CVE-2020-18759

An information disclosure vulnerability exists in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100...

CVE-2020-18753

An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to gain access to the system and escalate privileges via a crafted packet...

CVE-2020-18754

An information disclosure vulnerability exists within Dut Computer Control Engineering Co.'s PLC MAC1100...

Code injection

An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to execute arbitrary code...

Information disclosure

An information disclosure vulnerability exists in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100...

CVE-2020-18759

An information disclosure vulnerability exists in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100...

CVE-2020-18759

CVE-2020-18759 is an information-disclosure vulnerability in the EPA protocol of Dut Computer Control Engineering Co.’s MAC1100 PLC. The issue affects the MAC1100 PLC’s EPA read operations, allowing an attacker to read a storage area and collect device information via unauthorized EPA reads. CNNV...

CVE-2020-18758

The CVE-2020-18758 entry concerns Dut Computer Control Engineering Co. MAC1100 PLC. The connected records confirm a code execution vulnerability exists in the MAC1100 PLC, enabling an attacker to execute arbitrary code. The available details identify the affected product (MAC1100 PLC) and the out...

CVE-2020-18756

The CVE-2020-18756 entry describes an arbitrary memory access vulnerability in the EPA protocol of Dut Computer Control Engineering Co.’s MAC1100 PLC. The root cause is a memory access flaw that allows an attacker to read the contents of any variable area within the device. Impact is read-access ...

CVE-2020-18756

An arbitrary memory access vulnerability in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to read the contents of any variable area...

CVE-2020-18753

An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to gain access to the system and escalate privileges via a crafted packet...

CVE-2020-18754

The CVE-2020-18754 entry concerns Dut Computer Control Engineering Co.’s PLC MAC1100. Connected sources confirm an information disclosure vulnerability in the MAC1100 PLC, enabling remote access to control code or sensitive information. CNVD/CNNVD describe the impact as the ability for an attacke...

CVE-2020-18753

The CVE-2020-18753 entry concerns Dut Computer Control Engineering Co.’s MAC1100 PLC. The connected sources consistently describe an elevation of privilege/access issue in the MAC1100 that can be triggered by processing a crafted packet. No specific vulnerable versions, root-cause technical detai...

CVE-2020-18753: Missing Authorization

An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to gain access to the system and escalate privileges via a crafted packet...

CVE-2020-18757: Missing Authorization

An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to cause persistent denial of service DOS via a crafted packet...

CVE-2020-18758: Improper Neutralization of Special Elements used in a Command

An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to execute arbitrary code...

EyouCms Cross-Site Scripting Vulnerability

EyouCms EyouCms is a ThinkPHP-based open source content management system CMS from Hainan Zanzan Network Technology Co. An attacker can use the vulnerability to execute arbitrary web scripts or HTML...

pcp bug fix and enhancement update

Performance Co-Pilot PCP is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems. Bug Fixes and...

pcp bug fix and enhancement update

An update is available for pcp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Performance Co-Pilot PCP is a suite of tools, services, and libraries for...

SQL Injection Vulnerability in Smart Meter Integrated Management System of Xintian Technology Co.

Xintian Technology Co., Ltd. is a professional manufacturer and supplier of water meters, energy meters and gas meters. A SQL injection vulnerability exists in the Smart Meter Integrated Management System of Xintian Technology Corporation, which can be exploited by attackers to obtain sensitive...