38 results · Clear filters · Feed
-
High max 9.2
PHP insecure error handling and state management
PHP insecurely handles multiple combinations of memory allocations and error conditions. These behaviors can allow a remote attacker to cause a denial of service or execute arbitrary code. Successful exploitation depends on a number of factors including the s…
-
High max 8.8
Hitachi Energy SOI
Hitachi Energy is aware of RCE (Remote Code Execution) vulnerability in Apache ActiveMQ component of SOI product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks affecting confidentiality, integrity, and av…
first Sep 29, 2026 -
High max 7.2
Plex Media Server
Plex Media Server before 1.43.3.10861 contains multiple vulnerabilities. In the worst case, a remote attacker could steal a legitimate user's account credentials and eventually write arbitrary files or execute code.
-
High max 7.8
Siemens SIPLUS and SIMATIC Products
Multiple Siemens products are vulnerable to the "Copy Fail" vulnerability. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific count…
first Sep 8, 2026 -
High max 7.8
ABB Ability Edgenius
ABB is aware of public reports of a vulnerability CVE‑2026‑31431 (Copy Fail) in the product versions listed as affected in the advisory. An update is available that resolves a publicly reported vulnerability. CVE‑2026‑31431 (Copy Fail) is a Linux kernel vulne…
first Jun 25, 2026 -
High max 8.7
All-Line Equipment Company Fuel-Boss
Successful exploitation of these vulnerabilities could allow attackers to execute arbitrary commands or code remotely on affected systems.
-
High max 7.5
ABB Ability Zenon
ABB is aware of publicly reported vulnerabilities affecting MongoDB 4.2, which is bundled within the IIoT Services of the affected product versions. MongoDB 4.2 has reached end-of-life and contains multiple known security vulnerabilities. An attacker who succ…
first Jul 30, 2026 -
High max 7.8
ABB Ability Edgenius
ABB is aware of public reports of a vulnerability CVE‑2026‑31431 (Copy Fail) in the product versions listed as affected in the advisory. An update is available that resolves a publicly reported vulnerability. CVE‑2026‑31431 (Copy Fail) is a Linux kernel vulne…
first Jun 25, 2026 -
High max 8.8
Impact of Linux Kernel vulnerabilities on B&R products
B&R is aware of publicly reported vulnerabilities affecting the Linux kernel versions shipped with the products listed as affected in the advisory. Successful local exploitation of these vulnerabilities could allow an attacker to escalate privileges on the af…
first Jun 11, 2026 -
High max 8.8
Schneider Electric EcoStruxure Power Operation (Update A)
Successful exploitation of these vulnerabilities could result in the loss of system functionality or unauthorized access to system functions.
first Jul 22, 2025 -
High max 7.8
Mitsubishi Electric MELSOFT Update Manager (Update B)
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code, disclose information, tamper with information, or cause a denial-of-service (DoS) condition.
first Jul 3, 2025 -
High max 8.1
Siemens HyperLynx and Industrial Edge App Publisher
Multiple Siemens products are affected by a type confusion vulnerability in Google Chrome prior to 138.0.7204.96. This could allow a remote attacker to perform arbitrary code execution via a crafted HTML page. Siemens has released a new version for Industrial…
first Oct 14, 2025 -
High max 7.7
Rockwell Automation Lifecycle Services with Cisco
Successful exploitation of this vulnerability could result in arbitrary code execution.
-
High max 7.7
Rockwell Automation Stratix
Successful exploitation of this vulnerability could result in arbitrary code execution.
-
High max 9.8
InduSoft Web Studio Directory Traversal Vulnerability
first Jan 18, 2014 -
High max 8.8
Commvault Web Server unspecified vulnerability
According to Commvault: "The Web Server is a component in CommCell environments that provides a RESTful interface to the software where users can perform various tasks using available APIs". A remote, authenticated attacker can exploit an unspecified vulnerab…
-
High max 8.6
Trimble Cityworks (Update A)
Successful exploitation of this vulnerability could allow an authenticated user to perform a remote code execution.
first Feb 6, 2025 -
High max 8.8
Siemens RUGGEDCOM APE1808
Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeasures for products whe…
first Apr 9, 2024 -
High max 8.2
Siemens ST7 ScadaConnect
Siemens has released a new version for ST7 ScadaConnect and recommends to update to the latest version.
