CVE-2024-11999

CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause complete control of the device when an authenticated user installs malicious code into HMI product...

CVE-2024-11999

CVE-2024-11999 involves CWE-1104: Use of Unmaintained Third-Party Components that could enable complete control of Schneider Electric HMI devices when an authenticated user installs malicious code. The vulnerability affects Schneider Electric Harmony HMI products (e.g., HMIST6, HMIG3U, HMIG3X) an...

Tenable Security Center < 6.5.0 Multiple Vulnerabilities (TNS-2024-19)

According to its self-reported version, the Tenable Security Center running on the remote host is prior to 6.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-19 advisory. - Security Center leverages third-party software to help provide underlying...

Oracle Critical Patch Update Advisory - October 2024

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. These patches address vulnerabilities in Oracle code and in third party components included in Oracle products. These patches are usually cumulative, but each advisory describes only the security patches add...

SOFA Hessian Remote Command Execution (RCE) Vulnerability

Impact SOFA Hessian protocol uses a blacklist mechanism to restrict deserialization of potentially dangerous classes for security protection. But there is a gadget chain that can bypass the SOFA Hessian blacklist protection mechanism, and this gadget chain only relies on JDK and does not rely on...

Tenable Nessus Agent < 10.7.3 and earlier Multiple Vulnerabilities (TNS-2024-14)

According to its self-reported version, the Tenable Nessus Agent running on the remote host is prior to 10.7.2 and earlier. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-14 advisory. - Nessus Agent leverages third-party software to help provide underlying...

[R1] Nessus Version 10.7.6 Fixes Multiple Vulnerabilities

R1 Nessus Version 10.7.6 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 09/11/2024 - 12:57 Nessus leverages third-party software to help provide underlying functionality. Several of the third-party components OpenSSL, expat were found to contain vulnerabilities, and updated versions have been...

[R1] Nessus Agent Version 10.7.3 Fixes Multiple Vulnerabilities

R1 Nessus Agent Version 10.7.3 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 09/11/2024 - 12:29 Nessus Agent leverages third-party software to help provide underlying functionality. Several of the third-party components OpenSSL, expat were found to contain vulnerabilities, and updated versions...

Tenable Security Center Multiple Vulnerabilities (TNS-2024-13)

According to its self-reported version, the Tenable Security Center running on the remote host is 6.2.1, 6.3.0 or 6.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-13 advisory. - Security Center leverages third-party software to help provide underlying...

Tenable Nessus Network Monitor < 6.4.0 Multiple Vulnerabilities (TNS-2024-07)

Tenable Nessus Network Monitor is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Johnson Controls Illustra Pro Gen 4 Security Vulnerability

Johnson Controls Illustra Pro Gen 4 is a series of surveillance probes from Johnson Controls, Inc. A security vulnerability exists in Johnson Controls Illustra Pro Gen 4 Camera SS016.05.03.01.0010 and prior versions, which stems from a dependency on vulnerable third-party components...

USN-6877-1 libreoffice vulnerability

It was discovered that LibreOffice incorrectly performed TLS certificate verification when the LibreOfficeKit library is being used by third-party components. A remote attacker could possibly use this issue to obtain sensitive information...

[R2] Security Center Version 6.4.0 Fixes Multiple Vulnerabilities

R2 Security Center Version 6.4.0 Fixes Multiple Vulnerabilities Arnie Cabral Mon, 06/10/2024 - 01:00 Security Center leverages third-party software to help provide underlying functionality. Several of the third-party components Apache, PHP were found to contain vulnerabilities, and updated versio...

CVE-2024-26024

SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in Substation Server...

PT-2024-21283 · Unknown · Substation Server

Name of the Vulnerable Software and Affected Versions: Substation Server affected versions not specified Description: The issue concerns vulnerabilities in third-party components used in Substation Server. No specific details about the nature of the vulnerabilities, affected devices, or real-worl...

CVE-2024-28042

SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in PowerSYSTEM Center...

CVE-2024-28042 SUBNET PowerSYSTEM Center Reliance on Insufficiently Trustworthy Component

SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in PowerSYSTEM Center...

PT-2024-22232 · Unknown · Powersystem Center

Name of the Vulnerable Software and Affected Versions: PowerSYSTEM Center affected versions not specified Description: The issue concerns vulnerabilities in third-party components used in PowerSYSTEM Center. No specific details about the nature of the vulnerabilities, affected devices, or...

Nessus Network Monitor < 6.4.0 Multiple Vulnerabilities (TNS-2024-07)

According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-07 advisory. - Nessus Network Monitor leverages third-party software to help provide underlying...

[R1] Nessus Network Monitor 6.4.0 Fixes Multiple Vulnerabilities

R1 Nessus Network Monitor 6.4.0 Fixes Multiple Vulnerabilities Arnie Cabral Mon, 04/29/2024 - 11:40 Nessus Network Monitor leverages third-party software to help provide underlying functionality. Several of the third-party components hyperscan, curl and c-ares were found to contain vulnerabilitie...