Archive
21 January 2013
Vulnerabilities first published on this day (UTC), newest first.
10 results · Feed
-
Unscored —
The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remot…
-
Unscored —
Format string vulnerability in the _vsnsprintf function in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 befor…
-
Unscored —
Buffer overflow in a third-party ActiveX component in Siemens SIMATIC RF-MANAGER 2008, and RF-MANAGER Basic 3.0 and ear…
-
Unscored —
Cisco WebEx Training Center allow remote authenticated users to bypass intended privilege restrictions and (1) enable o…
-
Unscored —
Cisco WebEx Training Center allows remote authenticated users to remove hands-on lab-session reservations via a crafted…
-
Critical 10.0
3S CoDeSys Relative Path Traversal
The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and directories outside the intended scope. This may allow an attacker to upload and download any file on the device. This co…
-
Critical 9.8
3S CoDeSys Improper Access Control
The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via requests to the TCP listener serv…
-
Unscored —
EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses…
-
Unscored —
The client in Schneider Electric Software Update (SESU) Utility 1.0.x and 1.1.x does not ensure that updates have a val…
-
Unscored —
Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10 and earlier allows remot…