1626 matches found
ICS, SCADA Security Woes Linger On
A handful of worrisome vulnerabilities in Honeywell building automation system software disclosed last week are case in point of how far the industry continues to lag in securing SCADA and industrial control systems. Honeywell published in September new firmware that patches vulnerabilities...
Honeywell SCADA Controllers Exposed Passwords in Clear Text
A series of remotely exploitable vulnerabilities exist in a popular web-based SCADA system made by Honeywell that make it easy to expose passwords and in turn, give attackers a foothold into the vulnerable network. The flaws exist in some versions of Honeywell’s XL Web II controllers, systems...
Ecava IntegraXor
CVSS v3 7.3 ATTENTION: Remotely Exploitable/low skill level to exploit Vendor: Ecava Equipment: IntegraXor Vulnerability: SQL Injection AFFECTED PRODUCTS The following IntegraXor version is affected: IntegraXor Version 5.0.413.0 IMPACT A successful exploit of this vulnerability could lead to...
BINOM3 Electric Power Quality Meter
CVSS v3 10 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: BINOM3 Equipment: Electric Power Quality Meter Vulnerabilities: Cross-site scripting, access control issues, cross-site request forgery CSRF, sensitive information stored in clear-text, and weak credentials management...
CVE-2016-5823
The icalpropertynewclone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...
CVE-2016-5825
The icalparserparsestring function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted ics file...
Design/Logic Flaw
The icalpropertynewclone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...
Design/Logic Flaw
libical 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...
CVE-2016-5825
The icalparserparsestring function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted ics file...
Out-of-bounds
The icalparserparsestring function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted ics file...
CVE-2016-5824
libical 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...
CVE-2016-5823
The icalpropertynewclone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...
UBUNTU-CVE-2016-5825
The icalparserparsestring function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted ics file...
CVE-2016-5823
CVE-2016-5823 : The icalproperty_new_clone function in libical 0.47 and 1.0 is vulnerable to a crafted ICS file that can trigger a use-after-free, leading to a denial of service. The provided documentation explicitly lists this as the affecting condition and impact. No additional details on root ...
CVE-2016-5824
CVE-2016-5824 affects the libical iCalendar library (libical 1.0) with a use-after-free that can lead to a denial of service via a crafted ICS file. Multiple connected sources corroborate this as a vulnerability in libical, with downstream advisories recommending upgrading to newer libical releas...
CVE-2016-5824
libical 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...
CVE-2016-5823
The icalpropertynewclone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...
CVE-2016-5825
Removed by vendor...