Archive
1 March 2024
Vulnerabilities first published on this day (UTC), newest first.
12 results · Clear filters · Feed
-
Critical 9.4
Commend WS203VICM Improper Access Control
A remote attacker may be able to bypass access control of Commend WS203VICM by creating a malicious request.
-
Critical 9.8
Ethercat Zeek Plugin Out-of-bounds Write
Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write while analyzing specific Ethercat datagrams. This could allow an attacker to cause arbitrary code execution.
-
Critical 9.8
Ethercat Zeek Plugin Out-of-bounds Write
Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write in their primary analyses function for Ethercat communication packets. This could allow an attacker to cause a…
-
Critical 9.8
Budibase affected by VM2 Constructor Escape Vulnerability
### Impact Previously, budibase used a library called `vm2` for code execution inside the Budibase builder and apps, such as the UI below for configuring bindings in the design section.  via the href attribute.
-
Critical 9.8CVE-2024-22891 Public exploit
Nteract Remote Code Execution vulnerability
Nteract v.0.28.0 was discovered to contain a remote code execution (RCE) vulnerability via the Markdown link.