Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,863

CVE-2021-43938

Elcomplus SmartPTT SCADA Server Information Exposure

Elcomplus SmartPTT SCADA Server is vulnerable to an unauthenticated user can request various files from the server without any authentication or authorization.

CVSS 3.1 · 8.1 High EPSS 1.1% KEV · Not listed
Vendors
Smartptt
Products
Scada Server
CVE-2022-1402

Delta Electronics ASDA-Soft Out-of-bounds Read

ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read condition.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Asda Soft
CVE-2022-1403

Delta Electronics ASDA-Soft Out-of-bounds Write

ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds write condition.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Asda Soft
CVE-2022-1118

Rockwell Automation ISaGRAF Deserialization of Untrusted Data

Connected Components Workbench (v13.00.00 and prior), ISaGRAF Workbench (v6.0 though v6.6.9), and Safety Instrumented System Workstation (v1.2 and prior (for Trusted Controllers)) do not limit the objects that can be deserialized. This allows attackers to craft a malicious serialized object that, if opened by a local user in Connected Components Workbench, may result in arbitrary code execution. This vulnerability requires user interaction to be successfully exploited

CVSS 3.1 · 8.6 High EPSS 11.1% KEV · Not listed
Vendors
Rockwellautomation
Products
Connected Component Workbench Isagraf Workbench Safety Instrumented Systems Workstation
CVE-2022-1358

Cambium Networks cnMaestro SQL Injection

The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate and dump all data held in the cnMaestro database.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Cambiumnetworks
Products
Cnmaestro
CVE-2022-1361

Cambium Networks cnMaestro SQL Injection

The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate data about other user’s accounts and devices.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Cambiumnetworks
Products
Cnmaestro
CVE-2020-16231

All Bachmann M1 System Processor Modules - Use of Password Hash with Insufficient Computational Effort

The affected Bachmann Electronic M-Base Controllers of version MSYS v1.06.14 and later use weak cryptography to protect device passwords. Affected controllers that are actively supported include MX207, MX213, MX220, MC206, MC212, MC220, and MH230 hardware controllers, and affected end-of-life controller include MC205, MC210, MH212, ME203, CS200, MP213, MP226, MPC240, MPC265, MPC270, MPC293, MPE270, and CPC210 hardware controllers. Security Level 0 is set at default from the manufacturer, which could allow an unauthenticated remote attacker to gain access to the password hashes. Security Level 4 is susceptible if an authenticated remote attacker or an unauthenticated person with physical access to the device reads and decrypts the password to conduct further attacks.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Bachmann
Products
Cpc210 Cpc210 Firmware Cs200 and 37 more
CVE-2020-14496

Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues

Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed.

CVSS 3.1 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Mitsubishielectric
Products
Cpu Module Logging Configuration Tool Cw Configurator Data Transfer and 26 more
CVE-2021-32935

Cognex In-Sight OPC Server - Deserialization of Untrusted Data

The affected Cognex product, the In-Sight OPC Server versions v5.7.4 (96) and prior, deserializes untrusted data, which could allow a remote attacker access to system level permission commands and local privilege escalation.

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Cognex
Products
In-sight Opc Server
CVE-2021-32965

Delta Electronics DIAScreen - Type Confusion, Out-of-bounds Write

Delta Electronics DIAScreen versions prior to 1.1.0 are vulnerable to type confusion, which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1 · 7.8 High EPSS 1.2% KEV · Not listed
Vendors
Deltaww
Products
Diascreen
CVE-2021-32969

Delta Electronics DIAScreen - Type Confusion, Out-of-bounds Write

Delta Electronics DIAScreen versions prior to 1.1.0 are vulnerable to an out-of-bounds write condition, which may result in a system crash or allow an attacker to remotely execute arbitrary code.

CVSS 3.1 · 7.8 High EPSS 1.2% KEV · Not listed
Vendors
Deltaww
Products
Diascreen
CVE-2021-33014

KUKA KR C4 - Use of Hard-Coded Credentials

An attacker can gain VxWorks Shell after login due to hard-coded credentials on a KUKA KR C4 control software for versions prior to 8.7 or any product running KSS.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Kuka
Products
Kr C4 Kr C4 Firmware Kss
CVE-2022-27184

Horner Automation Cscape Csfont

The affected product is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Hornerautomation
Products
Cscape
CVE-2022-28690

Horner Automation Cscape Csfont

The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Hornerautomation
Products
Cscape
CVE-2022-29488

Horner Automation Cscape Csfont

The affected product is vulnerable to an out-of-bounds read via uninitialized pointer, which may allow an attacker to execute arbitrary code.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Hornerautomation
Products
Cscape
CVE-2022-30540

Horner Automation Cscape Csfont

The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code

CVSS 3.1 · 7.8 High EPSS 1.0% KEV · Not listed
Vendors
Hornerautomation
Products
Cscape
CVE-2020-36549

GE Voluson S8 Windows Operating System Patches privileges management

A vulnerability classified as critical was found in GE Voluson S8. Affected is the underlying Windows XP operating system. Missing patches might introduce an excessive attack surface. Access to the local network is required for this attack to succeed.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Ge
Products
Voluson S8 Voluson S8 Firmware
CVE-2022-1524

3.2.5 CLEARTEXT TRANSMISSION OF SENSITIVE INFORMATION CWE-319

LRM version 2.4 and lower does not implement TLS encryption. A malicious actor can MITM attack sensitive data in-transit, including credentials.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Illumina
Products
Iseq 100 Local Run Manager Miniseq and 5 more
CVE-2022-2140

Elcomplus SmartICS Cross-site Scripting

Elcomplus SmartICS v2.3.4.0 does not neutralize user-controllable input, which allows an authenticated user to inject arbitrary code into specific parameters.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Smartics
Products
Smartics