291 matches found
CVE-2021-21003
Phoenix Contact FL SWITCH SMCS series devices are affected by CVE-2021-21003 due to fragmentation of TCP packets. In multiple versions, fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP-, and ICMP-Echo services; switching functionality remains unaffected. The CVE description conf...
CVE-2021-21002 Denial of Service in Phoenix Contact FL COMSERVER UNI products
In Phoenix Contact FL COMSERVER UNI in versions 2.40 a invalid Modbus exception response can lead to a temporary denial of service...
CVE-2021-21002
CVE-2021-21002 affects Phoenix Contact FL COMSERVER UNI in versions
CVE-2021-21005: Concurrent Execution using Shared Resource with Improper Synchronization
In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-Pointer set to 0, the network stack will crash. The device needs to be rebooted afterwards...
PT-2021-14329
Name of the Vulnerable Software and Affected Versions: Phoenix Contact FL COMSERVER UNI versions prior to 2.40 Description: The issue is related to an invalid Modbus exception response that can cause a temporary denial of service. Recommendations: For versions prior to 2.40, update to version 2.4...
PT-2021-14330
Name of the Vulnerable Software and Affected Versions: Phoenix Contact FL SWITCH SMCS series products affected versions not specified Description: The issue concerns fragmented TCP-Packets that may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services in the affected products. The...
Phoenix Contact FL COMSERVER UNI 安全漏洞
The Phoenix Contact FL COMSERVER UNI is an interface converter from Phoenix Contac Phoenix Contact, Germany. Serial Device Server for Converting Serial 232/422/485 Interfaces to Ethernet A security vulnerability exists in the Phoenix Contact FL COMSERVER UNI, which stems from an invalid Modbus...
CVE-2021-21004: Improper Neutralization of Input During Web Page Generation
In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client...
CVE-2021-21003: Improper Resource Shutdown or Release
In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services. The switching functionality of the device is not affected...
PT-2021-14331
Name of the Vulnerable Software and Affected Versions: Phoenix Contact FL SWITCH SMCS series products affected versions not specified Description: The issue allows an attacker to insert malicious code via LLDP frames into the web-based management, which could then be executed by the client...
CVE-2021-21002: Missing Release of Resource after Effective Lifetime
In Phoenix Contact FL COMSERVER UNI in versions 2.40 a invalid Modbus exception response can lead to a temporary denial of service...
PT-2021-14332
Name of the Vulnerable Software and Affected Versions: Phoenix Contact FL SWITCH SMCS series products affected versions not specified Description: The issue concerns a network stack crash that occurs when a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-Pointer set to 0 is sent t...
CVE-2021-21004
In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client...
CVE-2021-21002
In Phoenix Contact FL COMSERVER UNI in versions 2.40 a invalid Modbus exception response can lead to a temporary denial of service...
CVE-2021-21003
In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services. The switching functionality of the device is not affected...
PT-2021-28249
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the decode CABAC FL bypass, decode coeff abs level...
PT-2021-28005
Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A heap buffer overflow read issue has been identified. The crash occurs in the H5HL fl deserialize function, which is called by H5HL cache datablock deserialize and H5C load entry. Recommendatio...
fl-p.ru Cross Site Scripting vulnerability OBB-1320492
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
SQL injection vulnerability in ECShop fl***.php file of Shanghai Shangpai Network Technology Co.
ECShop is a B2C independent online store system, suitable for enterprises and individuals to quickly build a personalized online store, the system is based on PHP language and MYSQL database framework for the development of cross-platform open source program. ECShop fl.php file has a SQL injectio...
