Archive
16 February 2024
Vulnerabilities first published on this day (UTC), newest first.
5 results · Clear filters · Feed
-
Critical 9.0
Rockwell Automation FactoryTalk® Service Platform Elevated Privileges Vulnerability Through Web Service Functionality
A privilege escalation vulnerability exists in Rockwell Automation FactoryTalk® Service Platform (FTSP). If exploited, a malicious user with basic user group privileges could potentially sign into the software and receive FTSP Administrator Group privileges. …
-
Critical 9.8
In attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write due to improper input…
-
Critical 9.8
An arbitrary file upload vulnerability in /admin/upgrade of CSZ CMS v1.3.0 allows attackers to execute arbitrary code v…
-
Critical 9.8
Tongda OA v2017 and up to v11.9 was discovered to contain a SQL injection vulnerability via the $AFF_ID parameter at /a…
-
Critical 9.1
A XSLT Server Side injection vulnerability in the Import Jobs function of FireBear Improved Import And Export v3.8.6 al…