102 matches found
CVE-2023-29377
An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. By using FileType renames, it is possible to bypass limitations on assignment of a directory path to FileDirectory OPC UA objects and a file path to File OPC UA objects...
CVE-2023-29377
An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. By using FileType renames, it is possible to bypass limitations on assignment of a directory path to FileDirectory OPC UA objects and a file path to File OPC UA objects...
CVE-2023-29377
Softing OPC UA C++ SDK (through 6.20) and Softing Secure Integration Server (through 1.22) are affected by a directory traversal vulnerability in the handling of OPC UA FileDirectory FileType renames . The root cause is a lack of proper validation of a user-supplied path before it is used in file...
EUVD-2023-43204
Malicious code in bioql PyPI...
EUVD-2023-43203
Malicious code in bioql PyPI...
EUVD-2022-34606
Malicious code in bioql PyPI...
EUVD-2023-43201
Malicious code in bioql PyPI...
EUVD-2023-43205
Malicious code in bioql PyPI...
EUVD-2022-24413
Malicious code in bioql PyPI...
EUVD-2022-34604
Malicious code in bioql PyPI...
EUVD-2023-43202
Malicious code in bioql PyPI...
EUVD-2022-34801
Malicious code in bioql PyPI...
CVE-2022-1069
A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22...
CVE-2022-1748
Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability...
CVE-2022-1373
The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files. An attacker can craft a zip file to load an arbitrary dll and execute code. Using the "restore configuration" feature to upload a zip file...
CVE-2022-2335
A crafted HTTP packet with a -1 content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22...
CVE-2022-2337
A crafted HTTP packet with a missing HTTP URI can create a denial-of-service condition in Softing Secure Integration Server V1.22...
CVE-2022-2334
The application searches for a library dll that is not found. If an attacker can place a dll with this name, then the attacker can leverage it to execute arbitrary code on the targeted Softing Secure Integration Server V1.22...
CVE-2022-2336
Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as admin and password as admin. This allows Softing to log in to the server directly to perform administrative functions. Upon installation or upon first login, the...