1,943 results · Clear filters · Feed
-
High max 9.1
Wärtsilä FOS-Onboard (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to deliver an unauthorized update, execute code, or extract credentials to allow the attacker to impersonate a privileged client.
first Sep 15, 2026 -
High max 8.8ICSA-26-267-01 14 CVEs
Botslab G980H Dashcams
Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication controls, gain unauthorized access to sensitive data and privileged device functionality, modify device configuration, disrupt device operation.
-
High max 7.2
Plex Media Server
Plex Media Server before 1.43.3.10861 contains multiple vulnerabilities. In the worst case, a remote attacker could steal a legitimate user's account credentials and eventually write arbitrary files or execute code.
-
High max 7.8
Siemens SIPLUS and SIMATIC Products
Multiple Siemens products are vulnerable to the "Copy Fail" vulnerability. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific count…
first Sep 8, 2026 -
High max 8.2
Siemens Desigo CC family
A Client Code Execution (CCE) vulnerability has been identified in Desigo CC, potentially allowing malicious actors to execute arbitrary code on client devices through specially crafted graphics documents. This vulnerability leverages user-defined graphics co…
first Sep 8, 2026 -
High max 8.6
Siemens SIMOVE Fleetmanager and SIPLANT
SIMOVE Fleetmanager and SIPLANT contain a path traversal vulnerability that could allow an attacker to access files outside of intended scope. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Sep 8, 2026 -
High max 8.8ICSA-26-265-02 1 CVE
lwIP (Lightweight IP)
Successful exploitation of this vulnerability could result in a system crash, a DoS, or memory corruption, which could lead to code execution on the victim system.
-
High max 7.5
Schneider Electric Modicon M340 Controller and Communication Modules
Schneider Electric is aware of a vulnerability in its Modicon M340 https://www.se.com/ww/en/product-range/1468-modicon-m340-pac/, BMXNOR0200H https://www.se.com/us/en/product/BMXNOR0200H/communication-module-modicon-m340-iec-608705101-104-dnp3-for-severe-envi…
first Aug 12, 2025 -
High max 7.8
ABB Ability Edgenius
ABB is aware of public reports of a vulnerability CVE‑2026‑31431 (Copy Fail) in the product versions listed as affected in the advisory. An update is available that resolves a publicly reported vulnerability. CVE‑2026‑31431 (Copy Fail) is a Linux kernel vulne…
first Jun 25, 2026 -
High max 9.2
Mitsubishi Electric GX Works3 and Motion Control Settings
Successful exploitation of this vulnerability could allow a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modify part of the executable module in memory, and thereby allows the attacker t…
-
High max 7.5ICSA-26-260-01 3 CVEs
Bransys ELD
Successful exploitation of these vulnerabilities could allow unauthorized access to telemetry data and firmware.
-
High max 8.2
Siemens SIMATIC IPC Family, ITP1000, and Field PGs
Multiple vulnerabilities has been identified in Siemens SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs that can allow an authenticated attacker to alter the secure boot and password configurations. Siemens has released new versions of BIOS for severa…
first Mar 11, 2025 -
High max 7.8
Siemens SCALANCE LPE9403
SCALANCE LPE9403 is affected by multiple vulnerabilities which lead to a compromise in availability, integrity and confidentiality. Siemens has released a new version for SCALANCE LPE9403 and recommends to update to the latest version. Siemens recommends spec…
first May 13, 2025 -
High max 8.2
Siemens IAM Client
WIBU Systems published information about a privilege escalation vulnerability under a certain circumstances and associated fix releases of CodeMeter Runtime, a product provided by WIBU Systems and used in several Siemens industrial products. Siemens has relea…
first Aug 12, 2025 -
High max 7.8
Siemens Web Installer
The installers used to install several Siemens products are affected by a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected installer component. This vulne…
first Aug 12, 2025 -
High max 8.8
Siemens Products using OpenSSL
OpenSSL has published a stack based buffer overflow vulnerability that allows a remote attacker to cause a denial of service (DoS) or potentially allow for remote code execution. Siemens has released new versions for several affected products and recommends t…
first Jun 9, 2026 -
High max 7.2
Siemens SICAM 8
Multiple SICAM 8 products are affected by multiple vulnerabilities that could lead to denial of service, namely: - SICAM A8000 Device firmware - CPCI85 for CP-8031/CP-8050 - SICORE for CP-8010/CP-8012 - SICAM EGS Device firmware - CPCI85 - SICAM S8000 - SICOR…
first Jul 9, 2026 -
High max 9.8ICSA-26-258-08 7 CVEs
CareCam CM2507
Successful exploitation of these vulnerabilities could allow an attacker to access live video and sensitive device information, enable unauthorized services, execute arbitrary code, modify device operation, and recover stored credentials.
