43 matches found
PT-2025-39222
Name of the Vulnerable Software and Affected Versions Click Plus PLC firmware version 3.60 Description A flaw exists in the pseudo-random number generator due to a predictable seed. This compromises the security of generated private keys. Recommendations Update to a newer firmware version that...
PT-2025-39223
Name of the Vulnerable Software and Affected Versions Click Plus PLC version 3.60 Description A hard-coded cryptographic key is present in firmware version 3.60 of the Click Plus PLC. This key, an AES key, is used to protect the initial messages of a new KOPS session. Recommendations At the momen...
PT-2025-39227
Name of the Vulnerable Software and Affected Versions Click Plus C2-03CPU-2 version 3.60 Description An improper resource shutdown or release issue exists in the Click Plus C2-03CPU-2 device. An unauthenticated attacker can cause a denial-of-service by exhausting all available device sessions...
AutomationDirect CLICK PLUS 安全漏洞
AutomationDirect CLICK PLUS is a small programmable logic controller from AutomationDirect, Inc. A security vulnerability exists in AutomationDirect CLICK PLUS version 3.60 that originates from improper resource shutdown or release and could lead to a denial of service attack...
PT-2025-39221
Name of the Vulnerable Software and Affected Versions Click Programming Software version v3.60 Description A security issue allows a local user, while an administrator session is active, to steal credentials stored in clear text. The issue involves the cleartext storage of sensitive information a...
AutomationDirect CLICK PLUS 安全漏洞
AutomationDirect CLICK PLUS is a small programmable logic controller from AutomationDirect, Inc. A security vulnerability exists in AutomationDirect CLICK PLUS version 3.60 that originates from improper resource shutdown or release and could lead to a denial of service attack...
Cypress Bluetooth SDK 安全漏洞
Cypress Bluetooth SDK is a Bluetooth software development package from Cypress. A security vulnerability exists in Cypress Bluetooth SDK version v3.66, which originates from an attacker being able to trigger a denial of service DoS by providing a carefully crafted LLPAUSEENCREQ packet...
MSP360 Security Breach
MSP360 is a cost-effective, flexible and versatile backup and data recovery solution from MSP360, Inc. A security vulnerability exists in MSP360 7.8.5.15 and 7.9.4.84, which stems from the use of hard-coded key encryption and allows an attacker to obtain network share credentials used in backups...
Asrmicro ASR Series 安全漏洞
The Asrmicro ASR Series is a series of chips from Avantage Technology Asrmicro, a Chinese company. A security vulnerability exists in the Asrmicro ASR Series that stems from incorrect output and possible memory access overruns. The following products are affected: ASR360x Series chips, ASR160x...
Asrmicro ASR Series 安全漏洞
The Asrmicro ASR Series is a series of chips from Avantage Technology Asrmicro, a Chinese company. A security vulnerability exists in the Asrmicro ASR Series, which stems from an out-of-bounds read that will result in a computational error. The following products are affected: ASR360x Series chip...
Softing edgeConnector and Softing edgeAggregator Security Vulnerabilities
Softing edgeAggregator and Softing edgeConnector are both products of Softing. softing edgeAggregator is a flexible and container-based solution for managing complex system architectures for OT/IT integration into edge and cloud applications. softing edgeConnector is a Docker-based software...
PT-2023-6220
Name of the Vulnerable Software and Affected Versions Network Security Services NSS versions prior to 3.61 Description The issue is related to the implementation of the PKCS1 v1.5 standard in the NSS library, which was leaking information useful for mounting Bleichenbacher-like attacks through...
The vulnerability of Microsoft Office and 365 Apps for Enterprise packages lies in insufficient validation of input data, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft Office and 365 Apps for Enterprise packages is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise, which stems from insufficient validation of input data, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Visio graphical editors, Microsoft Office programs, and 365 Apps for Enterprise is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code by opening a specially created file...
CVE-2022-40300
Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before 5600, and Access Manager Plus through 4304 before 4305 have multiple SQL injection vulnerabilities...
CVE-2022-20369
creationtimestamp| type| source ---|---|--- 2022-08-11 18:32:23+00:00| seen| https://t.me/cibsecurity/47979...
DEBIAN-CVE-2021-27135
xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining character sequence...
Vulnerability of the Microsoft Outlook client, Microsoft Office packages and Office 365, as well as the Microsoft Word text editor, related to the ability to bypass security features, allowing attackers to circumvent existing security restrictions.
The vulnerability of the Microsoft Outlook email client, Microsoft Office packages and Office 365, as well as the Microsoft Word text editor, is related to the bypassing of security features. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions...
Beijing Qihoo Technology Co., Ltd. 360 Security Guard suffers from dll hijacking vulnerability
360 Security Guard is a security antivirus program by Qihoo 360. Ltd. 360 Security Guard has a dll hijacking vulnerability that can be exploited by attackers to execute arbitrary code...
The vulnerability of Microsoft Word, Microsoft Office products, and Office 365 allows a perpetrator to execute arbitrary code.
The vulnerabilities of Microsoft Office packages, Office 365, and the Microsoft Word text editor are related to errors in memory object handling. Exploiting these vulnerabilities can allow a malicious actor to execute arbitrary code remotely, using a specially crafted web page or file...