Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
167 results · page 2 of 4
May 21, 2024In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Prevent state corruption in __fpu__restore_sig() The non-compacted slowpath uses CVE-2021-47227 · Computers, phones & browsers · Linux · reported by 416baaa9-dc9f-4396-8d5f-8c081fb06d67Medium 5.5
In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Prevent state corruption in __fpu__restore_sig() The non-compacted slowpath uses __copy_from_user() and copies the entire user buffer into the kernel buffer, verbatim. This means that the kernel buffer may now contain entirely invalid state on which XRSTOR will #GP. validate_user_xstate_header() can detect some of that corruption, but that leaves the onus on callers to clear the buffer. Prior to XSAVES support, it was possible just to reinitialize the buffer, completely, but with supervisor states that is not longer possible as the buffer clearing code split got it backwards. Fixing that is possible but not corrupting the state in the first place is more robust. Avoid corruption of the kernel XSAVE buffer by using copy_user_to_xstate() which validates the XSAVE header contents before copying the actual states to the kernel. copy_user_to_xstate() was previously only called for compacted-format kernel buffers, but it works for both compacted and non-compacted forms. Using it for the non-compacted form is slower because of multiple __copy_from_user() operations, but that cost is less important than robu
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgit.kernel.orggit.kernel.org
May 14, 2024HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VM_memcpyvv in H5VM.c (called from H5D__compact_readvv in H5Dcompact.c).CVE-2024-32605 · Other software · hdfgroup · reported by MITREHigh 8.8
HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VM_memcpyvv in H5VM.c (called from H5D__compact_readvv in H5Dcompact.c).
- Product
- hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordhdfgroup.orghdfgroup.org
Apr 18, 2024Electrolink transmitters store credentials in clear-text.CVE-2024-3742 · Other software · Electrolink · reported by ics-cert@hq.dhs.govHigh 8.7
Electrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the system.
- Product
- Compact DAB Transmitter
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 18, 2024The application suffers from a privilege escalation vulnerability.CVE-2024-22186 · Other software · Electrolink · reported by ics-cert@hq.dhs.govHigh 8.7
The application suffers from a privilege escalation vulnerability. An attacker logged in as guest can escalate his privileges by poisoning the cookie to become administrator.
- Product
- Compact DAB Transmitter
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 18, 2024The device allows an unauthenticated attacker to bypass authentication and modify the cookie to reveal hidden pages that allows more critical operations to thCVE-2024-21872 · Other software · Electrolink · reported by ics-cert@hq.dhs.govHigh 8.7
The device allows an unauthenticated attacker to bypass authentication and modify the cookie to reveal hidden pages that allows more critical operations to the transmitter.
- Product
- Compact DAB Transmitter
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 18, 2024An unauthenticated attacker can reset the board and stop transmitter operations by sending a specially-crafted GET request to the command.cgi gateway, resultiCVE-2024-21846 · Other software · Electrolink · reported by ics-cert@hq.dhs.govMedium 6.9
An unauthenticated attacker can reset the board and stop transmitter operations by sending a specially-crafted GET request to the command.cgi gateway, resulting in a denial-of-service scenario.
- Product
- Compact DAB Transmitter
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 18, 2024The devices allow access to an unprotected endpoint that allows MPFS file system binary image upload without authentication.CVE-2024-1491 · Other software · Electrolink · reported by ics-cert@hq.dhs.govHigh 8.7
The devices allow access to an unprotected endpoint that allows MPFS file system binary image upload without authentication. The MPFS2 file system module provides a light-weight read-only file system that can be stored in external EEPROM, external serial flash, or internal flash program memory. This file system serves as the basis for the HTTP2 web server module, but is also used by the SNMP module and is available to other applications that require basic read-only storage capabilities. This can be exploited to overwrite the flash program memory that holds the web server's main interfaces and execute arbitrary code.
- Product
- Compact DAB Transmitter
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 18, 2024Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie.CVE-2024-3741 · Other software · Electrolink · reported by ics-cert@hq.dhs.govHigh 8.7
Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie. An attacker can set an arbitrary value except 'NO' to the login cookie and have full system access.
- Product
- Compact DAB Transmitter
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 18, 2024The application is vulnerable to an unauthenticated parameter manipulation that allows an attacker to set the credentials to blank giving her access to the adCVE-2024-22179 · Other software · Electrolink · reported by ics-cert@hq.dhs.govHigh 8.7
The application is vulnerable to an unauthenticated parameter manipulation that allows an attacker to set the credentials to blank giving her access to the admin panel. Also vulnerable to account takeover and arbitrary password change.
- Product
- Compact DAB Transmitter
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 27, 2024Compact WP Audio Player: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2024-29917 · WordPress plugins & themes · reported by PatchstackMedium 6.5
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Compact WP Audio Player allows Stored XSS.This issue affects Compact WP Audio Player: from n/a through 1.9.9.
