Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,860

CVE-2021-38447

OCI OpenDDS Secure Amplification

OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition.

CVSS 3.1 · 8.6 High EPSS 2.1% KEV · Not listed
Vendors
Objectcomputing
Products
Opendds
CVE-2021-43547

TwinOaks Computing CoreDX DDS Secure Network Amplification

TwinOaks Computing CoreDX DDS versions prior to 5.9.1 are susceptible to exploitation when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information exposure.

CVSS 3.1 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Twinoakscomputing
Products
Coredx Dds
CVE-2021-38423

GurumDDS Heap-based Incorrect Calculation of Buffer Size

All versions of GurumDDS improperly calculate the size to be used when allocating the buffer, which may result in a buffer overflow.

CVSS 3.1 · 6.6 Medium EPSS 1.3% KEV · Not listed
Vendors
Gurum
Products
Gurumdds
CVE-2021-38425

eProsima Fast DDS Network Amplification

eProsima Fast DDS versions prior to 2.4.0 (#2269) are susceptible to exploitation when an attacker sends a specially crafted packet to flood a target device with unwanted traffic, which may result in a denial-of-service condition and information exposure.

CVSS 3.1 · 7.5 High EPSS 5.0% KEV · Not listed
Vendors
Eprosima
Products
Fast Dds
CVE-2021-38427

RTI Connext DDS Professional and Connext DDS Secure Stack-based Buffer Overflow

RTI Connext DDS Professional and Connext DDS Secure Versions 4.2.x to 6.1.0 are vulnerable to a stack-based buffer overflow, which may allow a local attacker to execute arbitrary code.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Rti
Products
Connext Professional Connext Secure
CVE-2021-38429

OCI OpenDDS Secure Network Amplification

OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition and information exposure.

CVSS 3.1 · 6.6 Medium EPSS 1.5% KEV · Not listed
Vendors
Objectcomputing
Products
Opendds
CVE-2021-38433

RTI Connext DDS Professional and Connext DDS Secure Stack-based Buffer Overflow

RTI Connext DDS Professional and Connext DDS Secure Versions 4.2x to 6.1.0 vulnerable to a stack-based buffer overflow, which may allow a local attacker to execute arbitrary code.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Rti
Products
Connext Professional Connext Secure
CVE-2021-38435

RTI Connext DDS Professional and Connext DDS Secure Incorrect Calculation of Buffer Size

RTI Connext DDS Professional and Connext DDS Secure Versions 4.2x to 6.1.0 not correctly calculate the size when allocating the buffer, which may result in a buffer overflow.

CVSS 3.1 · 6.6 Medium EPSS 1.4% KEV · Not listed
Vendors
Rti
Products
Connext Professional Connext Secure
CVE-2021-27478

EIPStackGroup OpENer Ethernet/IP Incorrect Conversion between Numeric Types

A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may cause a denial-of-service condition.

CVSS 3.1 · 8.2 High EPSS 1.1% KEV · Not listed
Vendors
Opener Project
Products
Opener
CVE-2021-27482

EIPStackGroup OpENer Ethernet/IP Out-of-bounds Read

A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may allow the attacker to read arbitrary data.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Opener Project
Products
Opener
CVE-2021-27498

EIPStackGroup OpENer Ethernet/IP Reachable Assertion

A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Opener Project
Products
Opener
CVE-2021-27500

EIPStackGroup OpENer Ethernet/IP Reachable Assertion

A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Opener Project
Products
Opener
CVE-2021-27505

mySCADA myPRO Exposure of Information Through Directory Listing

mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive directory listing information.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Myscada
Products
Mypro
CVE-2021-33005

mySCADA myPRO Path Traversal

mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to arbitrary directories.

CVSS 3.1 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Myscada
Products
Mypro
CVE-2021-33009

mySCADA myPRO Unrestricted Upload of File with Dangerous Type

mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to the file system.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Myscada
Products
Mypro
CVE-2021-33013

mySCADA myPRO Improper Access Control

mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive system information.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Myscada
Products
Mypro
CVE-2021-27442

Weintek EasyWeb cMT Cross-site Scripting

The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated remote attacker to inject malicious JavaScript code.

CVSS 3.1 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Weintek
Products
Cmt-ctrl01 Cmt-ctrl01 Firmware Cmt-fhd and 29 more
CVE-2021-27444

Weintek EasyWeb cMT Improper Access Control

The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Weintek
Products
Cmt-ctrl01 Cmt-ctrl01 Firmware Cmt-fhd and 29 more
CVE-2023-50716

Invalid DATA_FRAG Submessage causes a bad-free error

eProsima Fast DDS (formerly Fast RTPS) is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATA_FRAG Submessage causes a bad-free error, and the Fast-DDS process can be remotely terminated. If an invalid Data_Frag packet is sent, the `Inline_qos, SerializedPayload` member of object `ch` will attempt to release memory without initialization, resulting in a 'bad-free' error. Versions 2.13.0, 2.12.2, 2.11.3, 2.10.2, and 2.6.7 fix this issue.

CVSS 3.1 · 9.7 Critical EPSS < 1% KEV · Not listed
Vendors
Eprosima
Products
Fast Dds
CVE-2021-27446

Weintek EasyWeb cMT Code Injection

The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system.

CVSS 3.1 · 10 Critical EPSS 3.0% KEV · Not listed
Vendors
Weintek
Products
Cmt-ctrl01 Cmt-ctrl01 Firmware Cmt-fhd and 29 more