Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,910

CVE-2021-33022

Philips Vue PACS Cleartext Transmission of Sensitive Information

Philips Vue PACS versions 12.2.x.x and prior transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Philips
Products
Myvue Speech Vue Motion and 1 more
CVE-2022-1018

ICSA-22-088-01 Rockwell Automation ISaGRAF

When opening a malicious solution file provided by an attacker, the application suffers from an XML external entity vulnerability due to an unsafe call within a dynamic link library file. An attacker could exploit this to pass data from local files to a remote web server, leading to a loss of confidentiality.

CVSS 3.1 · 5.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Rockwellautomation
Products
Connected Components Workbench Isagraf Safety Instrumented Systems Workstation
CVE-2020-14479

ICSA-20-147-01 Inductive Automation Ignition (Update B)

Sensitive information can be obtained through the handling of serialized data. The issue results from the lack of proper authentication required to query the server

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Inductiveautomation
Products
Ignition
CVE-2022-1068

Modbus Tools Modbus Slave Stack-Based Buffer Overflow

Modbus Tools Modbus Slave (versions 7.4.2 and prior) is vulnerable to a stack-based buffer overflow in the registration field. This may cause the program to crash when a long character string is used.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Modbustools
Products
Modbus Slave
CVE-2021-33010

AVEVA System Platform Uncaught Exception

An exception is thrown from a function in AVEVA System Platform versions 2017 through 2020 R2 P01, but it is not caught, which may cause a denial-of-service condition.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Aveva
Products
System Platform
CVE-2021-32980

Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel

Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 does not protect against additional software programming connections. An attacker can connect to the PLC while an existing connection is already active.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Automationdirect
Products
C0-10are-d C0-10are-d Firmware C0-10dd1e-d and 37 more
CVE-2021-32978

Automation Direct CLICK PLC CPU Modules Plaintext Storage of a Password

The programming protocol allows for a previously entered password and lock state to be read by an attacker. If the previously entered password was successful, the attacker can then use the password to unlock Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00.

CVSS 3.1 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Automationdirect
Products
C0-10are-d C0-10are-d Firmware C0-10dd1e-d and 37 more
CVE-2021-32984

Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel

All programming connections receive the same unlocked privileges, which can result in a privilege escalation. During the time Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, an attacker can connect to the PLC and read the project without authorization.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Automationdirect
Products
C0-10are-d C0-10are-d Firmware C0-10dd1e-d and 37 more
CVE-2021-32986

Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel

After Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, the unlocked state does not timeout. If the programming software is interrupted, the PLC remains unlocked. All subsequent programming connections are allowed without authorization. The PLC is only relocked by a power cycle, or when the programming software disconnects correctly.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Automationdirect
Products
C0-10are-d C0-10are-d Firmware C0-10dd1e-d and 37 more
CVE-2021-32982

Automation Direct CLICK PLC CPU Modules Cleartext Transmission of Sensitive Information

Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 passwords are sent as plaintext during unlocking and project transfers. An attacker who has network visibility can observe the password exchange.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Automationdirect
Products
C0-10are-d C0-10are-d Firmware C0-10dd1e-d and 37 more
CVE-2021-32994

Softing OPC-UA C++ SDK Improper Restriction of Operations within the Bounds of a Memory Buffer

Softing OPC UA C++ SDK (Software Development Kit) versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a variety of specially crafted packets to access several unexpected memory locations.

CVSS 3.1 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Softing
Products
Opc Ua C\+\+ Software Development Kit
CVE-2022-1161

ICSA-22-090-05 Rockwell Automation Logix Controllers

An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.

CVSS 3.1 · 10 Critical EPSS 5.2% KEV · Not listed
Vendors
Rockwellautomation
Products
Compact Guardlogix 5370 Compact Guardlogix 5370 Firmware Compact Guardlogix 5380 and 45 more
CVE-2022-1067

ICSMA-22-095-01 LifePoint Informatics Patient Portal

Navigating to a specific URL with a patient ID number will result in the server generating a PDF of a lab report without authentication and rate limiting.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Lifepoint
Products
Patient Portal
CVE-2022-21155

Fernhill SCADA Uncontrolled Resource Consumption

A specially crafted packet sent to the Fernhill SCADA Server Version 3.77 and earlier may cause an exception, causing the server process (FHSvrService.exe) to exit.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Apple Fernhillsoftware Linux and 1 more
Products
Macos Scada Server Linux Kernel and 1 more
CVE-2020-25150

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

A relative path traversal attack in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers with service user privileges to upload arbitrary files. By uploading a specially crafted tar file an attacker can execute arbitrary commands.

CVSS 3.1 · 7.6 High EPSS 1.5% KEV · Not listed
Vendors
Bbraun
Products
Datamodule Compactplus Spacecom
CVE-2020-25152

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

A session fixation vulnerability in the B. Braun Melsungen AG SpaceCom administrative interface Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to hijack web sessions and escalate privileges.

CVSS 3.1 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Bbraun
Products
Datamodule Compactplus Spacecom
CVE-2020-25160

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

Improper access controls in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 enables attackers to extract and tamper with the devices network configuration.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Bbraun
Products
Datamodule Compactplus Spacecom