CVE-2019-18259

CVE-2019-18259 affects Omron PLC CJ series and CS series (all versions). The vulnerability enables an attacker to spoof arbitrary messages or execute commands against the PLC, i.e., an authentication bypass by spoofing. NVD reports CVSSv3.1 base score 9.8 (CRITICAL) with network access, no privil...

CVE-2019-18269: Unrestricted Externally Accessible Lock

Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability...

CVE-2019-13533: Authentication Bypass by Capture-replay

In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could monitor traffic between the PLC and the controller and replay requests that could result in the opening and closing of industrial valves...

PT-2019-15303

Name of the Vulnerable Software and Affected Versions Omron PLC CS series, all versions Omron PLC CJ series, all versions Omron PLC NJ series, all versions Description The software does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame,...

PT-2019-13397

Name of the Vulnerable Software and Affected Versions Omron PLC CJ series, all versions Omron PLC CS series, all versions Description The issue allows an attacker to monitor traffic between the PLC and the controller and replay requests, potentially resulting in the unauthorized opening and closi...

PT-2019-15302

Name of the Vulnerable Software and Affected Versions Omron PLC CJ series, all versions Omron PLC CS series, all versions Description The issue allows an attacker to spoof arbitrary messages or execute commands. Recommendations For Omron PLC CJ series, all versions, and Omron PLC CS series, all...

CVE-2019-18259: Authentication Bypass by Spoofing

In Omron PLC CJ series, all versions and Omron PLC CS series, all versions, an attacker could spoof arbitrary messages or execute commands...

CVE-2019-18261: Improper Restriction of Excessive Authentication Attempts

In Omron PLC CS series, all versions, Omron PLC CJ series, all versions, and Omron PLC NJ series, all versions, the software does not implement sufficient measures to prevent multiple failed authentication attempts within in a short time frame, making it more susceptible to brute force attacks...

Omron PLC CJ and CS Series Command Execution Vulnerability

Omron PLC CJ and CS series are PLCs from Omron. A security vulnerability exists in the Omron PLC CJ and CS Series that can be exploited by an attacker to spoof arbitrary messages or execute commands...

Omron PLC CJ and CS Series Replay Verification Bypass Vulnerability

Omron PLC CJ and CS series are PLCs from Omron. A replay authentication bypass vulnerability exists in the Omron PLC CJ and CS Series, which can be exploited by an attacker to perform an authentication bypass by over-capturing replay...

Omron PLC CJ and CS Series

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : Omron Equipment : PLC CJ and CS Series Vulnerabilities : Authentication Bypass by Spoofing, Authentication Bypass by Capture-replay, Unrestricted Externally Accessible Lock 2. UPDATE This updated...

CVE-2014-8179

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during a pull, which allows attackers to inject new attributes in a JSON object and bypass pull-by-digest validation...

CVE-2014-8179

CVE-2014-8179 affects Docker Engine prior to 1.8.3 and CS Docker Engine prior to 1.6.2-CS7. The vulnerability arises from improper validation and extraction of the manifest object from a JSON representation during a pull, enabling an attacker to inject new attributes into a JSON object and bypass...

CVE-2014-8178

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for attackers to poison the image cache via a crafted image in pull or push commands...

Yokogawa B\/m9000 Unspecified Vulnerability

A weakness in access controls in CENTUM CS 1000 all versions, CENTUM CS 3000 versions R3.09.50 and earlier, CENTUM CS 3000 Small versions R3.09.50 and earlier, CENTUM VP versions R6.03.10 and earlier, CENTUM VP Small versions R6.03.10 and earlier, CENTUM VP Basic versions R6.03.10 and earlier,...

Yokogawa Vnet/IP Open Communication Driver Denial-of-Service (ICSA-19-003-02)

Binary data 720286.prm...

Valve: [CS 1.6] Map cycle abuse allows arbitrary file read/write

The CS 1.6 server has a feature of map cycle - i.e. automatic map change after specified period of time. This feature relies on data of the file specified in mapcyclefile cvar. Any user with RCON access to the server can set this variable to arbitrary value - no input sanitization applies. In ord...

PT-2019-9830

Name of the Vulnerable Software and Affected Versions WP-jobhunt plugin versions prior to 2.4 Description The issue concerns the lack of control over AJAX requests sent to the cs employer ajax profile function through the "admin-ajax.php" file. This allows remote unauthenticated attackers to...

CVE-2019-2493: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise CS Campus Community component of Oracle PeopleSoft Products subcomponent: Frameworks. Supported versions that are affected are 9.0 and 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2019-16417

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise CS Campus Community versions 9.0 and 9.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Campus Community. It requires human interaction from a...