1163 matches found
Siemens SIMATIC S7-1500 Uncontrolled Resource Consumption (CVE-2023-32636)
A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect gli...
Siemens SIMATIC S7-1500 and Ruggedcom ROX Devices Out-of-bounds Write (CVE-2020-21047)
"The libcpu component which is used by libasm of elfutils version 0.177 git 47780c9e, suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write CWE-787, off-by-one error CWE-193 and reachable assertion CWE-617 %NASLMINLEVEL 80900 C Tenable, Inc...
Siemens SIMATIC S7-1500 Expected Behavior Violation (CVE-2022-32221)
When doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when the CURLOPTPOSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the...
Siemens SIMATIC S7-1500 Improper Neutralization of Special Elements used in a Command (CVE-2015-20107)
In Python aka CPython up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input if they lack validation of user-provided...
Siemens SIMATIC S7-1500 Use After Free (CVE-2024-53165)
In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in registerintccontroller In the error handling for this function, d is freed without ever removing it from intclist which would lead to a use after free. To fix this, let's only add it to the lis...
Siemens SIMATIC S7-1500 Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2024-52332)
igb: Fix potential invalid memory access in igbinitmodule The pciregisterdriver can fail and when this happened, the dcanotifier needs to be unregistered, otherwise the dcanotifier can be called when igb fails to install, resulting to invalid memory access. This plugin only works with Tenable.ot...
Siemens SIMATIC S7-1500 Improper Input Validation (CVE-2024-56570)
In the Linux kernel, the following vulnerability has been resolved: ovl: Filter invalid inodes with missing lookup function Add a check to the ovldentryweird function to prevent the processing of directory inodes that lack the lookup function.This is important because such inodes can cause errors...
Siemens SIMATIC S7-1500 Use After Free (CVE-2024-56600)
net: inet6: do not leave a dangling sk pointer in inet6create sockinitdata attaches the allocated sk pointer to the provided sock object. If inet6create fails later, the sk object is released, but the sock object retains the dangling sk pointer, which may cause use-after-free later. Clear the soc...
Siemens SIMATIC S7-1500 Use After Free (CVE-2024-56601)
In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk pointer in inetcreate sockinitdata attaches the allocated sk object to the provided sock object. If inetcreate fails later, the sk object is freed, but the sock object retains the dangling...
Malicious code in gifa-ot-uoffuto (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc7cbb85379f36977864ca740deab577a88fafa4f461ee602438946930527f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gifa-ot-uuto (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33d249eba894713e91eb4df873159db4dd78caac701960a453b182b521e5092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gifa-ot-uofigapfuto (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772b905e0599a163ae1e4aa9d0c4a0fe79bb168a896638979c4096b80cbe4d73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-155280 Malicious code in gifa-ot-uofifuto (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 439739a72de184c51aa7c08e90e772f4026ce61e696049c52d102cda0026356a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-155287 Malicious code in gifa-ot-uuto (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33d249eba894713e91eb4df873159db4dd78caac701960a453b182b521e5092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Lexmark Printers Improper Access Control (CVE-2019-10058)
Various Lexmark products have an Incorrect Access Control vulnerability. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503869; scriptversion"1.2...
Lexmark Printers Cross-Site Request Forgery (CSRF) (CVE-2019-10057)
Various Lexmark products have a CSRF vulnerability. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503859; scriptversion"1.2";...
Lexmark Printers Path Traversal (CVE-2018-18894)
Certain older Lexmark devices C, M, X, and 6500e before 2018-12-18 contain a directory traversal vulnerability in the embedded web server. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
Lexmark Printers Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2019-9932)
Various Lexmark products have a Buffer Overflow vulnerability. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503876; scriptversion"1.2";...
Lexmark Printers Integer Overflow or Wraparound (CVE-2019-9930)
Various Lexmark products have an Integer Overflow vulnerability. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503866; scriptversion"1.2";...
Lexmark Printers Cross-site Scripting (CVE-2020-10093)
A cross-site scripting XSS vulnerability in Lexmark Pro910 series inkjet and other discontinued products. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...