Archive
February 2017
Vulnerabilities first published in this month (UTC), newest first.
1,041 results · Feed
-
Unscored —
An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with th…
-
Unscored —
An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0.…
-
Unscored —
An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft, Versions prior to 3.02.11, a…
-
Unscored —CVE-2016-5809 Public exploit
An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX serie…
-
Unscored —
An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft, Versions prior to 3.02.11, a…
-
Unscored —
An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0.…
-
Unscored —
An issue was discovered in OmniMetrix OmniView, Version 1.2. Insufficient password requirements for the OmniView web ap…
-
Unscored —
An issue was discovered in Schneider Electric PowerLogic PM8ECC device 2.651 and older. Undocumented hard-coded credent…
-
Unscored —
An issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware release. User controlled inp…
-
Unscored —
An issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0. When updating an mGu…
-
Unscored —
An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Ver…
-
Unscored —
An issue was discovered in OSIsoft PI Coresight 2016 R2 and earlier versions, and PI Web API 2016 R2 when deployed usin…
-
Unscored —
An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe…
-
Unscored —
An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro…
-
Unscored —CVE-2017-5146 Public exploit
An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Ver…
-
Unscored —
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. An INFORMATION EXPOSURE flaw …
-
Unscored —
An issue was discovered in Schneider Electric homeLYnk Controller, LSS100100, all versions prior to V1.5.0. The homeLYn…
-
Unscored —
An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Ver…
-
Unscored —
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Input sent from a malicious c…
-
Unscored —
An issue was discovered in Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and earlier. Wonderware Historian cr…
-
Unscored —
An issue was discovered in Advantech WebAccess Version 8.1. By accessing a specific uniform resource locator (URL) on t…
-
Unscored —
An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe…
-
Unscored —
An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Path Traversal vulner…
-
Unscored —
An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe…
-
Unscored —
An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe…
-
Unscored —
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Lack of authentication for re…
-
Unscored —
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. There is no CSRF Token genera…
-
Unscored —
An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Cross Site Request Fo…
-
Unscored —
An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe…
-
Unscored —
An issue was discovered in VideoInsight Web Client Version 6.3.5.11 and previous versions. A SQL Injection vulnerabilit…
-
Unscored —
An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. After an adm…
-
Unscored —
An issue was discovered in Advantech WebAccess Version 8.1. To be able to exploit the SQL injection vulnerability, an a…
-
Unscored —
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Users do not have any option …
-
Unscored —
click/install.py in click does not require files in package filesystem tarballs to start with ./ (dot slash), which all…
-
Unscored —
The generate_smb_nt_hash function in include/functions.inc in GOsa allows remote attackers to execute arbitrary command…
-
Unscored —
libdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash)…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers…
-
Unscored —
install/index.php in Exponent CMS 2.3.9 allows remote attackers to execute arbitrary commands via shell metacharacters …
-
Unscored —
Samsung devices with Android KK(4.4), L(5.0/5.1), or M(6.0) allow attackers to cause a denial of service (system crash)…
-
Unscored —
Samsung devices with Android KK(4.4) or L(5.0/5.1) allow local users to cause a denial of service (IAndroidShm service …