Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
37 results
Jun 25, 2026Horner Automation Cscape versions prior to 10.2 SP3 are vulnerable to an Out-of-Bounds Read vulnerability through parsing CSP files.CVE-2026-12897 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 8.4
Horner Automation Cscape versions prior to 10.2 SP3 are vulnerable to an Out-of-Bounds Read vulnerability through parsing CSP files. Successful exploitation of this vulnerability could allow an attacker to disclose information and execute arbitrary code.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 17, 2026An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services.CVE-2026-6284 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govCritical 9.3
An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services. The limited password complexity and no password input limiters makes brute force password enumeration possible.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comhornerautomation.com
May 8, 2025Horner Automation Cscape version 10.0 (10.0.415.2) SP1 is vulnerable to an out-of-bounds read vulnerability that could allow an attacker to disclose informationCVE-2025-4098 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 8.4
Horner Automation Cscape version 10.0 (10.0.415.2) SP1 is vulnerable to an out-of-bounds read vulnerability that could allow an attacker to disclose information and execute arbitrary code on affected installations of Cscape.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2024Horner Automation Cscape contains a memory corruption vulnerability, which could allow an attacker to disclose information and execute arbitrary code.CVE-2024-9508 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 8.5
Horner Automation Cscape contains a memory corruption vulnerability, which could allow an attacker to disclose information and execute arbitrary code.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordhornerautomation.comcisa.gov
Dec 12, 2024The vulnerability occurs in the parsing of CSP files.CVE-2024-12212 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 8.5
The vulnerability occurs in the parsing of CSP files. The issues result from the lack of proper validation of user-supplied data, which could allow reading past the end of allocated data structures, resulting in execution of arbitrary code.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordhornerautomation.comcisa.gov
Jan 15, 2024 In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a user opens a malicious CSP file, which woCVE-2023-7206 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.8
In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a user opens a malicious CSP file, which would result in execution of arbitrary code on affected installations of Cscape.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordhornerautomation.comcisa.gov
Jun 6, 2023Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI).CVE-2023-32203 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.8
Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds write at CScape_EnvisionRV+0x2e374b. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 6, 2023Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI).CVE-2023-31278 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.8
Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to potentially execute arbitrary code in the context of the current process.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 6, 2023 The affected product does not properly validate user-supplied data.CVE-2023-31244 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.8
The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 6, 2023 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).CVE-2023-29503 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.8
The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a stack-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 6, 2023 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).CVE-2023-28653 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.8
The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a use-after-free vulnerability. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 6, 2023 The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT).CVE-2023-27916 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.8
The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT). This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to potentially execute arbitrary code in the context of the current process.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 6, 2023Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI).CVE-2023-32539 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.8
Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds write at CScape_EnvisionRV+0x2e3c04. An attacker could leverage this vulnerability to potentially execute arbitrary code in the context of the current process.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 6, 2023 The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP).CVE-2023-32289 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.8
The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP). This could lead to an out-of-bounds read in IO_CFG. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 6, 2023 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).CVE-2023-32281 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.8
The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds read in the FontManager. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 6, 2023 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).CVE-2023-32545 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.8
The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds read in Cscape!CANPortMigration. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 9, 2023Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e.CVE-2023-0623 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.8
Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied data, which could result in writes past the end of allocated data structures. An attacker could leverage these vulnerabilities to execute arbitrary code in the context of the current process.
- Product
- Cscape Envision RV
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 9, 2023Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e.CVE-2023-0622 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.8
Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied data, which could result in writes past the end of allocated data structures. An attacker could leverage these vulnerabilities to execute arbitrary code in the context of the current process.
- Product
- Cscape Envision RV
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 9, 2023Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds read vulnerability when parsing project (i.e.CVE-2023-0621 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.8
Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds read vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied data, which could result in reads past the end of allocated data structures. An attacker could leverage these vulnerabilities to execute arbitrary code in the context of the current process.
- Product
- Cscape Envision RV
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 15, 2022Horner Automation's Cscape version 9.90 SP 6 and prior does not properly validate user-supplied data.CVE-2022-3377 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.8
Horner Automation's Cscape version 9.90 SP 6 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer, leading to an out-of-bounds memory read.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 27, 2022 Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data.CVE-2022-3379 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.8
Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by writing outside the memory buffer.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 27, 2022 Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data.CVE-2022-3378 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.8
Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer, leading to an out-of-bounds memory write.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary codeCVE-2022-30540 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.8
The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code
- Product
- Horner Automation Cscape Csfont
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022The affected product is vulnerable to an out-of-bounds read via uninitialized pointer, which may allow an attacker to execute arbitrary code.CVE-2022-29488 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.8
The affected product is vulnerable to an out-of-bounds read via uninitialized pointer, which may allow an attacker to execute arbitrary code.
