Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password.
AFFECTED_PRODUCTS:
Loftware Spectrum,
Loftware Spectrum
Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF.
AFFECTED_PRODUCTS:
Loftware Spectrum
Loftware Spectrum before 5.1 allows SSRF.
AFFECTED_PRODUCTS:
Loftware Spectrum
Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data.
AFFECTED_PRODUCTS:
Loftware Spectrum,
Loftware Spectrum
Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function.
AFFECTED_PRODUCTS:
Loftware Spectrum,
Loftware Spectrum
The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access to Private or Password-protected events due to missing authorization checks in all versions up to, and including, 4.0.4.3. This makes it possible for unauthenticated attackers to view pri...
AFFECTED_PRODUCTS:
Metagauss Eventprime
The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-jltma-wrapper-link element in all versions up to, and including 2.0.6.4 due to insufficient input sanitization and output escap...
AFFECTED_PRODUCTS:
Master-Addons Master Addons
The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload' function in all versions up to, and including, 6.5.5. This makes it possible for authenticated at...
AFFECTED_PRODUCTS:
Bitapps File Manager
Rejected reason: DO NOT USE THIS CVE RECORD. Consult IDs: CVE-2024-45593. Reason: This record is a reservation duplicate of CVE-2024-45593. Notes: All CVE users should reference CVE-2024-45593 instead of this record. All references and descriptions in this record have been removed to prevent acciden...
Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.This issue affects Escargot: 4.0.0.
SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file
AFFECTED_PRODUCTS:
Wireshark Wireshark,
Wireshark Wireshark
The Slider comparison image before and after plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's [sciba] shortcode in all versions up to, and including, 0.8.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...
AFFECTED_PRODUCTS:
Artembovkun Slider Comparison Image Before And After
The Nova Blocks by Pixelgrade plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' attribute of the 'wp:separator' Gutenberg block in all versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This mak...
AFFECTED_PRODUCTS:
Pixelgrade Nova Blocks
A vulnerability has been identified in Industrial Edge Management Pro (All versions < V1.9.5), Industrial Edge Management Virtual (All versions < V2.3.1-1). Affected components do not properly validate the device tokens. This could allow an unauthenticated remote attacker to impersonate other device...
A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6.0 (All versions < V6.0 SP12 Upd3), Automation License Manager V6.2 (All versions < V6.2 Upd3). Affected applications do not properly validate certain fields in incoming network packets...
A vulnerability has been identified in SINUMERIK 828D V4 (All versions < V4.95 SP3), SINUMERIK 840D sl V4 (All versions < V4.95 SP3 in connection with using Create MyConfig (CMC) <= V4.8 SP1 HF6), SINUMERIK ONE (All versions < V6.23 in connection with using Create MyConfig (CMC) <= V6.6), SINUMERIK...
A vulnerability has been identified in SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0) (All versions), SIMATIC S7-200 SMART CPU CR60 (6ES7288-1CR60-0AA0) (All versions), SIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA0) (All versions), SIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA1) (All vers...
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP2). The affected application does not properly handle user session establishment and invalidation. This could allow a remote attacker to circumvent the additional multi factor authentication for user session e...
AFFECTED_PRODUCTS:
Siemens Sinema Remote Connect Server,
Siemens Sinema Remote Connect Server
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application inserts sensitive information into a log file which is readable by all legitimate users of the underlying system. This could allow an authenticated attacker to compromise the confi...
AFFECTED_PRODUCTS:
Siemens Sinema Remote Connect Client,
Siemens Sinema Remote Connect Client
A vulnerability has been identified in SINUMERIK 828D V4 (All versions), SINUMERIK 828D V5 (All versions < V5.24), SINUMERIK 840D sl V4 (All versions), SINUMERIK ONE (All versions < V6.24). Affected devices do not properly enforce access restrictions to scripts that are regularly executed by the sys...
A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0015), Tecnomatix Plant Simulation V2404 (All versions < V2404.0004). The affected applications contain a stack based overflow vulnerability while parsing specially crafted SPP files. This could allow an a...
A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF610R FCC (6GT2811-6BC10-1AA0) (All versions < V4.2), SIMATIC Reader RF615R CMIIT (6GT2811-6CC10-2AA0)...
AFFECTED_PRODUCTS:
Siemens Simatic Rf185c Firmware,
Siemens Simatic Rf186c Firmware,
Siemens Simatic Rf186ci Firmware
... (+24)
A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF610R FCC (6GT2811-6BC10-1AA0) (All versions < V4.2), SIMATIC Reader RF615R CMIIT (6GT2811-6CC10-2AA0)...
AFFECTED_PRODUCTS:
Siemens Simatic Rf185c Firmware,
Siemens Simatic Rf186c Firmware,
Siemens Simatic Rf186ci Firmware
... (+24)
A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF610R FCC (6GT2811-6BC10-1AA0) (All versions < V4.2), SIMATIC Reader RF615R CMIIT (6GT2811-6CC10-2AA0)...
