4,105 results · Feed
-
High max 7.8ICSA-25-317-16 2 CVEs
Siemens Altair Grid Engine
Altair Grid Engine contain multiple vulnerabilities that could allow an attacker to escalate privileges and execute arbitrary code with superuser permissions. Siemens has released a new version for Altair Grid Engine and recommends to update to the latest ver…
-
High max 7.8ICSA-25-317-17 1 CVE
Siemens Software Center and Solid Edge
Siemens Software Center and Solid Edge is affected by a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system. Siemens has released new versions for the affected products and recommend…
-
High max 8.8ICSA-25-310-01 4 CVEs
Advantech DeviceOn/iEdge
Successful exploitation of these vulnerabilities could result in a denial-of-service condition, remote code execution, or an attacker reading arbitrary files.
-
High max 8.8ICSA-25-310-03 4 CVEs
ABB FLXeon Controllers
Successful exploitation of these vulnerabilities could allow an attacker to take remote control of the product, insert and run arbitrary code, and crash the device being accessed.
-
Critical max 9.3ICSA-25-308-02 1 CVE
Survision License Plate Recognition Camera
Successful exploitation of this vulnerability could allow an attacker to fully access the system without requiring authentication.
-
High max 7.8ICSA-25-308-03 1 CVE
Delta Electronics CNCSoft-G2
Successful exploitation of this vulnerability could allow attackers to execute arbitrary code in the context of the current process.
-
Critical max 10.0ICSA-25-308-04 3 CVEs
Radiometrics VizAir
Successful exploitation of these vulnerabilities could allow attackers to manipulate critical weather parameters and runway settings, mislead air traffic control and pilots, extract sensitive meteorological data, and cause significant disruption to airport op…
-
High max 8.8ICSA-25-308-05 1 CVE
IDIS ICM Viewer
Successful exploitation of this vulnerability could result in an attacker executing arbitrary code.
-
Critical max 9.9VA-25-304-02 10 CVEs
Restaurant Brands International assistant platform multiple vulnerabilities
Restaurant Brands International assistant platform is used to manage restaurants owned by RBI. Multiple vulnerabilities were found in the assistant platform. The most severe vulnerabilities chained together could allow a remote, unauthenticated attacker to cr…
-
High max 8.8VA-25-304-01 3 CVEs
ELOG multiple vulnerabilities
ELOG (the Electronic Logbook package) contains multiple vulnerabilities. Regardless of configuration, low-privileged attackers can modify user profiles, escalate privileges, and deny access to ELOG. If the execute facility is specifically enabled with the "-x…
-
High max 8.7ICSA-25-303-02 3 CVEs
Hitachi Energy TropOS
Successful exploitation of these vulnerabilities could allow command injections and privilege escalation.
-
Medium max 6.0
Hitachi Energy Asset Suite (Update A)
Hitachi Energy is aware of a vulnerability that affects the Asset Suite product versions listed in this document. An authenticated user successfully exploiting this vulnerability can manipulate or forge malicious entries into the log file causing integrity im…
first Sep 30, 2025 -
High max 7.5ICSMA-25-301-01 2 CVEs
Vertikal Systems Hospital Manager Backend Services
Successful exploitation of these vulnerabilities could allow an attacker to obtain unauthorized access to and disclose sensitive information.
-
Medium max 6.8
Delta Electronics DIAScreen
Successful exploitation of these vulnerabilities could allow an attacker to write data outside of the allocated memory buffer.
first Oct 7, 2025 -
High max 8.5
Rockwell Automation FactoryTalk Linx
Successful exploitation of these vulnerabilities may allow full access to all files, processes, and system resources.
first Oct 16, 2025 -
Critical max 9.9
Rockwell Automation 1783-NATR
Successful exploitation of these vulnerabilities could result in a denial-of-service, data modification, or in an attacker obtaining sensitive information.
first Oct 21, 2025 -
High max 8.7
Rockwell Automation Compact GuardLogix 5370
Successful exploitation of this vulnerability could result in a denial-of-service.
first Oct 21, 2025 -
Critical max 10.0ICSA-25-296-01 9 CVEs
AutomationDirect Productivity Suite
Successful exploitation of these vulnerabilities could enable an attacker to execute arbitrary code, disclose information, gain full-control access to projects, or obtain read and write access to files.
-
Critical max 10.0ICSA-25-296-02 1 CVE
ASKI Energy ALS-Mini-S8 and ALS-Mini-S4
Successful exploitation of this vulnerability could allow an attacker to gain full control over the device.
-
Critical max 9.9ICSA-25-296-03 2 CVEs
Veeder-Root TLS4B Automatic Tank Gauge System
Successful exploitation of these vulnerabilities could allow attackers to execute system-level commands, gain full shell access, achieve remote command execution, move laterally within the network, trigger a denial of service condition, cause administrative l…
-
High max 7.8ICSA-25-296-04 2 CVEs
Delta Electronics ASDA-Soft
Successful exploitation of these vulnerabilities could allow an attacker to write data outside of the allocated memory buffer.
