CVE-2026-67970

A path traversal vulnerability exists in the DS_SetDestPathCmd() component of NASA cFS v7.0.1 due to incorrect access control . This flaw allows an attacker to bypass security restrictions to access sensitive components . No information regarding specific exploits, in-the-wild exploitation, or re...

CVE-2026-48209

An improper neutralization of user-controllable input in OTRS or OTRS Community Edition ticket handling allows authenticated attackers to perform reflected cross-site scripting XSS attacks via crafted request parameters associated with ticket actions. By injecting malicious JavaScript into...

First Wap: A Surveillance Computer You’ve Never Heard Of

Mother Jones has a long article on surveillance arms manufacturers, their wares, and how they avoid export control laws: Operating from their base in Jakarta, where permissive export laws have allowed their surveillance business to flourish, First Wap's European founders and executives have quiet...

SUSE CVE-2008-3140

The syslog dissector in Wireshark formerly Ethereal 1.0.0 allows remote attackers to cause a denial of service application crash via unknown vectors, possibly related to an "incomplete SS7 MSU syslog encapsulated packet."...

Vulnerability fixed in Simatic WinCC and PCS7

Siemens has fixed a vulnerability in Simatic WinCC Graphics Designer Tool and PCS7. a local malicious person could exploit it to gain access to a user, even any password-protected ones. To exploit the vulnerability, the malicious party needs physical access to the system where the vulnerable...

CVE-2020-9992

This issue was addressed by encrypting communications over the network to devices running iOS 14, iPadOS 14, tvOS 14, and watchOS 7. This issue is fixed in iOS 14.0 and iPadOS 14.0, Xcode 12.0. An attacker in a privileged network position may be able to execute arbitrary code on a paired device...

HPESBHF03899 rev.1 - HPE Converged System 700 Virtual Services Router (VSR) using NTP

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP ConvergedSystem 700 Virtualization 2.0 VMware Kit - Nov 2017 Recipe or Aug 2018 Recipe HP ConvergedSystem 700x for VMware Solution Kit - Nov 2017 Recipe or Aug 2018 Recipe H...

HPESBST03884 rev.2 - HPE ConvergedSystem 700 Solutions Using HPE 3PAR Service Processor, Multiple Vulnerabilities

Potential Security Impact: Local: Directory Traversal, Disclosure of Privileged Information; Remote: Access Restriction Bypass, Code Execution, Cross-Site Request Forgery CSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 3PAR Service Processors - Prior to SP-4.4.0.GA-110MU7...

CVE-2017-15319

RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote...

CVE-2017-15320

RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote...

Multiple Huawei products cross-border read vulnerability (CNVD-2017-34418)

Huawei RP200 and TE series are Huawei's all-in-one desktop and high-definition videoconferencing products for high-end customers. The out-of-bounds read vulnerability exists in several Huawei products, as the devices fail to adequately verify user input. A remote attacker could exploit this...

Multiple Huawei products cross-border read vulnerability (CNVD-2017-34420)

Huawei RP200 and TE series are Huawei's all-in-one desktop and high-definition videoconferencing products for high-end customers. The out-of-bounds read vulnerability exists in several Huawei products, as the devices fail to adequately verify user input. A remote attacker could exploit this...

HPESBHF03766 rev.1 - HPE ConvergedSystem 700 Solution with Comware v5 Switches using NTP, Remote Denial of Service (DoS), Unauthorized Modification and Local Denial of Service (DoS)

Potential Security Impact: Local: Denial of Service DoS; Remote: Denial of Service DoS, Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP ConvergedSystem 700 1.0 HP ConvergedSystem 700 for Virtualization 1.0 HP ConvergedSystem 700x 1.0 HP ConvergedSystem...

The vulnerability of the Simatic PCS 7 software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability exists in the implementation of the Web Navigator interface in Siemens WinCC, due to the presence of a strictly encrypted user account. Exploiting this vulnerability allows malicious actors, operating remotely, to gain access to the system through a specially crafted request...

DEBIAN-CVE-2008-3140

The syslog dissector in Wireshark formerly Ethereal 1.0.0 allows remote attackers to cause a denial of service application crash via unknown vectors, possibly related to an "incomplete SS7 MSU syslog encapsulated packet."...

ROS-2-2880

2.2880 Notification on update of the Red OS OPERATION SYSTEM RU.29926343.02.01-01-24 RED SOFT LLC notifies about the completion of the testing procedure and release of the updated RED OS 7.3 distribution. In order to update your copy of RED OS to the current state, you need to perform a standard...