Lucene search
+L

2600 matches found

RedHat Linux
RedHat Linux
•added 2019/08/06 1:56 p.m.•16 views

libmspack: Out-of-bounds write in mspack/cab.h

In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write...

6.5CVSS7AI score0.03086EPSS
SaveExploits0References4
Into the symmetry
Into the symmetry
•added 2019/07/22 12:20 p.m.•128 views

SIAM Conference on Applied Algebraic Geometry 2019 - Isogenies mini-symposium

So here we are in the nice city of Bern, in the Teutonic Switzerland, for SIAM Conference on Applied Algebraic Geometry 2019 that this year counts more than 750 attendees! The weather is warm enough but the isogenies topic has never been so hot! So for this occurrence of the conference Tanja Lang...

7.3AI score
SaveExploits0
Schneier on Security
Schneier on Security
•added 2019/07/12 10:36 a.m.•221 views

Presidential Candidate Andrew Yang Has Quantum Encryption Policy

At least one presidential candidate has a policy about quantum computing and encryption. It has two basic planks. One: fund quantum-resistant encryption standards. Note: NIST is already doing this. Two, fund quantum computing. Unlike many far more pressing computer security problems, the market...

0.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2019/07/05 12:00 a.m.•17 views

Schneider Electric Modicon Quantum 140NWM10000 Ethernet network TCP/IP module

Binary data 764536.prm...

7.3AI score
SaveExploits0
Hacker One
Hacker One
•added 2019/06/26 7:05 a.m.•56 views

Starbucks: Reflected cross-site scripting on multiple Starbucks assets.

NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Please indicate NA, if not applicable. Remember, the more detail you provide, the easier it is for us to verify and then potentially issue a bounty, so be sure to take your time filling...

SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2019/06/18 12:00 a.m.•15 views

The vulnerability of the microprogrammed programmable logic controller Modicon Quantum, related to errors in controlling access parameters, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed programmable logic controller Modicon Quantum is related to errors in controlling access parameters. Exploiting this vulnerability could allow a malicious actor to cause malfunctions through the use of the Telnet connection...

6.5CVSS5.5AI score0.01114EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/06/18 12:00 a.m.•25 views

The vulnerability of the microprogrammed programmable logic controller Modicon Quantum, related to errors in access control mechanisms, allows a intruder to trigger a service failure or alter the controller’s configuration.

The vulnerability of the microprogrammed programmable logic controller Modicon Quantum is related to errors in the access control mechanisms. Exploiting this vulnerability could allow an attacker to cause service failures or modify the controller’s configuration using the Ethernet/IP protocol...

9.1CVSS7.7AI score0.01399EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/06/18 12:00 a.m.•12 views

The vulnerability of the microprogrammed logic controller Modicon Quantum, related to errors in code generation, allows a intruder to unauthorizedly modify the built-in software and cause malfunctions during maintenance.

The vulnerability of the microprogrammed programmable logic controller Modicon Quantum is related to errors in code generation. Exploiting this vulnerability allows an intruder to unauthorizedly modify the built-in software and cause malfunctions using the Modbus protocol...

9.1CVSS7.8AI score0.0145EPSS
SaveExploits0References3
CNVD
CNVD
•added 2019/05/24 12:00 a.m.•21 views

Buffer Overflow Vulnerability in Multiple Schneider Electric Products (CNVD-2019-45192)

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

9.8CVSS7.5AI score0.29575EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/05/23 12:00 a.m.•56 views

Multiple Schneider Electric Products Input Validation Error Vulnerability

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

5.3CVSS6.9AI score0.01509EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/05/23 12:00 a.m.•22 views

Multiple Schneider Electric Products Resource Management Error Vulnerability

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

7.5CVSS6.8AI score0.03289EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/05/23 12:00 a.m.•22 views

Access Control Error Vulnerability in Multiple Schneider Electric Products (CNVD-2019-34610)

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

9.8CVSS7.5AI score0.03808EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/05/23 12:00 a.m.•19 views

Multiple Schneider Electric Products Information Disclosure Vulnerability (CNVD-2019-34828)

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

7.5CVSS6.3AI score0.03413EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/05/23 12:00 a.m.•28 views

Multiple Schneider Electric Products Privilege License and Access Control Issues Vulnerabilities

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

9.8CVSS7AI score0.35039EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/05/23 12:00 a.m.•21 views

Buffer Overflow Vulnerability in Multiple Schneider Electric Products (CNVD-2019-34829)

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

7.5CVSS7.5AI score0.03413EPSS
SaveExploits1References1
OSV
OSV
•added 2019/05/22 9:29 p.m.•20 views

CVE-2018-7857

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible Denial of Service when writing out of bounds variables to the controller over Modbus...

7.5CVSS5.8AI score0.01582EPSS
SaveExploits1References2
Prion
Prion
•added 2019/05/22 9:29 p.m.•26 views

Design/Logic Flaw

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible Denial of Service when writing out of bounds variables to the controller over Modbus...

5CVSS7.3AI score0.01582EPSS
SaveExploits1References2Affected Software4
Prion
Prion
•added 2019/05/22 9:29 p.m.•27 views

Design/Logic Flaw

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading invalid physical memory blocks in the controller over Modbus...

5CVSS7.2AI score0.01821EPSS
SaveExploits1References2Affected Software2
Prion
Prion
•added 2019/05/22 9:29 p.m.•29 views

Information disclosure

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading variables in the controller using Modbus...

5CVSS7.3AI score0.02298EPSS
SaveExploits1References2Affected Software2
Prion
Prion
•added 2019/05/22 9:29 p.m.•23 views

Design/Logic Flaw

A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a Denial of Service when sending invalid breakpoint parameters to the controller over Modbus...

5CVSS7.3AI score0.02648EPSS
SaveExploits1References3Affected Software2
Rows per page
Query Builder