-
High max 7.5ICSMA-25-296-01 1 CVE
NIHON KOHDEN Central Monitor CNS-6201
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.
-
Medium max 5.3VA-25-296-01 1 CVE
Frontier Airlines website publicly available email address validation
The Frontier Airlines website has a publicly available endpoint that validates if an email addresses is associated with an account. An unauthenticated, remote attacker could determine valid email addresses, possibly aiding in further attacks.
-
Medium max 5.4
Schneider Electric Modicon Controllers (Update A)
Successful exploitation of this vulnerability could allow an attacker to cause a victim's browser to run arbitrary JavaScript when visiting a page containing injected payload.
first Dec 19, 2024 -
High max 8.7ICSA-25-294-05 1 CVE
CloudEdge Online Cameras and App
Successful exploitation of this vulnerability could allow an attacker to gain access to live video feed and camera control.
-
Critical max 9.3ICSA-25-294-06 1 CVE
Raisecomm RAX701-GC Series
Successful exploitation of this vulnerability could allow a remote attacker to bypass authentication and gain unauthenticated root shell access to the affected devices.
-
High max 8.6ICSMA-25-294-01 3 CVEs
Oxford Nanopore Technologies MinKNOW
Successful exploitation of these vulnerabilities could allow an attacker to disrupt sequencing operations and processes, exfiltrate and manipulate data, and bypass authentication controls.
-
Critical max 9.8VA-25-289-01 1 CVE
OPEXUS FOIAXpress unauthenticated administrator password reset
OPEXUS FOIAXpress allows a remote, unauthenticated attacker to reset the administrator password and gain full administrative access to a vulnerable system.
-
High max 7.8
Delta Electronics CNCSoft-G2 DOPSoft (Update A)
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.
first Apr 30, 2024 -
High max 8.7ICSA-25-289-01 2 CVEs
Rockwell Automation FactoryTalk View Machine Edition and PanelView Plus 7
Successful exploitation of these vulnerabilities could allow an unauthenticated attacker to access to the device's file system.
-
High max 8.7ICSA-25-289-03 1 CVE
Rockwell Automation FactoryTalk ViewPoint
Successful exploitation of this vulnerability could allow unauthenticated attackers to achieve XML external entity injection, resulting in a temporary denial-of-service condition.
-
High max 8.7ICSA-25-289-04 1 CVE
Rockwell Automation ArmorStart AOP
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition on the affected product.
-
Critical max 9.8
Schneider Electric Modicon
Schneider Electric is aware of a vulnerability in its Modicon M241 / M251 / M258 https://www.se.com/ww/en/product-category/3900-plc-pac-and-dedicated-controllers/ and Modicon LMC058 https://www.se.com/ww/en/product-range/7744-modicon-lmc058/ products. The Mod…
first Dec 10, 2024 -
High max 7.5
Schneider Electric Modicon Controllers (Update B)
Schneider Electric is aware of a vulnerability in its Modicon Controllers M241 / M251 / M258 / LMC058 products. The Modicon Controllers M241/M251/M258 https://www.se.com/ww/en/product-category/3900-plc-pac-and-dedicated-controllers/ and Modicon LMC058 https:/…
first May 13, 2025 -
High max 8.2ICSA-25-301-01 1 CVE
Schneider Electric EcoStruxure
Schneider Electric is aware of a vulnerability in its EcoStruxure OPC UA Server Expert product(s). The [EcoStruxure OPC UA Server Expert product(s)](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=66388#overview) is a state-…
-
High max 7.7ICSA-25-287-01 2 CVEs
Rockwell Automation 1715 EtherNet/IP Comms Module
Successful exploitation of these vulnerabilities could allow an attacker to cause the web server to crash, requiring a restart to recover.
-
High max 7.5
Siemens SIMATIC S7-1200 CPU V1/V2 Devices
SIMATIC S7-1200 CPU V1/V2 controllers contain two vulnerabilities that could allow an unauthenticated remote attacker - to trigger functions by record and playback of legitimate network communication, or - to place the controller in stop/defect state by causi…
first Jun 10, 2011 -
Critical max 9.8
Siemens User Management Component (UMC)
Siemens User Management Component (UMC) is affected by a heap-based buffer overflow vulnerability which could allow an unauthenticated remote attacker arbitrary code execution. Siemens has released new versions for several affected products and recommends to …
first Sep 10, 2024 -
Medium max 4.7
Siemens SIMATIC S7-1500 and S7-1200 CPUs
Several SIMATIC S7-1500 and S7-1200 CPU versions are affected by an open redirect vulnerability that could allow an attacker to make the web server of affected devices redirect a legitimate user to an attacker-chosen URL. For a successful attack, the legitima…
first Oct 8, 2024 -
Medium max 5.3
Siemens SIMATIC S7-1500 CPUs
Several SIMATIC S7-1500 CPU versions are affected by an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain knowledge about actual and configured maximum cycle times and communication load of the CPU. Siemens has re…
first Oct 8, 2024