4,097 results · Feed
-
High max 8.3
Red Lion Controls N-Tron 700 Series - Update A
Successful exploitation of these vulnerabilities could allow a malicious user to access the device and gain administrative access. This access would allow the user to view, edit, and upload configuration files. Further, a malicious user can cause the switch t…
first Oct 8, 2026 -
High max 9.1ICSA-26-288-01 6 CVEs
Eclipse Foundation Eclipse Milo
Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients.
-
Critical max 9.8ICSA-26-288-02 3 CVEs
Guangzhou Juan IoT Technology EseeCloud
Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras.
-
Medium max 6.5ICSMA-26-288-01 1 CVE
Thermo Fisher Torrent Suite Software
Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the Torrent Server.
-
Critical max 9.1ICSMA-26-288-02 6 CVEs
J4Care dcm4che
Successful exploitation of these vulnerabilities could allow an attacker to delete stored medical images, disclose patient information, inject forged studies, reassign patient records, overwrite files, and cause a denial-of-service condition.
-
High max 8.8ICSA-26-286-01 1 CVE
Inductive Automation Ignition Software
Successful exploitation of this vulnerability could allow an authenticated low-level user to escalate their privileges to a higher level.
-
Medium max 6.2ICSA-26-286-02 3 CVEs
Swann Communications SWIFI-SE2KIC
Successful exploitation of these vulnerabilities could allow an attacker to view video information without authentication.
-
High max 9.8
Hitachi Energy RTU500 Series
Hitachi Energy is aware of multiple vulnerabilities that affect the RTU500 versions that are listed below. An attacker successfully exploiting these vulnerabilities could potentially cause Denial of Service (DoS) impact on RTU500. Please refer to the Recommen…
first Sep 9, 2025 -
Critical max 9.8
Lantronix EDS3000PS and EDS5000 (Update B)
Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication and execute code with root-level privileges.
first Mar 10, 2026 -
High max 8.1
Pulsetto Vagus Nerve Stimulator (Update A)
Successful exploitation of this vulnerability could allow an attacker to use could use undocumented commands to modify certain stimulation settings.
first Aug 11, 2026 -
Critical max 9.8
-
High max 8.8ICSA-26-281-03 4 CVEs
Satel Netco Design
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary scripts in a user's browser, consume excessive system resources, enumerate files, create or modify files, and potentially execute arbitrary code.
-
High max 8.5
Hitachi Energy Asset Suite
Hitachi Energy is aware of unauthenticated servlet access vulnerabilities that affect Asset Suite product versions listed in this document. These vulnerabilities can be exploited to potentially cause confidentiality, integrity and availability impact on the p…
first Sep 29, 2026 -
High max 8.8
Hitachi Energy SOI
Hitachi Energy is aware of RCE (Remote Code Execution) vulnerability in Apache ActiveMQ component of SOI product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks affecting confidentiality, integrity, and av…
first Sep 29, 2026 -
Medium max 7.5
Hitachi Energy REB500
Hitachi Energy is aware of open-source software vulnerabilities that affect REB500 product versions listed in this document. These vulnerabilities can be exploited to carry out Denial of Service (DoS) attack on the product. Please refer to the Recommended Imm…
first Sep 29, 2026 -
Critical max 10.0
Hitachi Energy RTU500
Hitachi Energy is publishing this cybersecurity advisory in response to the security findings reported by Dragos affecting end-of-life RTU500 CMU firmware version 9.x. The reported findings are associated with legacy RTU500 firmware versions that were develop…
first Sep 29, 2026 -
High max 5.6ICSA-26-279-01 2 CVEs
Johnson Controls EasyIO FG
Successful exploitation of these vulnerabilities could allow an attacker to gain full unauthorized access to the device.
-
Critical max 9.8ICSA-26-279-02 1 CVE
Savannah lwIP SMTP client
Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution.
-
High max 7.0VA-26-278-01 1 CVE
Canimaan Software ClamXAV local privilege escalation
ClamXAV contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and insufficient file validation, allowing a local attacker to execute arbitrary code with system privileges.
