Skip to content
OpenAdvisories

Archive

18 September 2014

Vulnerabilities first published on this day (UTC), newest first.

← August 2014 2014 / September /18 October 2014 →
  1. 13
  2. 212
  3. 310
  4. 423
  5. 515
  6. 6 
  7. 7 
  8. 85
  9. 9326
  10. 1079
  11. 1145
  12. 1222
  13. 13 
  14. 14 
  15. 1527
  16. 16 
  17. 1732
  18. 1893
  19. 1935
  20. 2041
  21. 21 
  22. 2262
  23. 2359
  24. 2412
  25. 2527
  26. 2623
  27. 2717
  28. 2842
  29. 2953
  30. 3083
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.9
    CVE-2014-5411

    Schneider Electric SCADA Expert ClearSCADA Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

    Schneider Electric ClearSCADA SCADA Expert ClearSCADA ICS / OT
  • Medium 6.4
    CVE-2014-5412

    Schneider Electric SCADA Expert ClearSCADA Improper Authentication

    Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allows remote attackers to read database records by leveraging access to the guest account.

    Schneider Electric ClearSCADA SCADA Expert ClearSCADA ICS / OT
  • Medium 6.4
    CVE-2014-5413

    Schneider Electric SCADA Expert ClearSCADA Cryptographic Issues

    Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 uses the MD5 algorithm for an X.509 certificate, which makes it easier for remote attackers to spoof servers via a cryptographic attack against this algorithm.

    Schneider Electric ClearSCADA SCADA Expert ClearSCADA ICS / OT