Design/Logic Flaw

In Rockwell Automation RSLinx Classic versions 4.11.00 and prior, an authenticated local attacker could modify a registry key, which could lead to the execution of malicious code using system privileges when opening RSLinx Classic...

CVE-2020-10642

CVE-2020-10642 affects Rockwell Automation RSLinx Classic (versions 4.11.00 and prior). The vulnerability arises from an authenticated local attacker who can modify a registry key, enabling code execution with system privileges when RSLinx Classic is opened. Impact is local, with potential comple...

CVE-2020-10642

In Rockwell Automation RSLinx Classic versions 4.11.00 and prior, an authenticated local attacker could modify a registry key, which could lead to the execution of malicious code using system privileges when opening RSLinx Classic...

Rockwell Automation RSLinx Classic

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Low skill level to exploit Vendor: Rockwell Automation Equipment: RSLinx Classic Vulnerability: Incorrect Permission Assignment for Critical Resource 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a local authenticated...

classic-chrome.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1122701 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting classic-chrome.net websit...

classic-curtain.co.uk Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1120502 Security Researcher kun-fly Helped patch 668 vulnerabilities Received 7 Coordinated Disclosure badges Received 43 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting classic-curtain.co.uk websi...

Moxa EDS-G516E and EDS-510E Series Ethernet Switches

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Moxa Equipment: EDS-G516E series, and EDS-510E series Vulnerabilities: Stack-based Buffer Overflow, Use of a Broken or Risky Cryptographic Algorithm, Use of Hard-coded Cryptographic Key, Use of...

CVE-2013-3489

Buffer overflow in Media Player Classic - Home Cinema MPC-HC before 1.7.0 allows remote attackers to execute arbitrary code via a crafted RealMedia .rm file...

Buffer overflow

Buffer overflow in Media Player Classic - Home Cinema MPC-HC before 1.7.0 allows remote attackers to execute arbitrary code via a crafted RealMedia .rm file...

Stack overflow

Stack-based buffer overflow in Media Player Classic - Home Cinema MPC-HC before 1.7.0.7858 allows remote attackers to execute arbitrary code via a crafted MPEG-2 Transport Stream M2TS file...

CVE-2013-3489

CVE-2013-3489 involves a buffer overflow in Media Player Classic - Home Cinema (MPC-HC) prior to 1.7.0. The vulnerability allows remote attackers to execute arbitrary code by supplying a crafted RealMedia .rm file. Impact described as arbitrary code execution with a likely combination of network ...

CVE-2013-3488

CVE-2013-3488 affects Media Player Classic - Home Cinema (MPC-HC) prior to 1.7.0.7858. The vulnerability is a stack-based buffer overflow in processing MPEG-2 Transport Stream (M2TS) files, enabling remote attackers to potentially execute arbitrary code. The public documents specify the affected ...

CVE-2013-3488

Stack-based buffer overflow in Media Player Classic - Home Cinema MPC-HC before 1.7.0.7858 allows remote attackers to execute arbitrary code via a crafted MPEG-2 Transport Stream M2TS file...

CVE-2019-13939

A vulnerability has been identified in APOGEE MEC/MBC/PXC P2 All versions = V2.8.2 = V2.8.2 = V2.3 = V2.3x and = V2.3 = V2.3 = V2.3 = V2.3x and = V2.3 = V2.3 = V2.3 = V2.3 = V2.3 = V2.3x and = V2.3 V6.0.327, Nucleus NET All versions, Nucleus ReadyStart V3 All versions V2017.02.3, Nucleus Source...

Cross-Site Scripting (XSS)

apacheairflow is vulnerable to cross-site scripting XSS. An administrative user is able to inject and execute arbitrary Javascript into a user's browser by modifying the state of an object when the application is running with the classic UI...

Code injection

In Apache Airflow before 1.10.5 when running with the "classic" UI, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. The new "RBAC" UI is unaffected...

PYSEC-2020-162

In Apache Airflow before 1.10.5 when running with the "classic" UI, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. The new "RBAC" UI is unaffected...

CVE-2019-12398

In Apache Airflow before 1.10.5 when running with the "classic" UI, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. The new "RBAC" UI is unaffected...

Windows - Shell COM Server Registrar Local Privilege Escalation Exploit

Windows - Shell COM Server Registrar Local Privilege Escalation Exploit // Axel '0vercl0k' Souchet - December 28 2019 // References: // - Found by an anonymous researcher, written up by Simon '@HexKitchen' Zuckerbraun // -...

PT-2019-4316 · Siemens +1 · Capital Embedded Ar Classic R20-11 +4

Name of the Vulnerable Software and Affected Versions: Capital Embedded AR Classic 431-422 All versions Capital Embedded AR Classic R20-11 All versions V2303 Nucleus NET All versions Nucleus ReadyStart V3 All versions V2017.02.3 Nucleus Source Code All versions Description: A vulnerability has be...