Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,865

CVE-2022-26423

MISSING AUTHORIZATION CWE-862

Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Aethon
Products
Tug Home Base Server
CVE-2022-1070

CHANNEL ACCESSIBLE BY NON-ENDPOINT CWE-300

Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Aethon
Products
Tug Home Base Server
CVE-2022-1066

MISSING AUTHORIZATION CWE-862

Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Aethon
Products
Tug Home Base Server
CVE-2022-1059

CROSS-SITE SCRIPTING CWE-79

Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Aethon
Products
Tug Home Base Server
CVE-2021-44463

Emerson DeltaV Uncontrolled Search Path Element

Missing DLLs, if replaced by an insider, could allow an attacker to achieve local privilege escalation on the DeltaV Distributed Control System Controllers and Workstations (All versions) when some DeltaV services are started.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Emerson
Products
Deltav
CVE-2021-42537

VISAM VBASE Editor Improper Restriction of XML

VISAM VBASE version 11.6.0.6 processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Visam
Products
Vbase Web-remote
CVE-2021-42535

VISAM VBASE Editor Cross Site Scripting

VISAM VBASE version 11.6.0.6 does not neutralize or incorrectly neutralizes user-controllable input before the data is placed in output used as a public-facing webpage.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Visam
Products
Vbase Web-remote
CVE-2021-38417

VISAM VBASE Editor Improper Access Control

VISAM VBASE version 11.6.0.6 is vulnerable to improper access control via the web-remote endpoint, which may allow an unauthenticated user viewing access to folders and files in the directory listing.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Visam
Products
Vbase Web-remote
CVE-2021-38410

AVEVA PCS Portal Uncontrolled Search Path Element

AVEVA Software Platform Common Services (PCS) Portal versions 4.5.2, 4.5.1, 4.5.0, and 4.4.6 are vulnerable to DLL hijacking through an uncontrolled search path element, which may allow an attacker control to one or more locations in the search path.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Aveva
Products
Batch Management Enterprise Data Management Manufacturing Execution System and 4 more
CVE-2021-32960

Rockwell Automation FactoryTalk Services Platform Protection Mechanism Failure

Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed contains a vulnerability that may allow a remote, authenticated attacker to bypass FactoryTalk Security policies based on the computer name. If successfully exploited, this may allow an attacker to have the same privileges as if they were logged on to the client machine.

CVSS 3.1 · 8.5 High EPSS 2.4% KEV · Not listed
Vendors
Rockwellautomation
Products
Factorytalk Services Platform
CVE-2021-28655

Apache Zeppelin: Arbitrary file deletion vulnerability

The improper Input Validation vulnerability in "”Move folder to Trash” feature of Apache Zeppelin allows an attacker to delete the arbitrary files. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.

CVSS 3.1 · 6.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Apache
Products
Zeppelin
CVE-2021-27497

Philips Vue PACS Protection Mechanism Failure

Philips Vue PACS versions 12.2.x.x and prior does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Philips
Products
Myvue Speech Vue Motion and 1 more
CVE-2021-27493

Philips Vue PACS

Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Philips
Products
Myvue Speech Vue Motion and 1 more
CVE-2021-22650

Ovarro TBox Relative Path Traversal

An attacker may use TWinSoft and a malicious source project file (TPG) to extract files on machine executing Ovarro TWinSoft, which could lead to code execution.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Ovarro
Products
Tbox Lt2-530 Tbox Lt2-530 Firmware Tbox Lt2-532 and 12 more