74 results · Clear filters · Feed
-
Low max 6.3ICSA-26-274-04 1 CVE
Johnson Controls EasyIO Neo Series EC and CW Controllers
Successful exploitation of this vulnerability could allow an attacker to gain access to sensitive information that could be used to conduct further attacks against the system.
-
Low max 6.3
Rockwell Automation 1734 POINT I/O (Update A)
Successful exploitation of this vulnerability could allow for an attacker to cause a denial-of-service condition on the product.
first Jul 21, 2026 -
Low max 4.8ICSA-26-211-02 3 CVEs
Johnson Controls OpenBlue Employee
Successful exploitation of these vulnerabilities could allow an attacker to upload malicious files, execute stored cross-site scripting attacks, or inject arbitrary HTML content.
-
Low max 4.8ICSA-26-204-02 1 CVE
Johnson Controls XAAP Android
Successful exploitation of this vulnerability could result in an attacker obtaining confidential information from the device.
-
Low max 3.7
Siemens SCALANCE M-800 and SC-600 Families
SCALANCE M-800 and SC-600 families are affected by improper input validation in the OpenVPN authentication. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Mar 11, 2025 -
Low max 3.7
Siemens Analytics Toolkit
Multiple Siemens applications are affected by improper certificate validation in Siemens Analytics Toolkit. This could allow an unauthenticated remote attacker to perform man in the middle attacks. Siemens has released new versions for the affected products a…
first Apr 14, 2026 -
Low max 2.2
Siemens Mendix OIDC SSO
The Mendix OIDC SSO module grants read and write access to all tokens exclusively to the Administrator role and could result in privilege misuse by an adversary modifying the module during Mendix development. Siemens has released new versions for several affe…
first May 13, 2025 -
Low max 2.6
Siemens Heliox EV Chargers
Heliox EV Chargers listed below contain improper access control vulnerability that could allow an attacker to reach unauthorized services via the charging cable. Siemens has released new versions for the affected products and recommends to update to the lates…
first Mar 10, 2026 -
Low max 7.4VA-25-273-01 2 CVEs
Microsoft Windows inconsistent driver blocking
Microsoft Windows Defender Application Control (WDAC) and the Microsoft vulnerable driver blocklist do not adequately block known-vulnerable drivers. These unexpected behaviors can confuse users about whether or not driver blocking is working and which driver…
-
Low max 3.1VA-25-258-01 1 CVE
psPAS does not enforce TLS 1.2 within Get-PASSAMLResponse
psPAS is a PowerShell module for the CyberArk API. psPAS does not explicitly enforce TLS 1.2 when using the 'Get-PASSAMLResponse' function. An unauthenticated attacker in a 'Man-in-the-Middle' position could manipulate the TLS handshake and downgrade TLS to a…
-
Low max 3.1ICSA-25-254-04 2 CVEs
Siemens SINEC OS
SINEC OS is affected by multiple vulnerabilities due to open UDP ports, which could allow an attacker to access non-sensitive information without authentication or potentially cause temporary denial of service. Siemens is preparing fix versions and recommends…
-
Low max 2.4ICSA-25-226-10 1 CVE
Siemens SIPROTEC 5
Affected SIPROTEC 5 devices do not properly limit the bandwidth for incoming network packets over their local USB port. This could allow an attacker with physical access to send specially crafted packets with high bandwidth to the affected devices thus forcin…
-
Lowfirst Apr 23, 2015
-
Low max 5.5
IBM Security Guardium stored cross-site scripting
IBM Security Guardium 11.5 before patch 11.0p565 is vulnerable to stored cross-site scripting (XSS). An attacker with administrative privileges could store arbitrary content or script in the administrative web interface that would be rendered or executed by u…
first May 16, 2025 -
Low
Siemens RuggedCom Uncontrolled Resource Consumption Vulnerability (Update B)
first Nov 23, 2014 -
Low
Siemens SICAM PAS Information Disclosure Vulnerabilities (Update B)
first Apr 3, 2016 -
Low
Siemens SIMATIC WinCC Flexible Weakly Protected Credentials Vulnerability
first Mar 13, 2016 -
Lowfirst Oct 11, 2015
-
Lowfirst Sep 11, 2014
-
Lowfirst Dec 11, 2015
-
Lowfirst Nov 20, 2015
-
Lowfirst Nov 20, 2015
-
Lowfirst Nov 8, 2015
-
Lowfirst Nov 1, 2015
-
Lowfirst Oct 30, 2015
-
Lowfirst Oct 15, 2015
-
Lowfirst Oct 15, 2015
-
Lowfirst Oct 15, 2015
-
Lowfirst Oct 15, 2015
-
Lowfirst Mar 28, 2015
-
Lowfirst Jun 6, 2015
-
Lowfirst May 28, 2015
-
Low max 2.6first Oct 15, 2013
-
Low
Honeywell Experion PKS Improper Input Validation Vulnerability
first Jul 31, 2016 -
Low
Siemens SIMATIC STEP 7 (TIA Portal) Information Disclosure Vulnerabilities
first Jul 17, 2016 -
Low
Siemens APOGEE Insight Incorrect File Permissions Vulnerability (Update A)
first Dec 24, 2016 -
Low
Siemens SIMATIC Products (Update C)
A message integrity protection bypass vulnerability has been identified in several SIMATIC products. The vulnerability could allow an attacker in a Man-in-the-Middle position to modify network traffic exchanged on port 102/tcp to PLCs of the SIMATIC S7-1200, …
first Dec 10, 2019 -
Low
Siemens Simcenter Femap
Siemens Simcenter Femap is affected by a vulnerability that could be triggered when the application reads modfem files. If a user is tricked to open a malicious file with the affected application, an attacker could leverage this vulnerability to leak informat…
first Sep 14, 2021 -
Low
Siemens NX JT Translator
Siemens NX is affected by two vulnerabilities that could be triggered when the application reads JT files. If a user is tricked to open a malicious file with the affected application, this could lead to an access violation, and potentially also to arbitrary c…
first Nov 9, 2021 -
Low
Siemens SICAM PQ Analyzer
SICAM PQ Analyzer uses an unquoted registry entry and is thus vulnerable to an unquoted search path vulnerability. Siemens has released an update for the SICAM PQ Analyzer and recommends to update to the latest version.
first Jan 11, 2022