CVE-2019-13521

A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure of information related to the targeted workstation. Rockwell Automation has released version 16.00.01 of Arena...

CVE-2019-13519

A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure of information related to the targeted workstation. Rockwell Automation has released version 16.00.01 of Arena...

CVE-2019-13521

A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure of information related to the targeted workstation. Rockwell Automation has released version 16.00.01 of Arena...

Rockwell Automation Micrologix 1400 <= 21.2 User Fault Routine Exploit

Binary data 720222.prm...

CVE-2018-8871

In Delta Electronics Automation TPEditor version 1.89 or prior, parsing a malformed program file may cause heap-based buffer overflow vulnerability, which may allow remote code execution...

Allen Bradley Micrologix 1400 Series B FRN Access Control Vulnerability (CNVD-2018-08275)

Allen Bradley Micrologix 1400 Series B FRN is a programmable logic controller from Rockwell Automation. An access control vulnerability exists in the Data, Program, and Function File Permissions feature in the Allen Bradley Micrologix 1400 Series B FRN version 21.2 and earlier. This allows an...

Allen Bradley Micrologix 1400 Series B FRN Access Control Vulnerability (CNVD-2018-08280)

Allen Bradley Micrologix 1400 Series B FRN is a programmable logic controller from Rockwell Automation. An access control vulnerability exists in the data, program, and function file permissions functions in the Allen Bradley Micrologix 1400 Series B FRN version 21.2 and earlier. An attacker coul...

CVE-2017-14473

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-14473

CVE-2017-14473 is an Unauthenticated Data/Program/Function File Improper Access Control vulnerability affecting Allen-Bradley MicroLogix 1400 Series B FRN 21.2 and earlier (tested up to FRN 21.2, 21.0 and 15). The TALOS advisory (TALOS-2017-0443) describes that an unauthenticated attacker can rea...

CVE-2017-14473

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-14472

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2017-14472

CVE-2017-14472 affects Allen Bradley Micrologix 1400 Series B FRN 21.2 and earlier. An unauthenticated attacker can exploit improper access control in the data, program, and function file permissions to read the master password and potentially modify ladder logic or settings via crafted network p...

Design/Logic Flaw

Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 Windows and OpenVPN Connect version 3.1 Windows allows local users to gain privileges via a crafted program.exe file in the %SYSTEMDRIVE% folder...

CVE-2014-5455

Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 Windows and OpenVPN Connect version 3.1 Windows allows local users to gain privileges via a crafted program.exe file in the %SYSTEMDRIVE% folder...

CVE-2013-1092

Multiple unquoted Windows search path vulnerabilities in Novell ZENworks Desktop Management ZDM 7 through 7.1 might allow local users to gain privileges via a Trojan horse "program" file in the C: folder, related to an attempted launch of 1 ZenRem32.exe or 2 wm.exe...

Bypassing the system“Group Policy”restrictions! - Vulnerability warning-the black bar safety net

In a system, since the system applied the Group Policy“only allow a license to run the program”of the limiting function, so that unauthorized programs cannot run, the pop-up message: this operation due to this computer restrictions and be cancelled. Please contact your system administrator. Next ...

CVE-2000-0832

Htgrep CGI program allows remote attackers to read arbitrary files by specifying the full pathname in the hdr parameter...