Malicious code in reload-nucleus-views-on-compile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9b7dc180514fc1e38349d2d05cf314d0a6cd4de47cb4a7bd092edc29f24982b6 The OpenSSF Package Analysis project identified 'reload-nucleus-views-on-compile' @ 10.10.10 npm as malicious. It is considered malicious becaus...

Malicious code in nucleus-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef4a82fababc58d4330f2cc60c17200d50ca1501934c59e081fd469d18282173 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2019-13939

A vulnerability has been identified in APOGEE MEC/MBC/PXC P2 All versions = V2.8.2 = V2.8.2 = V2.3 = V2.3x and = V2.3 = V2.3 = V2.3 = V2.3x and = V2.3 = V2.3 = V2.3 = V2.3 = V2.3 = V2.3x and = V2.3 V6.0.327, Nucleus NET All versions, Nucleus ReadyStart V3 All versions V2017.02.3, Nucleus Source...

CVE-2020-27009

A vulnerability has been identified in APOGEE PXC Compact BACnet All versions V3.5.5, APOGEE PXC Compact P2 Ethernet All versions V2.8.20, APOGEE PXC Modular BACnet All versions V3.5.5, APOGEE PXC Modular P2 Ethernet All versions V2.8.20, Nucleus NET All versions V5.2, Nucleus Source Code Version...

CVE-2020-15795

A vulnerability has been identified in APOGEE PXC Compact BACnet All versions V3.5.5, APOGEE PXC Compact P2 Ethernet All versions V2.8.20, APOGEE PXC Modular BACnet All versions V3.5.5, APOGEE PXC Modular P2 Ethernet All versions V2.8.20, Nucleus NET All versions V5.2, Nucleus Source Code Version...

The vulnerability of the signer-package processor in Nucleus scanners allows a perpetrator to execute arbitrary code.

The vulnerability of the signer-package processor in Nuclei scanners exists because measures to neutralize special elements are not taken. Exploiting this vulnerability allows an attacker to execute arbitrary code by running a specially crafted template with user input...

K000135330: Multiple Nucleus TCP/IP stack vulnerabilities

Security Advisory Description CVE-2021-31889 A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 and = V2.3 an...

The vulnerability of the DHCP service provided by microprogramming software for controllers such as APOGEE MBC, APOGEE MEC, APOGEE PXC, Desigo PXC, TALON TC, and the operating system Nucleus allows a perpetrator to trigger a service failure.

The vulnerability of the DHCP service provided by microprogramming software for controllers such as APOGEE MBC, APOGEE MEC, APOGEE PXC, Desigo PXC, TALON TC, and the operating system Nucleus lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a malicio...

CVE-2020-21474

File Upload vulnerability in NucleusCMS v.3.71 allows a remote attacker to execute arbitrary code via the /nucleus/plugins/skinfiles/?dir=rsd parameter...

Nucleus CMS 代码问题漏洞

Nucleus CMS is a website builder. A security vulnerability exists in NucleusCMS version v.3.71, which originates from allowing remote attackers to execute arbitrary code via the /nucleus/plugins/skinfiles/?dir=rsd parameter...

K70746705: Multiple NAME:WRECK vulnerabilities

Security Advisory Description CVE-2020-7461 In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient8 fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap...

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in Mendix, among others, Nucleus NET, RUGGEDCOM, SCALANCE, SICAM, SIMATIC, SIPROTEC and SIMATIC WinCC-OA. The vulnerabilities allow a malicious potentially able to launch attacks that result in the following categories of damage: Cross-Site Request Forgery XSRF...

Siemens Nucleus RTOS FTP Server Uncontrolled Resource Consumption (CVE-2022-38371)

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions, APOGEE PXC Compact P2 Ethernet All versions, APOGEE PXC Modular...

CVE-2022-38371

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 = V2.3 = V2.3 = V2.3 = V2.3 = V2.3 = V2.3 = V2.3 = V2.3 =...

Design/Logic Flaw

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions, APOGEE PXC Compact P2 Ethernet All versions, APOGEE PXC Modular...

Siemens Nucleus NET和Siemens Nucleus ReadyStart 资源管理错误漏洞

Siemens Nucleus NET and Siemens Nucleus ReadyStart are both products of Siemens AG, Germany. Siemens Nucleus NET is a Siemens Nucleus Network. Siemens Nucleus ReadyStart is a bundled solution. It is a bundled solution for accelerating the fast startup of complete systems and provides a rich set o...

CVE-2022-38371

CVE-2022-38371 is a memory/resource handling flaw in Siemens Nucleus FTP server that can cause remote denial of service by failing to release memory for incomplete FTP connections. Affected products span APOGEE MBC/MEC PXC, Desigo PXC variants, TALON TC, Nucleus NET/ReadyStart, and Nucleus Source...

Siemens APOGEE, TALON and Desigo PXC/PXM Products

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: FTP Server of Nucleus RTOS based APOGEE, TALON and Desigo PXC/PXM Products Vulnerabilities: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of these...

CVE-2022-38371

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 = V2.3 = V2.3 = V2.3 = V2.3 = V2.3 = V2.3 = V2.3 = V2.3 =...

Siemens Nucleus RTOS FTP Server

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...