Showmax: Cross-origin resource sharing

A misconfiguration on recent deployment caused CORS headers not to be set on the https://stories.showmax.com service. While no customer data could be exposed via this channel, it's a good practice to set CORS headers if possible. Please note that CORS is actually out-of-scope of our program since...

GHSA-HP5X-RQF7-43VF Improper Handling of Exceptional Conditions and Improper Input Validation in Reactor Netty

Reactor Netty HttpServer, versions 0.9.3 and 0.9.4, is exposed to a URISyntaxException that causes the connection to be closed prematurely instead of producing a 400 response...

CVE-2022-21218

Uncaught exception in the IntelR Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable information disclosure via local access...

Iipimage 输入验证错误漏洞

Iipimage is Ruven individual developers of an advanced high-performance , feature-rich image server system . It is used for web-based streaming viewing and scaling of ultra-high resolution images. An input validation error vulnerability exists in IIPImage High Resolution Streaming Image Server th...

Schneider Electric Modicon Controllers Uncaught Exception (CVE-2018-7854)

A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a denial of Service when sending invalid debug parameters to the controller over Modbus. This plugin only works with Tenable.ot. Please visit...

Schneider Electric Modicon Controllers Uncaught Exception (CVE-2018-7843)

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading memory blocks with an invalid data size or with an invalid data offset in the controller over Modbus. This...

Schneider Electric Modicon Controllers Uncaught Exception (CVE-2019-6829)

A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 firmware version prior to V2.90 and Modicon M340 firmware version prior to V3.10, which could cause a possible denial of service when writing to specific memory addresses in the controller over Modbus. This plugin only works with...

Schneider Electric Modicon Controllers Uncaught Exception (CVE-2018-7849)

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause a possible Denial of Service due to improper data integrity check when sending files the controller over Modbus. This plugin only works with...

Schneider Electric Modicon Controllers Uncaught Exception (CVE-2018-7853)

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading invalid physical memory blocks in the controller over Modbus This plugin only works with Tenable.ot. Please...

Schneider Electric Modicon Controllers Uncaught Exception (CVE-2019-6807)

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible denial of service when writing sensitive application variables to the controller over Modbus. This plugin only works with...

The vulnerability of the smgd subscriber management demon on Juniper Networks’ Junos OS-based MX router devices allows a attacker to cause a service failure.

The vulnerability of the smgd subscriber management daemon for Juniper Networks’ Junos OS routers in the MX series operating systems is related to improper handling of exceptions. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Schneider Electric Modicon Controllers Uncaught Exception (CVE-2019-6830)

A CWE-248: Uncaught Exception vulnerability exists IN Modicon M580 all versions prior to V2.80, which could cause a possible denial of service when sending an appropriately timed HTTP request to the controller. This plugin only works with Tenable.ot. Please visit...

Schneider Electric Modicon Controllers Uncaught Exception (CVE-2018-7857)

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible Denial of Service when writing out of bounds variables to the controller over Modbus. This plugin only works with Tenable.ot...

Schneider Electric Modicon Controllers Uncaught Exception (CVE-2019-6828)

A CWE-248: Uncaught Exception vulnerability exists Modicon M580 firmware version prior to V2.90, Modicon M340 firmware version prior to V3.10, Modicon Premium all versions, and Modicon Quantum all versions, which could cause a possible denial of service when reading specific coils and registers i...

Siemens SIMATIC Controller Web Servers Uncaught Exception (CVE-2020-15796)

A vulnerability has been identified in SIMATIC ET 200SP Open Controller incl. SIPLUS variants V20.8, SIMATIC S7-1500 Software Controller V20.8. The web server of the affected products contains a vulnerability that could allow a remote attacker to trigger a denial-of-service condition by sending a...

Schneider Electric Modicon Controllers Uncaught Exception (CVE-2018-7856)

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible denial of Service when writing invalid memory blocks to the controller over Modbus. This plugin only works with Tenable.ot. Pleas...

Schneider Electric Modicon Controllers Uncaught Exception (CVE-2018-7855)

A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a Denial of Service when sending invalid breakpoint parameters to the controller over Modbus This plugin only works with Tenable.ot. Please...

Schneider Electric Modicon Controllers Uncaught Exception (CVE-2018-7852)

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when an invalid private command parameter is sent to the controller over Modbus. This plugin only works with Tenable.ot...

Schneider Electric Modicon Controllers Uncaught Exception (CVE-2019-6809)

A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 firmware versions prior to V2.90, Modicon M340 firmware versions prior to V3.10, Modicon Premium all versions, Modicon Quantum all versions, which could cause a possible denial of service when reading invalid data from the...

Memory corruption

A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDF document can trigger an exception which is improperly handled, leaving the engine in an invalid state, which can lead to memory corruption and arbitrary...