1908 matches found
CVE-2023-28467
In MyBB before 1.8.34, there is XSS in the User CP module via the user email field...
CVE-2023-28467
In MyBB before 1.8.34, there is XSS in the User CP module via the user email field...
CVE-2023-28467
In MyBB before 1.8.34, there is XSS in the User CP module via the user email field...
CVE-2023-28467
CVE-2023-28467 affects MyBB prior to 1.8.34. The vulnerability is a cross-site scripting (XSS) flaw in the User CP module that can be triggered via the user email field. Public sources consistently describe the issue as an XSS in the User Control Panel before version 1.8.34, with no additional de...
PT-2025-40178
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the amdgpu driver related to the handling of graphics processing interrupts. Specifically, the cp ecc error irq interrupt is incorrectly disable...
UNISOC Chipsets 缓冲区错误漏洞
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in the UNISOC Chipsets cpdump driver module, which stems from a lack of bounds checking, leading to out-of-bounds writes...
PT-2023-15762
Name of the Vulnerable Software and Affected Versions cp dump driver affected versions not specified Description The issue is related to a missing bounds check in the cp dump driver, which could lead to a local denial of service. This requires System execution privileges. Recommendations At the...
Siemens SIMATIC CP 1543-1 Improper Handling of Exceptional Conditions (CVE-2019-12815)
An arbitrary file copy vulnerability in modcopy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
Siemens SIMATIC NET CP Modules Improper Restriction of Operations Within the Bounds of a Memory Buffer (CVE-2021-33737)
A vulnerability has been identified in SIMATIC CP 343-1 incl. SIPLUS variants All versions, SIMATIC CP 343-1 Advanced incl. SIPLUS variants All versions, SIMATIC CP 343-1 ERPC All versions, SIMATIC CP 343-1 Lean incl. SIPLUS variants All versions, SIMATIC CP 443-1 All versions V3.3, SIMATIC CP...
Siemens SIMATIC CP Out-of-Bounds Read (CVE-2020-9272)
ProFTPD 1.3.7 has an out-of-bounds OOB read vulnerability in modcap via the captext.c captotext function. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...
Siemens SIMATIC CP Use After Free (CVE-2020-9273)
In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in allocpool in pool.c, and possible remote code execution. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mo...
Siemens SIMATIC CP 1543-1 Improper Privilege Management (CVE-2016-8561)
A vulnerability has been identified in SIMATIC CP 1543-1 All versions V2.0.28, SIPLUS NET CP 1543-1 All versions V2.0.28. Users with elevated privileges to TIA-Portal and project data on the engineering station could possibly get privileged access on affected devices. This plugin only works with...
Siemens SIMATIC CP 44x-1 RNA Uncontrolled Resource Consumption (CVE-2022-27640)
A vulnerability has been identified in SIMATIC CP 442-1 RNA All versions V1.5.18, SIMATIC CP 443-1 RNA All versions V1.5.18. The affected devices improperly handles excessive ARP broadcast requests. This could allow an attacker to create a denial of service condition by performing ARP storming...
Siemens SIMATIC CP Cleartext Storage of Sensitive Information (CVE-2021-33716)
A vulnerability has been identified in SIMATIC CP 1543-1 incl. SIPLUS variants All versions V3.0, SIMATIC CP 1545-1 All versions V1.1. An attacker with access to the subnet of the affected device could retrieve sensitive information stored in cleartext. This plugin only works with Tenable.ot...
Siemens SIMATIC NET CP 443-1 OPC UA Improper Restriction of Operations Within the Bounds of a Memory Buffer (CVE-2017-6458)
Multiple buffer overflows in the ctlput functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. ...
Siemens SICAM A8000 Web Server Module Improper Access Control (CVE-2021-46304)
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70C All versions, CP-8000 MASTER MODULE WITH I/O -40/+70C All versions, CP-8021 MASTER MODULE All versions, CP-8022 MASTER MODULE WITH GPRS All versions. The component allows to activate a web server module which provides...
Siemens SICAM A8000 Use of Hard-Coded Credentials (CVE-2021-45033)
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70C All versions V16.20, CP-8000 MASTER MODULE WITH I/O -40/+70C All versions V16.20, CP-8021 MASTER MODULE All versions V16.20, CP-8022 MASTER MODULE WITH GPRS All versions V16.20. An undocumented debug port uses hard-cod...
PT-2023-21095 · Omron · Sysmac Nx1P-Series Cpu Units +4
Name of the Vulnerable Software and Affected Versions: SYSMAC CS-series CPU Units, all versions SYSMAC CJ-series CPU Units, all versions SYSMAC CP-series CPU Units, all versions SYSMAC NJ-series CPU Units, all versions SYSMAC NX1P-series CPU Units, all versions SYSMAC NX102-series CPU Units, all...
Omron SYSMAC CS/CJ/CP Series 访问控制错误漏洞
The Omron SYSMAC CS/CJ/CP Series is a series of programmable controllers from Omron Corporation Japan. A security vulnerability exists in the Omron SYSMAC CS/CJ/CP Series due to a security issue with the FINS protocol that involves clear-text communication, undefined authentication, and other...
The vulnerability of the web server of the microprogramming software for the processor module controllers Siemens SICAM CP-8031 and CP-8050 allows a hacker to execute arbitrary commands.
The vulnerability of the web server of the microprogramming software for the processor module controllers Siemens SICAM CP-8031 and CP-8050 is related to insufficient checking of the arguments passed in the command. Exploiting this vulnerability allows a malicious actor to execute arbitrary...