web port vulnerabilities and exploits

(subscribe to this query)

A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious packets are sent to the Geo SCADA server's database web port (default 443). Affected products: EcoStruxure Geo SCADA Expert 2019, EcoStr...

Schneider-electric Clearscada Schneider-electric Ecostruxure Geo Scada Expert 2019 -Schneider-electric Ecostruxure Geo Scada Expert 2020 -Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8108.1 Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8120.1 Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8158.1 Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8182.1 Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8197.1 Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8218.1 Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8269.1 Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8027.1 Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7268.1 Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7322.1 Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7429.2 Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7457.1 Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7488.1 Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7522.1 Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7545.1 Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7578.1 Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7613.1 Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7641.1 Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7690.1

Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 8088. A user-controllable path is handed to a path-concatenation method (Path.Combine from .NET) without proper sanitisation. This yields the possibility of includ...

Kardex Kardex Control Center 5.7.12\\+0-a203c2a213-master

2 Github repositories

An SSRF issue exists in Reprise License Manager (RLM) web interface up to and including 14.2BL4 that allows remote malicious users to trigger outbound requests to intranet servers, conduct port scans via the actserver parameter in License Activation function.

Reprisesoftware Reprise License Manager

An issue exists in FC46-WebBridge on GE Grid Solutions MS3000 devices prior to 3.7.6.25p0_3.2.2.17p0_4.7p0. A vulnerability in the web server allows arbitrary files and configurations to be read via directory traversal over TCP port 8888.

Ge Ms 3000 Firmware

A memory consumption issue was addressed with improved memory handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code ex...

Apple Watchos Apple Ipados Apple Iphone Os Apple Tvos Apple Macos Apple Safari

A logic issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may bypass Same ...

Apple Watchos Apple Ipados Apple Iphone Os Apple Tvos Apple Macos Apple Safari Apple Icloud

A logic issue was addressed with improved checks. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may disclose sensitive user information.

Apple Ipados Apple Iphone Os Apple Watchos Apple Tvos Apple Macos Apple Safari Apple Icloud

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.

Apple Ipados Apple Iphone Os Apple Watchos Apple Tvos Apple Macos Apple Safari

A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code ex...

Apple Macos 13.0 Apple Watchos Apple Iphone Os Apple Ipados Apple Tvos Apple Safari

The issue was addressed with improved memory handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may result in the disclosure of process memory...

Apple Macos 13.0 Apple Watchos Apple Ipados Apple Iphone Os Apple Tvos Apple Safari

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook