vulnerability exists via the CIP/Modbus port in Micro850/870. If exploited, the CIP/Modbus communication may be disrupted for a short duration. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...
CVE-2026-16347
creationtimestamp| type| source ---|---|--- 2026-07-28 16:51:33+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-05 2026-07-28 23:29:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqkvfi4dm2s 2026-08-01 01:02:36+00:00| seen|...
CVE-2025-37917
creationtimestamp| type| source ---|---|--- 2026-07-28 16:18:42+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...
SolarWinds Security Event Manager - Unauthenticated RCE
The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution. id: CVE-2024-0692 info: name: SolarWinds Security Event Manager - Unauthenticated RCE...
EyesOfNetwork 5.1-5.3 - SQL Injection/Remote Code Execution
EyesOfNetwork 5.1 to 5.3 contains SQL injection and remote code execution vulnerabilities. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. See also CVE-2020-8655,...
CVE-2026-56415
creationtimestamp| type| source ---|---|--- 2026-07-01 02:26:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkhptlyfo2i 2026-07-01 02:36:58+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-181-06 2026-07-01 22:03:22+00:00| seen|...
Access of Resource Using Incompatible Type ('Type Confusion')
Overview Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type 'Type Confusion' via the worklist server process. An attacker can cause the server to crash by sending a specially crafted query when the server is configured with a valid Called AE Title,...
CVE-2026-55975
creationtimestamp| type| source ---|---|--- 2026-06-25 17:15:31+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-05 2026-06-27 02:01:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpaegmhwpk27 2026-06-27 03:00:27+00:00| seen|...
CVE-2026-44622
creationtimestamp| type| source ---|---|--- 2026-06-25 17:15:21+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-02 2026-06-25 22:01:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5gkqc4w42u...
CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday warned of active exploitation of a critical security flaw impacting Lantronix EDS5000 Series devices, urging Federal Civilian Executive Branch FCEB agencies to apply the fixes by June 26, 2026. The vulnerability in question...
CVE-2025-7064
creationtimestamp| type| source ---|---|--- 2026-06-23 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-174-05...
CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added a maximum-severity security flaw impacting Widget Factory Joomla Content Editor JCE to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as...
XCharge C6
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to gain administrator rights or execute code on the affected device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities...
CVE-2019-5459
creationtimestamp| type| source ---|---|--- 2026-05-26 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-146-05...
CVE-2023-46814
creationtimestamp| type| source ---|---|--- 2026-05-26 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-146-05...
CVE-2019-5460
creationtimestamp| type| source ---|---|--- 2026-05-26 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-146-05...
CVE-2015-3416
creationtimestamp| type| source ---|---|--- 2026-05-21 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-141-03...