Skip to content
OpenAdvisories

Source

CISA ICS & IT advisories

Source: https://www.cisa.gov/news-events/cybersecurity-advisories

All Critical High Medium Low With exploited CVEs

13 results · Clear filters · Feed

  • Medium max 6.7
    ICSA-26-295-03 1 CVE 1 exploited rev. 4

    Siemens Software Center

    The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution …

    Siemens
    first Oct 15, 2026
  • Medium max 6.9
    ICSA-25-203-05 1 CVE 1 exploited

    Schneider Electric System Monitor Application

    Schneider Electric is aware of a vulnerability in its System Monitor application of Harmony Industrial PC and Pro-face PS5000 trusted Legacy industrial PC series products. The Harmony Industrial PC Series and Pro-face PS5000 legacy industrial PC Series are iP…

    Schneider Electric
  • Medium max 7.5
    ICSA-14-135-05 1 CVE 1 exploited rev. 2

    OpenSSL Vulnerability

    OpenSSL
    first Feb 15, 2014
  • Medium max 7.5
    ICSA-14-135-04 1 CVE 1 exploited rev. 2

    Unified Automation OPC SDK OpenSSL Vulnerability

    Unified Automation
    first Feb 15, 2014
  • Medium max 7.5
    ICSA-14-135-02 1 CVE 1 exploited rev. 2

    Schneider Electric Wonderware Intelligence Security Patch for OpenSSL Vulnerability

    Schneider Electric
    first Feb 15, 2014
  • Medium max 7.5
    ICSA-14-128-01 1 CVE 1 exploited rev. 2

    Digi International OpenSSL Vulnerability

    Digi International
    first Feb 8, 2014
  • Medium max 7.5
    ICSA-14-126-01A 1 CVE 1 exploited rev. 2

    ABB Relion 650 Series OpenSSL Vulnerability (Update A)

    ABB
    first Feb 6, 2014
  • Medium max 7.5
    ICSA-14-105-03B 1 CVE 1 exploited rev. 2

    Siemens Industrial Products OpenSSL Heartbleed Vulnerability (Update B)

    Siemens
    first Jan 16, 2014
  • Medium max 7.5
    ICSA-14-105-02A 1 CVE 1 exploited rev. 2

    Innominate mGuard OpenSSL HeartBleed Vulnerability

    Innominate
    first Jan 16, 2014
  • Medium max 7.5
    ICSA-14-114-01 1 CVE 1 exploited rev. 2

    Certec atvise scada OpenSSL Heartbleed Vulnerability

    Certec
    first Jan 25, 2014
  • Medium max 5.3
    VA-25-147-01 1 CVE 1 exploited

    Craft CMS stores user-provided content session files

    Craft CMS stores user-provided content in session files. A remote, unauthenticated attacker can introduce arbitrary content, including PHP code, into session files with known names and locations. If an attacker can access these files, possibly through another…

    Craft
  • Medium max 8.8
    ICSA-22-209-01 1 CVE 1 exploited

    Rockwell Products Impacted by Chromium Type Confusion

    Successful exploitation of this vulnerability could cause a denial-of-service condition.

    Rockwell Automation
  • Medium max 6.9
    ICSA-21-306-01 1 CVE 1 exploited

    Sensormatic Electronics VideoEdge

    Successful exploitation of this vulnerability could allow the execution of untrusted code when viewing the VideoEdge admin graphical user interface.

    Sensormatic Electronics, LLC, Johnson Controls