Lucene search
+L

69 matches found

EUVD
EUVD
•added 2026/01/21 5:27 p.m.•28 views

EUVD-2026-3630

VestaCP versions prior to 0.9.8-25 contain a cross-site scripting vulnerability in the IP interface configuration that allows attackers to inject malicious scripts. Attackers can exploit the 'vinterface' parameter by sending a crafted POST request to the add/ip/ endpoint with a stored XSS payload...

7.2CVSS5AI score0.00224EPSS
SaveExploits0References5
CVE
CVE
•added 2026/01/21 5:27 p.m.•37 views

CVE-2021-47873

VestaCP is affected in versions prior to 0.9.8-25 by a stored XSS in the IP interface configuration. The vulnerability hinges on the v_interface parameter and can be exploited by sending a crafted POST to the add/ip/ endpoint to inject scripts. This is a cross-site scripting issue with potential ...

7.2CVSS5.6AI score0.00224EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/01/21 12:00 a.m.•38 views

PT-2026-3825

VestaCP versions prior to 0.9.8-25 contain a cross-site scripting vulnerability in the IP interface configuration that allows attackers to inject malicious scripts. Attackers can exploit the 'v interface' parameter by sending a crafted POST request to the add/ip/ endpoint with a stored XSS payloa...

7.2CVSS5AI score0.00224EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/01/21 12:00 a.m.•25 views

Vesta Control Panel (VestaCP) Cross-site Scripting Vulnerabilities

Vesta Control Panel VestaCP is an open-source virtual hosting control panel developed by Vesta Control Panel Inc. Versions of Vesta Control Panel VestaCP prior to 0.9.8-25 contained a cross-site scripting vulnerability. This vulnerability stemmed from IP interface configurations that allowed...

7.2CVSS5.6AI score0.00224EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/12/09 2:01 p.m.•42 views

CVE-2025-9368 432ES-IG3 Series A Denial-of-Service Vulnerability

A security issue exists within 432ES-IG3 Series A, which affects GuardLink® EtherNet/IP Interface, resulting in denial-of-service. A manual power cycle is required to recover the device...

8.7CVSS0.00373EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•10 views

CVE-2025-9368: Allocation of Resources Without Limits or Throttling

A security issue exists within 432ES-IG3 Series A, which affects GuardLink® EtherNet/IP Interface, resulting in denial-of-service. A manual power cycle is required to recover the device...

8.7CVSS5.8AI score0.00373EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/07/22 12:00 a.m.•20 views

PT-2026-7966

Name of the Vulnerable Software and Affected Versions Vnet/IP Interface Package versions R1.07.00 and earlier Description A flaw exists in the Vnet/IP Interface Package that could cause the Vnet/IP software stack process to terminate when receiving specially crafted network packets. Recommendatio...

6.5CVSS5.2AI score0.00228EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2025/07/22 12:00 a.m.•46 views

PT-2026-7968

Name of the Vulnerable Software and Affected Versions Vnet/IP Interface Package versions R1.07.00 and earlier Description A flaw exists in the Vnet/IP Interface Package that could lead to the termination of the Vnet/IP software stack process if the affected product receives specially crafted...

6.5CVSS5.2AI score0.0017EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/07/22 12:00 a.m.•39 views

PT-2026-7969

Name of the Vulnerable Software and Affected Versions Vnet/IP Interface Package versions R1.07.00 and earlier Description A flaw exists in the Vnet/IP Interface Package that could cause the Vnet/IP software stack process to terminate when receiving specially crafted network packets. Recommendatio...

6.5CVSS5.2AI score0.0017EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/07/22 12:00 a.m.•21 views

PT-2026-7967

Name of the Vulnerable Software and Affected Versions Vnet/IP Interface Package versions R1.07.00 and earlier Description A flaw exists in the Vnet/IP Interface Package that could cause the Vnet/IP software stack process to terminate if the product receives specially crafted network packets...

6.5CVSS5.2AI score0.0017EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/07/22 12:00 a.m.•16 views

PT-2026-7965

Name of the Vulnerable Software and Affected Versions Vnet/IP Interface Package versions R1.07.00 and earlier Description A flaw exists in the Vnet/IP Interface Package that could cause the Vnet/IP software stack process to terminate if the product receives specially crafted network packets...

6.5CVSS5.2AI score0.00211EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
•added 2025/07/22 12:00 a.m.•22 views

The vulnerability of the Vnet/IP SCADA system’s interface of Yokogawa CENTUM VP allows a intruder to trigger a service failure.

The vulnerability of the Vnet/IP SCADA system of Yokogawa CENTUM VP is related to the incorrect processing of parameter length discrepancies. Exploiting this vulnerability allows a malicious actor to trigger a service failure by sending specially crafted packets...

