Lucene search
+L

902 matches found

CNNVD
CNNVD
added 2023/11/14 12:0 a.m.8 views

Intel FPGA Security Vulnerability

Intel FPGA products is a series of applications from Intel Corporation USA. A security vulnerability exists in Intel Field Programmable Gate Array FPGA. An attacker exploiting this vulnerability could result in the disclosure of information...

6CVSS6.5AI score0.00228EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/11/14 12:0 a.m.12 views

Siemens SCALANCE 安全漏洞

The SCALANCE M-800, MUM-800 and S615 and the RUGGEDCOM RM1224 are industrial routers.The SCALANCE W products are wireless communication devices for connecting industrial components, such as Programmable Logic Controllers PLCs or Human Machine Interfaces HMIs, that comply with the IEEE 802.11...

6.9CVSS6.5AI score0.00688EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/11/14 12:0 a.m.8 views

Siemens SCALANCE 资源管理错误漏洞

The SCALANCE M-800, MUM-800 and S615 and the RUGGEDCOM RM1224 are industrial routers.The SCALANCE W products are wireless communication devices for connecting industrial components, such as Programmable Logic Controllers PLCs or Human Machine Interfaces HMIs, that comply with the IEEE 802.11...

6.5CVSS6.7AI score0.01001EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/11/06 12:0 a.m.11 views

Mitsubishi Electric MELSEC iQ-F series Security Vulnerability

The Mitsubishi Electric MELSEC iQ-F series is a programmable logic controller from Mitsubishi Electric Japan. A security vulnerability exists in the Mitsubishi Electric MELSEC iQ-F Series that stems from an improperly restricted authentication function...

5.3CVSS7AI score0.0095EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/11/02 12:0 a.m.17 views

The vulnerability of the microprogrammed logic controller LS ELECTRIC XBC-DN32U arises from an operation that goes beyond the buffer boundaries in memory, allowing a intruder to cause a service failure.

The vulnerability of the microprogrammed software of the programmable logic controller LS ELECTRIC XBC-DN32U arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

7.8CVSS7.4AI score0.00663EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/21 12:0 a.m.17 views

Vulnerability of microprogrammed programmable logic controllers MELSEC-F: related to authentication breaches, allowing attackers to circumvent existing security restrictions

The vulnerability of MELSEC-F programmable logic controllers’ microprogramming software is related to authentication breaches. Exploiting this vulnerability allows an attacker, operating remotely, to circumvent existing security restrictions...

9.4CVSS7.7AI score0.0085EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/10/11 12:0 a.m.9 views

The vulnerability of the FINS protocol implementation in Omron programmable logic controllers of the CJ/CS/CP series allows a attacker to execute a brute-force attack.

The vulnerability of the FINS protocol implementation in Omron programmable logic controllers of the CJ/CS/CP series is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a malicious actor to execute a brute-force attack remotely...

7.8CVSS7.8AI score0.00703EPSS
SaveExploits0References5Affected Software9
CNNVD
CNNVD
added 2023/10/09 12:0 a.m.11 views

Delta Electronics WPLSoft Security Vulnerability

Delta Electronics WPLSoft is a software tool for programming Delta Programmable Logic Controllers PLCs from Delta Electronics, Taiwan, China. A security vulnerability exists in Delta Electronics WPLSoft version 2.51 and prior versions, which stems from a heap-based buffer overflow issue...

5.7CVSS7.3AI score0.00388EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/09/29 12:0 a.m.17 views

The vulnerability of the Kostac PLC Programming Software (formerly Koyo PLC Programming Software) relates to the re-release of memory, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Kostac PLC Programming Software formerly Koyo PLC Programming Software relates to the repeated release of memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created project file...

7.8CVSS7.6AI score0.00186EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/05 12:0 a.m.7 views

The vulnerability of the programmable logic controller PLC-100, related to errors in TCP communication processing, allows a intruder to trigger a service failure.

The vulnerability of the programmable logic controller PLC-100 is related to errors in TCP communication processing. Exploiting this vulnerability can allow a remote attacker to cause service failures...

9.4CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/30 12:0 a.m.13 views

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a attacker to carry out cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network Manager EPNM software relates to insufficient data cleaning provided by users. Exploiting this vulnerability allows a malicious actor to carry out XSS attack...

5.5CVSS5.9AI score0.00358EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/08/30 12:0 a.m.13 views

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a attacker to carry out a cross-site scripting attack.

The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network Manager EPNM software relates to insufficient data cleaning provided by users. Exploiting this vulnerability allows a malicious actor to carry out XSS attack...

5.5CVSS5.8AI score0.00355EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/08/29 12:0 a.m.9 views

The vulnerability of the web-server of the programmable logical controller ioLogik, related to deficiencies in access control, allows a intruder to gain unauthorized access to confidential data.

The vulnerability of the web-server-based programmable logic controller ioLogik is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to confidential data...

5.3CVSS6.5AI score0.00304EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/08/24 12:0 a.m.21 views

Cisco Evolved Programmable Network Manager XSS (cisco-sa-pi-epnm-BFjSRJP5)

The version of Cisco Evolved Programmable Network Manager installed on the remote host is prior to 7.1. It is, therefore, affected by a cross-site scripting XSS vulnerability. Due to insufficient validation of user input, an authenticated, remote attacker can, by persuading a user of the affected...

5.4CVSS5.4AI score0.00358EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/08/21 12:0 a.m.13 views

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager (EPNM), allows a attacker to execute XSS attacks and execute arbitrary code.

The vulnerability affects the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager EPNM software for managing network services. Exploiting this vulnerability allows a remote attacker to execute XSS attacks and...

4.8CVSS6.3AI score0.00358EPSS
SaveExploits0References2Affected Software2
OSV
OSV
added 2023/08/16 10:15 p.m.11 views

CVE-2023-20205

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager EPNM could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface on an affected device...

5.4CVSS6AI score0.00358EPSS
SaveExploits0References1
OSV
OSV
added 2023/08/16 10:15 p.m.5 views

CVE-2023-20203

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager EPNM could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface on an affected device...

5.4CVSS6AI score0.00358EPSS
SaveExploits0References1
OSV
OSV
added 2023/08/16 10:15 p.m.9 views

CVE-2023-20222

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager EPNM could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface on an affected device. The...

6.1CVSS6AI score0.00375EPSS
SaveExploits0References1
OSV
OSV
added 2023/08/16 10:15 p.m.5 views

CVE-2023-20201

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager EPNM could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface on an affected device...

5.4CVSS6AI score0.00355EPSS
SaveExploits0References1
Prion
Prion
added 2023/08/16 10:15 p.m.25 views

Cross site scripting

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager EPNM could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface on an affected device. The...

5.8CVSS5.9AI score0.00375EPSS
SaveExploits0References1Affected Software2
Rows per page
Query Builder