- Product
- Compact WP Audio Player
- Affected
- up to 1.9.9
- What to do
- Affects up to 1.9.9. Update Compact WP Audio Player to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Nov 20, 2023Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin userCVE-2023-3379 · Other software · WAGO · reported by info@cert.vde.comMedium 5.3
Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to escalate non-root privileges.
- Product
- Compact Controller 100 (751-9301)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.vde.comcert.vde.com
Nov 17, 2023joaquimserafim/json-web-token is a javascript library use to interact with JSON Web Tokens (JWT) which are a compact URL-safe means of representing claims to beCVE-2023-48238 · Other software · joaquimserafim · reported by GitHubHigh 7.5
joaquimserafim/json-web-token is a javascript library use to interact with JSON Web Tokens (JWT) which are a compact URL-safe means of representing claims to be transferred between two parties. Versions prior to 4.0.0 are vulnerable to a JWT algorithm confusion attack. On line 86 of the 'index.js' file, the algorithm to use for verifying the signature of the JWT token is taken from the JWT token, which at that point is still unverified and thus shouldn't be trusted. To exploit this vulnerability, an attacker needs to craft a malicious JWT token containing the HS256 algorithm, signed with the public RSA key of the victim application. This attack will only work against this library is the RS256 algorithm is in use, however it is a best practice to use that algorithm. Version 4.0.0 fixes the issue.
- Product
- json-web-token
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 1, 2023GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in gf_isom_use_compact_size gpac/src/isomedia/isom_write.c:3403:3 in gpac/MP4Box.CVE-2023-46927 · Other software · gpac · reported by MITREMedium 5.5
GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in gf_isom_use_compact_size gpac/src/isomedia/isom_write.c:3403:3 in gpac/MP4Box.
- Product
- gpac
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 27, 2023An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component.CVE-2023-46509 · Other software · contec · reported by MITRECritical 9.8
An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component.
- Product
- solarview_compact
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comgist.github.com
Oct 17, 2023On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local filCVE-2023-4089 · Other software · WAGO · reported by info@cert.vde.comLow 2.7
On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected.
- Product
- Compact Controller CC100
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.vde.comcert.vde.com
Sep 8, 2023SolarView Compact < 6.00 is vulnerable to Directory Traversal.CVE-2023-40924 · Other software · solar_view · reported by MITREHigh 7.5
SolarView Compact < 6.00 is vulnerable to Directory Traversal.
- Product
- compact
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comnvd.nist.gov
Jul 13, 2023Duktape is an 3rd-party embeddable JavaScript engine, with a focus on portability and compact footprint.CVE-2023-29458 · Other software · Zabbix · reported by security@zabbix.comMedium 5.9
Duktape is an 3rd-party embeddable JavaScript engine, with a focus on portability and compact footprint. When adding too many values in valstack JavaScript will crash. This issue occurs due to bug in Duktape 2.6 which is an 3rd-party solution that we use.
- Product
- Zabbix
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.zabbix.comlists.debian.org
Jun 30, 2023Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser.CVE-2023-35177 · Other software · HP Inc. · reported by hp-security-alert@hp.comHigh 8.8
Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser.
- Product
- HP LaserJet Pro
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hp.comsupport.hp.com
Jun 2, 2023Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced.CVE-2023-29535 · Computers, phones & browsers · Mozilla · reported by security@mozilla.orgMedium 6.5
Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. This resulted in memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.
- Product
- Firefox
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugzilla.mozilla.orgmozilla.org
May 22, 2023Improper access control vulnerability in the system date/time setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versioCVE-2023-27920 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpMedium 4.3
Improper access control vulnerability in the system date/time setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to alter system date/time of the affected product.
- Product
- SolarView Compact
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 22, 2023OS command injection vulnerability in the mail setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to VerCVE-2023-27521 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpHigh 8.8
OS command injection vulnerability in the mail setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows remote authenticated attackers to execute an arbitrary OS command.
- Product
- SolarView Compact
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 22, 2023Buffer overflow vulnerability in the multiple setting pages of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to VerCVE-2023-27518 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpHigh 8.8
Buffer overflow vulnerability in the multiple setting pages of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to execute arbitrary code.
- Product
- SolarView Compact
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 22, 2023OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.1CVE-2023-27514 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpHigh 8.8
OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to execute an arbitrary OS command.
- Product
- SolarView Compact
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 22, 2023Use of hard-coded credentials exists in SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10, and SV-CPT-MC310F versions prior to Ver.8.10, which may allowCVE-2023-27512 · Other software · Contec Co., Ltd. · reported by vultures@jpcert.or.jpHigh 7.2
Use of hard-coded credentials exists in SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10, and SV-CPT-MC310F versions prior to Ver.8.10, which may allow a remote authenticated attacker to login the affected product with an administrative privilege and perform an unintended operation.