5.3CVSS5.5AI score0.0017EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/03/15 12:00 a.m.•37 views

PT-2026-7964

Name of the Vulnerable Software and Affected Versions Vnet/IP Interface Package versions R1.07.00 and earlier Description A flaw exists in the Vnet/IP Interface Package that could allow a denial-of-service DoS attack. Receiving maliciously crafted packets may cause Vnet/IP communication functions...

8.2CVSS5.5AI score0.0019EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2024/10/23 12:00 a.m.•18 views

PT-2024-32880 · Intermesh · Intermesh 7177 Hybrid 2.0 Subscriber +1

Name of the Vulnerable Software and Affected Versions: InterMesh 7177 Hybrid 2.0 Subscriber versions prior to 8.2.12 InterMesh 7707 Fire Subscriber versions prior to 7.2.12 Description: A vulnerability has been identified that could allow an authenticated local attacker to execute arbitrary...

8.5CVSS7.5AI score0.00196EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
•added 2023/03/29 1:48 a.m.•42 views

Security bulletin: Authentication bypass vulnerability in IBM SAN Volume Controller and Storwize Family (CVE-2012-6354)

Problem Security bulletin: Authentication bypass vulnerability in IBM SAN Volume Controller and Storwize Family CVE-2012-6354 Resolving The Problem Security Bulletin --- Summary --- Administrative access to the system via the GUI may be obtained without supplying proper credentials. Vulnerability...

7.5CVSS6.4AI score0.02062EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2023/03/29 1:48 a.m.•62 views

Security Bulletin: IBM SAN Volume Controller and Storwize Family security vulnerabilities (CVE-2013-4310 CVE-2013-4316)

Summary Security Bulletin: IBM SAN Volume Controller and Storwize Family security vulnerabilities CVE-2013-4310 CVE-2013-4316 Vulnerability Details Security Bulletin --- Summary --- Administrative access to the system via the IP interface may be obtained without authentication. Vulnerability...

10CVSS9.7AI score0.08401EPSS
SaveExploits2
IBM Security Bulletins
IBM Security Bulletins
•added 2023/03/29 1:48 a.m.•78 views

Security Bulletin: Unauthorized access exposure on IBM SAN Volume Controller and Storwize Family (CVE-2013-2251, CVE-2013-2248 CVE-2013-2135, CVE-2013-2134, CVE-2013-2115, CVE-2013-1966 and CVE-2013-1965)

Summary Security Bulletin: Unauthorized access exposure on IBM SAN Volume Controller and Storwize Family CVE-2013-2251 CVE-2013-2248 CVE-2013-2135 CVE-2013-2134 CVE-2013-2115 CVE-2013-1966 CVE-2013-1965 Vulnerability Details Security Bulletin --- Summary --- Administrative access to the system vi...

9.8CVSS7.5AI score0.99998EPSS
SaveExploits36
IBM Security Bulletins
IBM Security Bulletins
•added 2022/09/26 10:21 p.m.•65 views

Security Bulletin: Unauthorized access exposure on IBM SAN Volume Controller and Storwize Family (CVE-2013-2251 CVE-2013-2248 CVE-2013-2135 CVE-2013-2134 CVE-2013-2115 CVE-2013-1966 CVE-2013-1965)

Abstract Administrative access to the system via the IP interface may be obtained without authentication. Content VULNERABILITY DETAILS: CVEID: CVE-2013-2251 CVE-2013-2248 CVE-2013-2135 CVE-2013-2134 CVE-2013-2115 CVE-2013-1966 CVE-2013-1965 DESCRIPTION: The vulnerabilities can be exploited by a...

9.8CVSS7.6AI score0.99998EPSS
SaveExploits36Affected Software5
Prion
Prion
•added 2022/04/20 8:15 p.m.•25 views

Denial of service

A denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Secure router SCN-IP100.03 and KNX IP interface SCN-IP000.03 before v3.0.4, that allows a remote attacker to turn the device unresponsive to all requests on the KNXnet/IP Secure layer, until the device is rebooted, via a...

7.8CVSS7.3AI score0.04581EPSS
SaveExploits2References3Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/20 12:00 a.m.•9 views

CVE-2021-37740: Undefined Security Weakness

A denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Secure router SCN-IP100.03 and KNX IP interface SCN-IP000.03 before v3.0.4, that allows a remote attacker to turn the device unresponsive to all requests on the KNXnet/IP Secure layer, until the device is rebooted, via a...

7.8CVSS7.3AI score0.04581EPSS
SaveExploits2References1
Rows per page
Query Builder