AFFECTED_PRODUCTS:
Siemens Simatic Rf185c Firmware,
Siemens Simatic Rf186c Firmware,
Siemens Simatic Rf186ci Firmware
... (+24)
A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF610R FCC (6GT2811-6BC10-1AA0) (All versions < V4.2), SIMATIC Reader RF615R CMIIT (6GT2811-6CC10-2AA0)...
AFFECTED_PRODUCTS:
Siemens Simatic Rf185c Firmware,
Siemens Simatic Rf186c Firmware,
Siemens Simatic Rf186ci Firmware
... (+24)
A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF610R FCC (6GT2811-6BC10-1AA0) (All versions < V4.2), SIMATIC Reader RF615R CMIIT (6GT2811-6CC10-2AA0)...
AFFECTED_PRODUCTS:
Siemens Simatic Rf185c Firmware,
Siemens Simatic Rf186c Firmware,
Siemens Simatic Rf186ci Firmware
... (+24)
A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF610R FCC (6GT2811-6BC10-1AA0) (All versions < V4.2), SIMATIC Reader RF615R CMIIT (6GT2811-6CC10-2AA0)...
AFFECTED_PRODUCTS:
Siemens Simatic Rf185c Firmware,
Siemens Simatic Rf186c Firmware,
Siemens Simatic Rf186ci Firmware
... (+24)
A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions < V2020 SP2 Update 5), SIMATIC Information Server 2022 (All versions < V2022 SP1 Update 2), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC06), SIMATIC Process Historian 2020 (All v...
A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SINEC NMS (All versions), SINEMA Remote...
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application does not expire the user session on reboot without logout. This could allow an attacker to bypass Multi-Factor Authentication.
AFFECTED_PRODUCTS:
Siemens Sinema Remote Connect Client,
Siemens Sinema Remote Connect Client
A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.17.0 only if the basic authentication mechanism is used by the application), Mendix Runtime V10.12 (All versions < V10.12.11 only if the basic authentication mechanism is used by the application), Mendix Runtime V10.6 (All...
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (Al...
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (Al...
The Tutor LMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.4. This is due to missing or incorrect nonce validation on the 'addon_enable_disable' function. This makes it possible for unauthenticated attackers to enable or disable addons via a...
AFFECTED_PRODUCTS:
Themeum Tutor Lms
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (Al...
Improper Control of Generation of Code ('Code Injection') in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration.
AFFECTED_PRODUCTS:
Logitech Logi Options\+
An low privileged remote attacker can execute OS commands with root privileges due to improper neutralization of special elements in user data.
AFFECTED_PRODUCTS:
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn Firmware,
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn Firmware,
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Firmware
... (+33)
A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.
AFFECTED_PRODUCTS:
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn Firmware,
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn Firmware,
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Firmware
... (+33)
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP FW_RULESETS.FROM_IP FW_RULESETS.IN_IP enviro...
AFFECTED_PRODUCTS:
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn Firmware,
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn Firmware,
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Firmware
... (+33)
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP environment variable which can lead to a DoS...
AFFECTED_PRODUCTS:
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn Firmware,
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn Firmware,
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Firmware
... (+27)
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NATÂ through the FW_PORTFORWARDING.SRC_IP environment variable which can lead to a DoS.
AFFECTED_PRODUCTS:
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn Firmware,
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn Firmware,
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Firmware
... (+33)
A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT through the FW_NAT.IN_IP environment variable which can lead to a DoS.
AFFECTED_PRODUCTS:
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn Firmware,
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn Firmware,
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Firmware
... (+33)
A low privileged remote attacker can perform configuration changes of the ospf service through OSPF_INTERFACE.SIMPLE_KEY, OSPF_INTERFACE.DIGEST_KEY environment variables which can lead to a DoS.
AFFECTED_PRODUCTS:
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn Firmware,
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn Firmware,
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Firmware
... (+33)
A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input validation.
AFFECTED_PRODUCTS:
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn Firmware,
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn Firmware,
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Firmware
... (+33)
A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in the variable EMAIL_RELAY_PASSWORD in mGuard devices.
AFFECTED_PRODUCTS:
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn Firmware,
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn Firmware,
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Firmware
... (+33)
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable EMAIL_NOTIFICATION.TO in mGuard devices.
AFFECTED_PRODUCTS:
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn Firmware,
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn Firmware,
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Firmware
... (+33)
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices.
AFFECTED_PRODUCTS:
Phoenixcontact Tc Mguard Rs4000 4g Vzw Vpn Firmware,
Phoenixcontact Tc Mguard Rs4000 4g Att Vpn Firmware,
Phoenixcontact Fl Mguard Rs4004 Tx\/dtx Firmware
... (+33)
Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2, contains an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.
AFFECTED_PRODUCTS:
Dell Precision 7920 Firmware,
Dell 7920 Xl Firmware
Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
AFFECTED_PRODUCTS:
Dell Insightiq
Dell PowerScale InsightIQ, version 5.0, contain a Use of hard coded Credentials vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.
AFFECTED_PRODUCTS:
Dell Insightiq