- Product
- SolarView Compact
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 22, 2023SolarView Compact <= 6.0 is vulnerable to Insecure Permissions.CVE-2023-29919 · Other software · Contec · reported by MITRECritical 9.1
SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not restricted.
- Product
- Solarview Compact Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comsolarview.io
May 15, 2023In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can resultCVE-2023-1698 · Other software · WAGO · reported by info@cert.vde.comCritical 9.8
In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise.
- Product
- Compact Controller CC100
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.vde.comcert.vde.com
Feb 27, 2023The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, which could lead to unauthenticated remoteCVE-2022-45140 · Other software · WAGO · reported by info@cert.vde.comCritical 9.8
The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, which could lead to unauthenticated remote code execution and full system compromise.
- Product
- Compact Controller CC100 (751-9301)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.vde.comcert.vde.com
Feb 27, 2023A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver.CVE-2022-45139 · Other software · WAGO · reported by info@cert.vde.comMedium 5.3
A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver. In combination with CVE-2022-45138 this could lead to disclosure of device information like CPU diagnostics. As there is just a limited amount of information readable the impact only affects a small subset of confidentiality.
- Product
- Compact Controller CC100 (751-9301)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.vde.comcert.vde.com
Feb 27, 2023The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API.CVE-2022-45138 · Other software · WAGO · reported by info@cert.vde.comCritical 9.8
The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that can lead to full compromise of the device.
- Product
- Compact Controller CC100 (751-9301)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.vde.comcert.vde.com
Feb 27, 2023The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser.CVE-2022-45137 · Other software · WAGO · reported by info@cert.vde.comMedium 6.1
The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality and integrity but no impact of availability.
- Product
- Compact Controller CC100 (751-9301)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.vde.comcert.vde.com
Feb 6, 2023There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloadCVE-2023-23333 · Other software · Contec · reported by MITRECritical 9.8
There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php.
- Product
- Solarview Compact Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comgithub.com
Jan 23, 2023Compact WP Audio Player: Does not validate and escape some of its shortcode attributes before outputting them back in the pageCVE-2022-4542 · WordPress plugins & themes · reported by WPScanMedium 5.4
The Compact WP Audio Player WordPress plugin before 1.9.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
- Product
- Compact WP Audio Player
- Fixed in
- 1.9.8
- What to do
- Update Compact WP Audio Player to 1.9.8 or newer.
Dec 19, 2022An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic loading to cause a denial-of-service conditionCVE-2022-3752 · Other software · Rockwell Automation · reported by PSIRT@rockwellautomation.comHigh 8.6
An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic loading to cause a denial-of-service condition in Rockwell Automation Logix controllers resulting in a major non-recoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online and continue normal operation.
- Product
- CompactLogix 5480
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordrockwellautomation.custhelp.comrockwellautomation.custhelp.com
Dec 16, 2022 A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault (MNRF) and a denial-ofCVE-2022-3157 · Other software · Rockwell Automation · reported by PSIRT@rockwellautomation.comHigh 8.6
A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault (MNRF) and a denial-of-service condition (DOS).
- Product
- CompactLogix 5370
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordrockwellautomation.custhelp.comrockwellautomation.custhelp.com
Dec 13, 2022A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXCVE-2022-45937 · Other software · Siemens · reported by productcert@siemens.comHigh 8.8
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), TALON TC Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5). A low privilege authenticated attacker with network access to the integrated web server could download sensitive information from the device containing user account credentials.
- Product
- APOGEE PXC Compact (BACnet)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert-portal.siemens.comcert-portal.siemens.com
Dec 2, 2022Horner Automation’s RCC 972 firmware version 15.40 contains global variables.CVE-2022-2642 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.5
Horner Automation’s RCC 972 firmware version 15.40 contains global variables. This could allow an attacker to read out sensitive values and variable keys from the device.
- Product
- Remote Compact Controller (RCC) 972
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 2, 2022Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device.CVE-2022-2641 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govCritical 9.8
Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device. This could allow an attacker to perform unauthorized changes to the device, remotely execute arbitrary code, or cause a denial-of-service condition.
- Product
- Remote Compact Controller (RCC) 972
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 2, 2022The Config-files of Horner Automation’s RCC 972 with firmware version 15.40 are encrypted with weak XOR encryption vulnerable to reverse engineering.CVE-2022-2640 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.5
The Config-files of Horner Automation’s RCC 972 with firmware version 15.40 are encrypted with weak XOR encryption vulnerable to reverse engineering. This could allow an attacker to obtain credentials to run services such as File Transfer Protocol (FTP) and Hypertext Transfer Protocol (HTTP).
