Lucene search
+L

1723 matches found

Positive Technologies
Positive Technologies
added 2026/07/18 12:0 a.m.21 views

PT-2026-60966

OpenPLC v3 contains a heap-based buffer overflow in the getData function in webserver/core/modbus master.cpp. getData reads characters between two delimiters into a caller-supplied buffer with no size parameter and no bounds check. In parseConfig the function is invoked with the 100-byte...

8.8CVSS5.8AI score0.00421EPSS
SaveExploits0References5
NVD
NVD
added 2026/06/30 7:16 a.m.37 views

CVE-2026-12819

Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interaction with security-sensitive PLC functions...

9.3CVSS0.0031EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/30 7:16 a.m.27 views

CVE-2026-12818

Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling CWE-770 within their Modbus TCP service...

9.3CVSS0.00253EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/30 6:28 a.m.51 views

CVE-2026-12819

CVE-2026-12819 affects the Delta Electronics DVP12SE PLC. The issue is exposure of a Modbus TCP service on a specified port without authentication or access control, allowing unauthenticated interaction with security‑sensitive PLC functions. The CVSS metrics indicate high impact on confidentialit...

9.3CVSS5.8AI score0.0031EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/30 6:28 a.m.25 views

EUVD-2026-40258

Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interaction with security-sensitive PLC functions...

9.3CVSS5.8AI score0.0031EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/30 6:28 a.m.28 views

CVE-2026-12819

Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interaction with security-sensitive PLC functions...

9.3CVSS5.8AI score0.0031EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/30 6:24 a.m.22 views

EUVD-2026-40257

Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling CWE-770 within their Modbus TCP service...

9.3CVSS5.8AI score0.0031EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/30 6:24 a.m.11 views

CVE-2026-12818

Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling CWE-770 within their Modbus TCP service...

9.3CVSS5.8AI score0.0031EPSS
SaveExploits0References2
CVE
CVE
added 2026/06/30 6:24 a.m.54 views

CVE-2026-12818

Delta Electronics DVP12SE PLCs are affected by a resource allocation vulnerability (CWE-770) in the Modbus TCP service. The issue entails unbounded resource usage due to lack of limits or throttling. CVSS data from the NVD indicates a CRITICAL severity with network attack vector, no privileges, a...

9.3CVSS5.8AI score0.00253EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/29 5:16 p.m.21 views

CVE-2026-13590

A security flaw has been discovered in seladb PcapPlusPlus 25.05. This impacts the function pcpp::ModbusLayer::getLength in the library Packet++/header/ModbusLayer.h of the component Modbus Protocol Handler. The manipulation of the argument length results in heap-based buffer overflow. The attack...

6.3CVSS0.00394EPSS
SaveExploits0References9
EUVD
EUVD
added 2026/06/29 4:45 p.m.16 views

EUVD-2026-40152

A security flaw has been discovered in seladb PcapPlusPlus 25.05. This impacts the function pcpp::ModbusLayer::getLength in the library Packet++/header/ModbusLayer.h of the component Modbus Protocol Handler. The manipulation of the argument length results in heap-based buffer overflow. The attack...

6.3CVSS6.1AI score0.00394EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2026/06/29 4:45 p.m.60 views

CVE-2026-13590 seladb PcapPlusPlus Modbus Protocol ModbusLayer.h getLength heap-based overflow

A security flaw has been discovered in seladb PcapPlusPlus 25.05. This impacts the function pcpp::ModbusLayer::getLength in the library Packet++/header/ModbusLayer.h of the component Modbus Protocol Handler. The manipulation of the argument length results in heap-based buffer overflow. The attack...

6.3CVSS0.00394EPSS
SaveExploits0References9
CVE
CVE
added 2026/06/29 4:45 p.m.38 views

CVE-2026-13590

The CVE-2026-13590 affects seladb PcapPlusPlus 25.05, specifically the Modbus Protocol Handler’s ModbusLayer getLength implementation in Packet++/header/ModbusLayer.h. The issue is a heap-based buffer overflow caused by manipulation of the length argument, with remote execution possible. Document...

6.3CVSS6.1AI score0.00394EPSS
SaveExploits0References9
OSV
OSV
added 2026/06/29 4:45 p.m.10 views

CVE-2026-13590 seladb PcapPlusPlus Modbus Protocol ModbusLayer.h getLength heap-based overflow

A security flaw has been discovered in seladb PcapPlusPlus 25.05. This impacts the function pcpp::ModbusLayer::getLength in the library Packet++/header/ModbusLayer.h of the component Modbus Protocol Handler. The manipulation of the argument length results in heap-based buffer overflow. The attack...

6.3CVSS6.1AI score
SaveExploits0References11
NVD
NVD
added 2026/06/14 6:17 p.m.20 views

CVE-2026-54410

nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recvmsgheader function of the Modbus/TCP server that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of the 260-byte receive buffer by sending a crafted MBAP frame whose Length fiel...

9CVSS0.00541EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/06/14 5:10 p.m.12 views

CVE-2026-54410 nanoMODBUS Off-by-One Buffer Overflow in recv_msg_header() via Crafted MBAP Length Field

nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recvmsgheader function of the Modbus/TCP server that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of the 260-byte receive buffer by sending a crafted MBAP frame whose Length fiel...

9CVSS5.7AI score0.00541EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/06/14 5:10 p.m.55 views

CVE-2026-54410 nanoMODBUS Off-by-One Buffer Overflow in recv_msg_header() via Crafted MBAP Length Field

nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recvmsgheader function of the Modbus/TCP server that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of the 260-byte receive buffer by sending a crafted MBAP frame whose Length fiel...

9CVSS0.00541EPSS
SaveExploits0References4
CVE
CVE
added 2026/06/14 5:10 p.m.95 views

CVE-2026-54410

nanoMODBUS (through v1.23.0) contains an off-by-one buffer overflow in the recv_msg_header() of the Modbus/TCP server. An unauthenticated remote attacker can craft an MBAP Length=255 to force writing one attacker-controlled byte past the 260-byte receive buffer, corrupting the adjacent state stru...

9CVSS5.7AI score0.00541EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/06/14 5:10 p.m.17 views

EUVD-2026-36661

nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recvmsgheader function of the Modbus/TCP server that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of the 260-byte receive buffer by sending a crafted MBAP frame whose Length fiel...

9CVSS5.8AI score0.00541EPSS
SaveExploits0References4
OSV
OSV
added 2026/06/14 5:10 p.m.11 views

CVE-2026-54410 nanoMODBUS Off-by-One Buffer Overflow in recv_msg_header() via Crafted MBAP Length Field

nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recvmsgheader function of the Modbus/TCP server that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of the 260-byte receive buffer by sending a crafted MBAP frame whose Length fiel...

8.8CVSS5.7AI score
SaveExploits0References6
Rows per page
Query Builder