- Product
- Horner Automation Cscape Csfont
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code.CVE-2022-28690 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.8
The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code.
- Product
- Horner Automation Cscape Csfont
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022The affected product is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code.CVE-2022-27184 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.8
The affected product is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code.
- Product
- Horner Automation Cscape Csfont
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 25, 2022This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionRV v4.50.3.1 and prior.CVE-2021-44462 · Other software · Horner Automation · reported by ics-cert@hq.dhs.govHigh 7.8
This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionRV v4.50.3.1 and prior. The issues result from the lack of proper validation of user-supplied data, which can result in reads and writes past the end of allocated data structures. User interaction is required to exploit this vulnerability as an attacker must trick a valid user to open a malicious HMI project file.
- Product
- Cscape EnvisionRV
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 25, 2021Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files.CVE-2021-33015 · Other software · Hornerautomation · reported by ics-cert@hq.dhs.govHigh 7.8
Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write via an uninitialized pointer. An attacker could leverage this vulnerability to execute code in the context of the current process.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordus-cert.cisa.govus-cert.cisa.gov
Aug 25, 2021Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files.CVE-2021-32995 · Other software · Hornerautomation · reported by ics-cert@hq.dhs.govHigh 7.8
Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute code in the context of the current process.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordus-cert.cisa.govus-cert.cisa.gov
Aug 25, 2021Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files.CVE-2021-32975 · Other software · Hornerautomation · reported by ics-cert@hq.dhs.govHigh 7.8
Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute code in the context of the current process.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordus-cert.cisa.govus-cert.cisa.gov
Apr 23, 2021Cscape (All versions prior to 9.90 SP4) is configured by default to be installed for all users, which allows full permissions, including read/write access.CVE-2021-22682 · Other software · Hornerautomation · reported by ics-cert@hq.dhs.govHigh 7.8
Cscape (All versions prior to 9.90 SP4) is configured by default to be installed for all users, which allows full permissions, including read/write access. This may allow unprivileged users to modify the binaries and configuration files and lead to local privilege escalation.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordus-cert.cisa.govus-cert.cisa.gov
Apr 23, 2021Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files.CVE-2021-22678 · Other software · Hornerautomation · reported by ics-cert@hq.dhs.govHigh 7.8
Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files. This could lead to memory corruption. An attacker could leverage this vulnerability to execute code in the context of the current process.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordus-cert.cisa.govus-cert.cisa.gov
Feb 9, 2021Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files.CVE-2021-22663 · Other software · Hornerautomation · reported by ics-cert@hq.dhs.govHigh 7.8
Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute code in the context of the current process.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordus-cert.cisa.govus-cert.cisa.gov
Oct 18, 2019In Horner Automation Cscape 9.90 and prior, improper validation of data may cause the system to write outside the intended buffer area, which may allow arbitrarCVE-2019-13545 · Other software · Hornerautomation · reported by ics-cert@hq.dhs.govHigh 7.8
In Horner Automation Cscape 9.90 and prior, improper validation of data may cause the system to write outside the intended buffer area, which may allow arbitrary code execution.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordus-cert.govzerodayinitiative.com
Oct 18, 2019In Horner Automation Cscape 9.90 and prior, an improper input validation vulnerability has been identified that may be exploited by processing files lacking useCVE-2019-13541 · Other software · Hornerautomation · reported by ics-cert@hq.dhs.govHigh 7.8
In Horner Automation Cscape 9.90 and prior, an improper input validation vulnerability has been identified that may be exploited by processing files lacking user input validation. This may allow an attacker to access information and remotely execute arbitrary code.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordus-cert.govzerodayinitiative.com
Feb 28, 2019Cscape, 9.80 SP4 and prior.CVE-2019-6555 · Other software · ICS-CERT · reported by ics-cert@hq.dhs.govHigh 7.8
Cscape, 9.80 SP4 and prior. An improper input validation vulnerability may be exploited by processing specially crafted POC files. This may allow an attacker to read confidential information and remotely execute arbitrary code.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comics-cert.us-cert.gov
Dec 20, 2018Cscape, Version 9.80.75.3 SP3 and prior.CVE-2018-19005 · Other software · Hornerautomation · reported by ics-cert@hq.dhs.govHigh 7.8
Cscape, Version 9.80.75.3 SP3 and prior. An improper input validation vulnerability has been identified that may be exploited by processing specially crafted POC files lacking user input validation. This may allow an attacker to read confidential information and remotely execute arbitrary code.
- Product
- Cscape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comics-cert.us-cert.gov
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.