- Product
- Remote Compact Controller (RCC) 972
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 29, 2022SolarView Compact 7.0 is vulnerable to Cross-site Scripting (XSS) via /network_test.php.CVE-2022-44355 · Other software · Contec · reported by MITREMedium 6.1
SolarView Compact 7.0 is vulnerable to Cross-site Scripting (XSS) via /network_test.php.
- Product
- Solarview Compact Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 29, 2022SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file.CVE-2022-44354 · Other software · Contec · reported by MITRECritical 9.8
SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file.
- Product
- Solarview Compact Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 16, 2022SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.phpCVE-2022-40881 · Other software · Contec · reported by MITRECritical 9.8
SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php
- Product
- Solarview Compact Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 31, 2022A remote unprivileged attacker can interact with the configuration interface of a Flexi-Compact FLX3-CPUC1 or FLX3-CPUC2 running an affected firmware version toCVE-2022-27583 · Other software · Sick · reported by psirt@sick.deCritical 9.1
A remote unprivileged attacker can interact with the configuration interface of a Flexi-Compact FLX3-CPUC1 or FLX3-CPUC2 running an affected firmware version to potentially impact the availability of the FlexiCompact.
- Product
- Flx3-cpuc1 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 17, 2022WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-FilterinCVE-2022-3281 · Other software · WAGO · reported by info@cert.vde.comHigh 7.5
WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filtering after reboot. This may allow an remote attacker to circumvent the reach the network that should be protected by the MAC address filter.
- Product
- 750-81xx/xxx-xxx Series PFC100/PFC200
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.vde.comcert.vde.com
Aug 16, 2022The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an insufficient verificatCVE-2022-35239 · Other software · CONTEC CO., LTD. · reported by vultures@jpcert.or.jpHigh 8.8
The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an insufficient verification vulnerability when uploading files. If this vulnerability is exploited, arbitrary PHP code may be executed if a remote authenticated attacker uploads a specially crafted PHP file.
- Product
- SolarView Compact
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 27, 2022The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage iCVE-2020-6998 · Other software · Rockwell Automation · reported by ics-cert@hq.dhs.govMedium 5.8
The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage its control flow during execution, creating an infinite loop. This may allow an attacker to send specially crafted CIP packet requests to a controller, which may cause denial-of-service conditions in communications with other products.
- Product
- Armor Compact GuardLogix 5370 controllers
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordrockwellautomation.custhelp.comcisa.gov
Jun 21, 2022A vulnerability has been identified in Cerberus DMS (All versions), Desigo CC (All versions), Desigo CC Compact (All versions), SIMATIC WinCC OA V3.16 (All versCVE-2022-33139 · Other software · Siemens · reported by productcert@siemens.comCritical 9.8
A vulnerability has been identified in Cerberus DMS (All versions), Desigo CC (All versions), Desigo CC Compact (All versions), SIMATIC WinCC OA V3.16 (All versions in default configuration), SIMATIC WinCC OA V3.17 (All versions in non-default configuration), SIMATIC WinCC OA V3.18 (All versions in non-default configuration). Affected applications use client-side only authentication, when neither server-side authentication (SSA) nor Kerberos authentication is enabled. In this configuration, attackers could impersonate other users or exploit the client-server protocol without being authenticated.
- Product
- Cerberus DMS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert-portal.siemens.comcert-portal.siemens.com
Jun 21, 2022An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file.CVE-2022-31374 · Other software · Contec · reported by MITRECritical 9.8
An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file.
- Product
- Sv-cpt-mc310 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 21, 2022SolarView Compact v6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Solar_AiConf.php.CVE-2022-31373 · Other software · Contec · reported by MITREMedium 6.1
SolarView Compact v6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Solar_AiConf.php.
- Product
- Sv-cpt-mc310 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix ControllersCVE-2022-1797 · Other software · Rockwell Automation · reported by ics-cert@hq.dhs.govMedium 6.8
A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online.
- Product
- CompactLogix 5380 controllers
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordrockwellautomation.custhelp.comcisa.gov
May 24, 2022A buffer overflow vulnerability has been detected in the firewall function of the device management web portal.CVE-2022-1669 · Other software · CIRCUTOR · reported by ics-cert@hq.dhs.govMedium 6.8
A buffer overflow vulnerability has been detected in the firewall function of the device management web portal. The device runs a CGI binary (index.cgi) to offer a management web application. Once authenticated with valid credentials in this web portal, a potential attacker could submit any "Address" value and it would be copied to a second variable with a "strcpy" vulnerable function without checking its length. Because of this, it is possible to send a long address value to overflow the process stack, controlling the function return address.
- Product
- COMPACT DC-S BASIC
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.