CVE-2026-111721

Open WES through 1.0.0 contains an authorization bypass vulnerability that allows authenticated users to modify other warehouses' stock records because GlobalGatewayFilter never enforces authwarehouse scoping. Attackers holding the menu permission can enumerate sequential IDs on...

EUVD-2026-103013

Open WES through 1.0.0 contains an authorization bypass vulnerability that allows authenticated users to modify other warehouses' stock records because GlobalGatewayFilter never enforces authwarehouse scoping. Attackers holding the menu permission can enumerate sequential IDs on...

CVE-2026-111721 Open WES through 1.0.0 Broken Access Control via GlobalGatewayFilter Warehouse Scoping

Open WES through 1.0.0 contains an authorization bypass vulnerability that allows authenticated users to modify other warehouses' stock records because GlobalGatewayFilter never enforces authwarehouse scoping. Attackers holding the menu permission can enumerate sequential IDs on...

CVE-2026-111721

The Open WES through 1.0.0 software contains an authorization bypass vulnerability caused by a lack of auth_warehouse scoping within the GlobalGatewayFilter . This flaw allows authenticated users with menu permission to modify stock records belonging to other warehouses. Specifically, attackers c...

wesng

Windows Exploit Suggester - Next Generation WES-NG WES-NG is a tool based on the output of Windows' systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, includin...

PT-2026-116120

Open WES through 1.0.0 contains an authorization bypass vulnerability that allows authenticated users to modify other warehouses' stock records because GlobalGatewayFilter never enforces auth warehouse scoping. Attackers holding the menu permission can enumerate sequential IDs on...

wesng

Windows Exploit Suggester - Next Generation WES-NG WES-NG es una herramienta basada en la salida de la utilidad systeminfo de Windows que proporciona la lista de vulnerabilidades a las que el sistema operativo es vulnerable, incluyendo cualquier exploit para estas vulnerabilidades. Se admite...

CVE-2026-52622

An issue in Wellav Technologies Co., Ltd Wellav WES Emergency Broadcast Terminal WES100, WES270, WES280, and WES290 before 08-08-2023 allows a remote attacker to obtain sensitive information via the global API request wrapper function...

CVE-2026-52622: Exposure of Sensitive Information to an Unauthorized Actor

An issue in Wellav Technologies Co., Ltd Wellav WES Emergency Broadcast Terminal WES100, WES270, WES280, and WES290 before 08-08-2023 allows a remote attacker to obtain sensitive information via the global API request wrapper function...

EUVD-2026-87086

An issue in Wellav Technologies Co., Ltd Wellav WES Emergency Broadcast Terminal WES100, WES270, WES280, and WES290 before 08-08-2023 allows a remote attacker to obtain sensitive information via the global API request wrapper function...

PT-2026-98824

Name of the Vulnerable Software and Affected Versions Wellav WES Emergency Broadcast Terminal WES100 versions prior to 08-08-2023 Wellav WES Emergency Broadcast Terminal WES270 versions prior to 08-08-2023 Wellav WES Emergency Broadcast Terminal WES280 versions prior to 08-08-2023 Wellav WES...

CVE-2026-52622

Wellav Technologies Co., Ltd Wellav WES Emergency Broadcast Terminal models WES100 , WES270 , WES280 , and WES290 (versions prior to 08-08-2023) are vulnerable to a remote information disclosure flaw. An attacker can obtain sensitive information by exploiting a vulnerability in the global API req...

CVE-2026-52622

An issue in Wellav Technologies Co., Ltd Wellav WES Emergency Broadcast Terminal WES100, WES270, WES280, and WES290 before 08-08-2023 allows a remote attacker to obtain sensitive information via the global API request wrapper function...

September 8, 2020—KB4577053 (Security-only update)

None None...

Siemens CPU 1505SP and WinCC Runtime PLC Detection

Binary data 750318.prm...

Siemens CPU 1505SP F and WinCC Runtime PLC Detection

Binary data 750324.prm...

Siemens CPU 1505SP F and WinCC Runtime PLC Detection

Binary data 750323.prm...

Arbitrary Code Execution

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

CVE-2019-3712

Dell WES Wyse Device Agent (older than 14.1.2.9) and Dell Wyse ThinLinux HAgent (older than 5.4.55 00.10) contain a buffer overflow vulnerability. An unauthenticated attacker could execute arbitrary code with FTP client privileges by sending crafted input. The FTP code that contained the flaw has...

CVE-2019-3712

Dell WES Wyse Device Agent versions prior to 14.1.2.9 and Dell Wyse ThinLinux HAgent versions prior to 5.4.55 00.10 contain a buffer overflow vulnerability. An unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary code on the system with privileges of the FTP...