-
High max 8.8
ST Engineering iDirect iQ-Series Terminals (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to device information or cause a denial-of-service condition.
first Jul 2, 2026 -
High max 8.4ICSA-26-253-01 4 CVEs
AVEVA Pipeline Integrity Monitor
Successful exploitation of these vulnerabilities could allow an attacker to disclose information, brute-force hashes, or run arbitrary code in a browser session.
-
High max 8.3ICSMA-26-253-01 3 CVEs
NextGen Healthcare Mirth Connect
Successful exploitation of these vulnerabilities could allow an attacker to exfiltrate date or cause a denial-of-service condition.
-
High max 8.1ICSMA-26-253-02 1 CVE
Orthanc DICOM Server
Successful exploitation of this vulnerability could allow an authenticated remote attacker to write past the end of a heap allocation when Orthanc decodes an attacker-supplied PNG or JPEG image, resulting in a crash of the Orthanc process and a denial-of-serv…
-
High max 8.6
Rockwell Automation Historian ME
Successful exploitation of these vulnerabilities could crash the device being accessed; an out-of-bounds write condition may allow remote code execution.
first Sep 1, 2026 -
High max 7.1VA-26-251-02 1 CVE
Waves Central local privilege escalation via Improper XPC Client Authentication in macOS
Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller's code-signing certificate chain for equality with its own, rather than validating the caller …
-
High max 7.1VA-26-251-01 1 CVE
Maono Link local privilege escalation
Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\ProgramData\Maono'.
-
High max 8.7
Schneider Electric Easergy, EcoStruxture, PowerLogic, and Saitel Products (Update A)
Schneider Electric is aware of a vulnerability in the following products: The Easergy C5 is a scalable and interoperable bay controller, protection and merging unit for large and critical infrastructure electrical distribution systems. The Easergy MiCOM P30 i…
first May 12, 2026 -
High max 7.0ICSA-26-246-03 1 CVE
Rockwell Automation ControlFLASH
Successful exploitation of this vulnerability could give an attacker the ability to run any commands or code of the attacker's choice on a target machine at the logged-in user's permission level.
-
High max 8.7ICSA-26-246-04 2 CVEs
Rockwell Automation ArmorStart LT
Successful exploitation of these vulnerabilities could result in a loss of webserver availability or allow an attacker to inject malicious scripts that will be executed when other users access the affected page.
-
HighICSA-26-246-05 0 CVEs
Rockwell Automation 1756-ENBT Module
Successful exploitation of this vulnerability could crash the module. The device requires a restart to recover.
-
High max 8.8ICSA-26-246-06 1 CVE
Inductive Automation Ignition
Successful exploitation of this vulnerability could allow any authenticated user to create projects.
-
High max 8.8ICSA-26-246-08 3 CVEs
Tycon Systems TPDIN-Monitor-WEB3
Successful exploitation of these vulnerabilities could allow for an attacker to perform a man-in-the-middle (MitM) attack, cause a factory reset, wipe credentials, or retrieve sensitive information.
-
High max 9.2ICSA-26-244-01 4 CVEs
Rockwell Automation RSLinx Classic
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition on the affected product.
-
High max 7.0ICSA-26-244-02 2 CVEs
Rockwell Automation Redundancy Module Configuration Tool
Successful exploitation of these vulnerabilities could allow for an attacker to escalate and execute processes with administrator privileges.
-
High max 8.7
-
High max 8.5
-
HighICSA-26-244-05 1 CVE
Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix
-
High max 7.1
Redis TLS pending-data list use-after-free
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the pri…
first Aug 27, 2026 -
High max 7.5
Mitsubishi Electric Multiple FA Products (Update D)
Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of-service (DoS) condition, a timeout error, or a communication delay by sending a specially crafted UDP packet to the product.
first Apr 25, 2025 -
High max 8.7
All-Line Equipment Company Fuel-Boss
Successful exploitation of these vulnerabilities could allow attackers to execute arbitrary commands or code remotely on affected systems.
-
High max 8.2VA-26-238-01 4 CVEs
ComfyUI stored XSS and path traversal vulnerabilities
ComfyUI contains multiple vulnerabilities, with the most severe impact being that a remote, unauthenticated attacker could read image-decodable files and probe arbitrary host paths.