-
High max 7.3VA-26-275-01 2 CVEs
Newell Brands DYMO ID multiple vulnerabilities
Newell Brands DYMO ID contains two vulnerabilities that could capture NTLMv2 credentials or code execution at a victim's privilege level after clicking on a crafted job file.
-
Critical max 9.3VA-26-275-05 1 CVE
Cadmos LTI
The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled (APP_DEBUG=true, APP_ENV=local) in a publicly accessible environment. An unauthenticated attacker could send a GET request and trigger an unhandled exception, causing Larave…
-
Medium max 6.5VA-26-275-02 2 CVEs
C-Open CANopen stack multiple vulnerabilities
RT-Labs AB C-Open CANopen contains a NULL pointer dereference and a write protection bypass vulnerability. These vulnerabilities can potentially crash the device or allow any CANopen node to overwrite read-only OD entries using two SDO frames.
-
Medium max 6.5VA-26-275-04 1 CVE
wormhole.app WebRTC TURN relay
Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay peers, allowing an unauthenticated attacker to access instance metadata or to source TCP connections from the Wormhole relay's IP.
-
High max 8.8first Sep 11, 2026
-
Critical max 10.0
Armatura LLC Armatura One
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to the database, execute arbitrary code on the host with the highest level of privilege, or gain control of the physical access-control system.
-
Critical max 9.4ICSA-26-274-02 4 CVEs
Monta monta.app
Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks.
-
Medium max 6.4ICSA-26-274-03 2 CVEs
ABB Protection and Control IED Manager PCM600
Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges or overwrite files.
-
Low max 6.3ICSA-26-274-04 1 CVE
Johnson Controls EasyIO Neo Series EC and CW Controllers
Successful exploitation of this vulnerability could allow an attacker to gain access to sensitive information that could be used to conduct further attacks against the system.
-
Medium max 7.3ICSA-26-274-05 1 CVE
Johnson Controls EasyIO Neo Series EC and CW Controllers
Successful exploitation of this vulnerability could allow an attacker tointercept and read sensitive information, including credentials andsession data.
-
Critical max 9.8
-
Critical max 9.8
MikroTik RouterOS
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution or cause a denial of service.
first Sep 29, 2026 -
Medium max 6.1
Siemens Mendix Studio Pro
Mendix Studio Pro contains a vulnerability in the module installation process, that could allow an attacker to write or modify arbitrary files in directories outside a developer’s project directory. Siemens has released new versions for the affected products …
first Jun 12, 2025 -
High max 7.5ICSA-26-272-01 2 CVEs
Lantronix G520 Series Cellular Gateway
Successful exploitation of these vulnerabilities could allow an attacker to replace software and execute arbitrary code with root privileges.
-
Critical max 10.0ICSA-26-272-02 10 CVEs
Toptech TMS7 and TopHAT
Successful exploitation of these vulnerabilities could allow an attacker to access critical data or execute arbitrary code.
-
Critical max 9.3ICSA-26-272-03 1 CVE
VIVOTEK Camera Firmware
Successful exploitation of this vulnerability may allow attackers to achieve remote command execution on affected devices, potentially with root privileges, leading to full compromise of the camera system.
-
High max 7.4ICSA-26-272-04 1 CVE
Baicells Nova 430H
Successful exploitation of this vulnerability could allow an attacker to inject malformed messages which may lead to a denial-of-service condition.
-
Critical max 9.8ICSA-26-272-05 9 CVEs
Anjvision YSSD-RTMP-H5
Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information, access user accounts, execute OS-level commands, or take full control over the device.
-
Critical max 10.0ICSA-26-272-07 2 CVEs
Viidure Dashcam Android Application
Successful exploitation of these vulnerabilities could allow attackers to access, modify, or delete sensitive user data and critical system files, potentially compromising the operation of the entire platform.
-
Medium max 5.5VA-26-267-01 1 CVE
Araxis Merge
Araxis Merge for Windows version 2011.4074 through 2026.0 stores user-configured credentials for remote servers in the Windows registry and does not apply sufficient cryptographic protection. An authenticated, non-administrative user could retrieve and unencr…
-
Unscored max 9.1
Siemens Mendix Runtime
This advisory is revoked. Re-investigation confirmed the reported behavior is expected platform configuration and does not expose the protected attribute.
first Jul 14, 2026