-
High max 8.8
FXC AE1021/AE1021PE
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution on the device via NTP server settings.
-
High max 8.0
QNAP VioStor NVR
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution by exploiting NTP settings.
-
High max 8.8
Siemens Mendix Studio Pro
Mendix Studio Pro is vulnerable to an out of bounds write vulnerability in the integrated libwebp library (CVE-2023-4863), that could allow an attacker to execute code in the context of a victim user's system. Siemens has released updates for the affected pro…
-
High max 7.5
KNX Protocol
Successful exploitation of this vulnerability could cause users to lose access to their device, potentially with no way to reset the device.
-
High max 9.8
Hitachi Energy Lumada Asset Performance Management Prognostic Model Executor Service
Successful exploitation of these vulnerabilities could crash the Prognostic Model Executor and could allow remote code execution.
-
High max 7.8
Hitachi Energy APM Edge
Successful exploitation of this vulnerability could allow users to escalate privileges from a user account to root.
-
High max 7.8
Hitachi Energy TXpert Hub CoreTec 4 Sudo Vulnerability
Successful exploitation of this vulnerability could allow an attacker to take control of the system node and its information.
-
High max 7.8
Siemens SCALANCE LPE 4903 and SINUMERIK Edge
The products listed below contain a local privilege escalation vulnerability (CVE-2021-4034) found on polkit's pkexec utility, that could allow an unprivileged user to gain administrative rights. Siemens has released updates for the affected products and reco…
-
High max 7.8
Johnson Controls CEM Systems AC2000
Successful exploitation of this vulnerability could allow a local attacker to obtain super user access on the underlying Linux operating system.
-
High max 7.4
VISAM VBASE Editor
Successful exploitation of these vulnerabilities may allow un-neutralized user-controllable data input, disclosure of local files, access to NTLM (Windows New Technology LAN Manager) hashes, and access to sensitive files.
-
High max 7.8
Delta Electronics DOPSoft 2 (Update A)
Successful exploitation of these vulnerabilities may allow arbitrary code execution.
-
High max 7.8
Johnson Controls Sensormatic Electronics Illustra
Successful exploitation of this vulnerability could allow a local attacker to obtain super user access to the underlying Linux operating system.
-
High max 7.8
Johnson Controls Sensormatic Electronics VideoEdge
Under specific circumstances, a local authenticated user may be able to exploit this vulnerability to gain administrative access.
-
High max 7.8
Johnson Controls Sensormatic Tyco AI
Under specific circumstances, a local attacker could use this vulnerability to obtain super-user access to the underlying openSUSE Linux operating system.
-
High max 7.8
Johnson Controls Exacq Technologies exacqVision
A local attacker could exploit this vulnerability to obtain Super User access to the underlying Ubuntu Linux operating system.
-
High max 8.8
Baxter ExactaMix (Update A)
Successful exploitation of these vulnerabilities could result in unauthorized access to sensitive data, alteration of system configuration, alteration of system resources, and impact to system availability.
first Jun 18, 2020 -
High max 7.5
Rockwell Automation Allen-Bradley Stratix 5950
Successful exploitation of these vulnerabilities could allow an attacker to bypass client certification to create connections to the affected device or cause the device to crash.
-
High max 8.8
ICSA-18-107-05_Rockwell Automation Stratix Industrial Managed Ethernet Switch
Rockwell Automation reported these vulnerabilities to NCCIC from the semi-annual Cisco IOS and IOS XE Software Security Advisory Bundled Publication.
-
High max 8.8
Rockwell Automation Allen-Bradley Stratix and ArmorStratix
ATTENTION: Remotely exploitable/low skill level to exploit
first Jul 27, 2017