Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

t4rkd3vilz vulnerabilities and exploits

(subscribe to this query)
6.1
CVSSv3
CVE-2016-2279
Cross-site scripting (XSS) vulnerability in the web server in Rockwell Automation Allen-Bradley CompactLogix 1769-L* prior to 28.011+ allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Rockwellautomation Compactlogix 1769-l16er-bb1b FirmwareRockwellautomation Compactlogix 1769-l18er-bb1b FirmwareRockwellautomation Compactlogix 1769-l18erm-bb1b FirmwareRockwellautomation Compactlogix 1769-l24er-qb1b FirmwareRockwellautomation Compactlogix 1769-l24er-qbfc1b FirmwareRockwellautomation Compactlogix 1769-l27erm-qbfc1b FirmwareRockwellautomation Compactlogix 1769-l30er FirmwareRockwellautomation Compactlogix 1769-l30erm FirmwareRockwellautomation Compactlogix 1769-l30er-nse FirmwareRockwellautomation Compactlogix 1769-l33er FirmwareRockwellautomation Compactlogix 1769-l33erm FirmwareRockwellautomation Compactlogix 1769-l36erm FirmwareRockwellautomation Compactlogix 1769-l23e-qb1b FirmwareRockwellautomation Compactlogix 1769-l23e-qbfc1b FirmwareRockwellautomation Compactlogix 1756-en2f Series A FirmwareRockwellautomation Compactlogix 1756-en2f Series B FirmwareRockwellautomation Compactlogix 1756-en2t Series A FirmwareRockwellautomation Compactlogix 1756-en2t Series B FirmwareRockwellautomation Compactlogix 1756-en2t Series C FirmwareRockwellautomation Compactlogix 1756-en2t Series D FirmwareRockwellautomation Compactlogix 1756-en2tr Series A FirmwareRockwellautomation Compactlogix 1756-en2tr Series B Firmware
8.8
CVSSv3
CVE-2016-5809
An issue exists on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series, ION8650 series, ION8800 series, and PM5XXX series. There is no CSRF Token generated to authenticate the user during a session. Successful exploitation of this vulnera...
Schneider-electric Ion5000 -Schneider-electric Ion8650 -Schneider-electric Ion8800 -Schneider-electric Ion7300 -Schneider-electric Ion7500 -Schneider-electric Ion7600 -
NA
CVE-2015-2177
Siemens SIMATIC S7-300 CPU devices allow remote malicious users to cause a denial of service (defect-mode transition) via crafted packets on (1) TCP port 102 or (2) Profibus.
Siemens Simatic S7-300 Cpu FirmwareSiemens Simatic S7-300 Cpu -
NA
CVE-2013-0663
Cross-site request forgery (CSRF) vulnerability on the Schneider Electric Quantum 140NOE77111, 140NOE77101, and 140NWM10000; M340 BMXNOC0401, BMXNOE0100x, and BMXNOE011xx; and Premium TSXETY4103, TSXETY5103, and TSXWMY100 PLC modules allows remote malicious users to hijack the au...
Schneider-electric Modicon Quantum Plc 140noe77101Schneider-electric Modicon Quantum Plc 140nwm10000Schneider-electric Modicon Quantum Plc 140noe77111Schneider-electric Modicon M340 Bmxnoe0100xSchneider-electric Modicon M340 Bmxnoe011xxSchneider-electric Modicon M340 Bmxnoc0401Schneider-electric Modicon Premium Tsxety5103Schneider-electric Modicon Premium Tsxwmy100Schneider-electric Modicon Premium Tsxety4103
NA
CVE-2014-3110
Multiple cross-site scripting (XSS) vulnerabilities on Honeywell FALCON XLWeb Linux controller devices 2.04.01 and previous versions and FALCON XLWeb XLWebExe controller devices 2.02.11 and previous versions allow remote malicious users to inject arbitrary web script or HTML via ...
Honeywell Falcon Xlweb Linux ControllerHoneywell Falcon Xlweb Xlwebexe
7.5
CVSSv3
CVE-2018-0491
A use-after-free issue exists in Tor 0.3.2.x prior to 0.3.2.10. It allows remote malicious users to cause a denial of service (relay crash) because the KIST implementation allows a channel to be added more than once in the pending list.
Torproject Tor
5.3
CVSSv3
CVE-2016-3963
Siemens SCALANCE S613 allows remote malicious users to cause a denial of service (web-server outage) via traffic to TCP port 443.
Siemens Scalance S613
9.8
CVSSv3
CVE-2018-10594
Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1) utilize a fixed-length stack buffer where an unverified length value can be read from the network pack...
Deltaww Commgr
8.8
CVSSv3
CVE-2018-13989
Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable ID value, as demonstrated by a /sendrcpackage?keyid=-2544&keysymbol=-4081 request to shut off the device.
Arcelikas Grundig Smart Inter\\@ctive Firmware 3.0
NA
CVE-2014-5074
Siemens SIMATIC S7-1500 CPU devices with firmware prior to 1.6 allow remote malicious users to cause a denial of service (device restart and STOP transition) via crafted TCP packets.
Siemens Simatic S7-1500 Cpu Firmware 1.5Siemens Simatic S7-1500 Cpu FirmwareSiemens Simatic S7-1500 Cpu Firmware 1.0.1Siemens Simatic S7-1500 Cpu Firmware 1.1.0Siemens Simatic S7-1500 Cpu Firmware 1.1.1Siemens Simatic S7-1500 Cpu Firmware 1.1.2Siemens Simatic S7-1518f-4 Pn\\/dp Cpu -Siemens Simatic S7-1513-1 Pn Cpu -Siemens Simatic S7-1515-2 Pn Cpu -Siemens Simatic S7-1511-1 Pn Cpu -Siemens Simatic S7-1516-3 Pn\\/dp Cpu -Siemens Simatic S7-1518-4 Pn\\/dp Cpu -Siemens Simatic S7-1516f-3 Pn\\/dp Cpu -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
validationCVE-2024-34413CVE-2024-34089CVE-2024-33408localSQLCVE-2024-0402CVE-2024-33910CVE-2024-31848
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook