Siemens Web Server Login Page of Industrial Controllers

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SINEC Network Management System Logback Component

1. EXECUTIVE SUMMARY CVSS v3 6.6 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: SINEC NMS Vulnerability: Deserialization of Untrusted Data 2. RISK EVALUATION Successful exploitation of this vulnerability could allow attackers with write access to the logback configuration file to...

Malicious code in hosseinp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 494a8d4e11ed44c11cf6f518ba08c375d5ef4c8a3523c60b42d9c4b21b1698a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mailchimp-marketing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ced47308d68b882837e9c6afc3c2cbcf79aae808a317512ebe2c0ed576c0af5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Advantech R-SeeNet

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Advantech Equipment: R-SeeNet Vulnerabilities: Path Traversal, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in an unauthorized attacker...

Microsoft Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability

Microsoft Windows Server Remotely Accessible Registry Keys is vulnerable to information disclosure, which results from inadequate protection of sensitive information on network systems or products. The vulnerability is caused by inadequate protection of sensitive information in network systems or...

CVE-2022-38033

Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability...

CVE-2022-38033

Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability...

Microsoft Windows Server Remotely Accessible Registry Keys 安全漏洞

Microsoft Windows Server Remotely Accessible Registry Keys is vulnerable to information disclosure, which results from inadequate protection of sensitive information on network systems or products. The vulnerability is caused by inadequate protection of sensitive information in network systems or...

TOTOLINK NR1800X setOpModeCfg buffer overflow vulnerability

TOTOLINK NR1800X is an excellent 5G NR indoor Wi-Fi and SIP CPE from China Gion Electronics TOTOLINK.Designed to provide fast and convenient deployment of NR fixed data services for homes and offices.TOTOLINK NR1800X V9.1.0u.6279B20210910 version is vulnerable to a buffer overflow vulnerability,...

Hitachi Energy MicroSCADA Pro X SYS600

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: MicroSCADA Pro/X SYS600 Vulnerability: NULL Pointer Dereference, Infinite Loop 2. RISK EVALUATION Successful exploitation of these vulnerabilities could cause the affected...

Malicious code in tetstetegg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 487d0ce2492eb69c769913d8e9b912be506bbbf5a8e07362a711257ff73c7a31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cognex 3D-A1000 Dimensioning System

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely, low attack complexity Vendor: Cognex Equipment: 3D-A1000 Dimensioning System Vulnerabilities: Missing Authentication for Critical Function, Improper Output Neutralization for Logs, Client-side Enforcement of Server-side Security 2...

CVE-2022-26330

Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting XSS. This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions...

partnerportal.dieseltechnic.com Cross Site Scripting vulnerability OBB-2879826

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PTC Kepware KEPServerEX (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: PTC Equipment: Kepware KEPServerEX Vulnerabilities: Heap-based Buffer Overflow, Stack-based Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled...

Delta Industrial Automation DIALink

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Delta Electronics Equipment: Delta Industrial Automation DIALink Vulnerability: Use of Hard-coded Cryptographic Key 2. RISK EVALUATION Successful exploitation of this vulnerability could result in the...

Malicious code in ss-loaoer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0ec3e73738b2c07875c310ceb73a6d5089c1549e9203bc74a94ce7aaa6e6a76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in randombytse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 763e62628bb512a664eec0ead1b4cbf435c6d0f35c4105bcf22e6dcca11c6563 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in opy-wepback-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0779d4a870d9770efbfaba7658ea8582d5ae3023a91fa9a0ccdbe5483daf414b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...