Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-6431 State: PUBLISHED Published: 2015-12-23T02:00:00 Last Updated: 2024-08-06T07:22:21.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service (device reload) via a packet with the 00-00-00-00-00-00 source MAC address, aka Bug ID CSCux48405. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034514 - http://www.securityfocus.com/bid/79654 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2015-1221-iosxe
CVE ID: CVE-2015-6432 State: PUBLISHED Published: 2016-01-05T02:00:00 Last Updated: 2024-08-06T07:22:21.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Elements (PCEs) for OSPF LSA opaque area updates, which allows remote attackers to cause a denial of service (device reload) via a crafted update, aka Bug ID CSCuw83486. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034570 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160104-iosxr
CVE ID: CVE-2015-6433 State: PUBLISHED Published: 2016-01-08T02:00:00 Last Updated: 2024-08-06T07:22:21.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Cisco Unified Communications Manager 11.0(0.98000.225) allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCut66767. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034583 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160105-cucm
CVE ID: CVE-2015-6434 State: PUBLISHED Published: 2016-01-08T02:00:00 Last Updated: 2024-08-06T07:22:21.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Infrastructure does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCux64856. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160105-pi - http://www.securitytracker.com/id/1034582
CVE ID: CVE-2015-6435 State: PUBLISHED Published: 2016-01-22T11:00:00 Last Updated: 2024-08-06T07:22:21.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034743 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-ucsm - http://packetstormsecurity.
ttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-ucsm - http://packetstormsecurity.com/files/160991/Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution.html
CVE ID: CVE-2015-6436 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6437 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6438 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6439 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6440 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6441 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6442 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6443 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6444 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6445 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6446 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6447 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6448 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6449 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6450 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6451 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6452 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6453 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6454 State: PUBLISHED Published: 2015-09-25T01:00:00 Last Updated: 2024-08-06T07:22:21.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Everest PeakHMI before 8.7.0.2, when the video server is used, allows remote attackers to cause a denial of service (incorrect pointer dereference and daemon crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-232-01
CVE ID: CVE-2015-6455 State: REJECTED Published: 2017-03-16T15:00:00 Last Updated: 2017-03-16T14:57:01 Description: No description available.
CVE ID: CVE-2015-6456 State: PUBLISHED Published: 2015-09-18T22:00:00 Last Updated: 2024-08-06T07:22:21.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 have hardcoded credentials for a support account, which allows remote attackers to obtain administrative access, and consequently execute arbitrary code, by leveraging knowledge of the password. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-15-440/ - http://www.gedigitalenergy.com/app/resources.aspx?prod=pulsenet&type=9 - https://ics-cert.us-cert.gov/advisories/ICSA-15-258-03
CVE ID: CVE-2015-6457 State: PUBLISHED Published: 2019-03-21T19:12:50 Last Updated: 2024-08-06T07:22:21.502Z Vendors: Moxa Products: SoftCMS Problem Types: CWE-122 Description: Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-239-01
CVE ID: CVE-2015-6458 State: PUBLISHED Published: 2019-03-21T19:23:47 Last Updated: 2024-08-06T07:22:21.590Z Vendors: Moxa Products: SoftCMS Problem Types: CWE-120 Description: Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-239-01
CVE ID: CVE-2015-6459 State: PUBLISHED Published: 2015-09-18T22:00:00 Last Updated: 2024-08-06T07:22:21.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in the download feature in FileDownloadServlet in GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 allows remote attackers to read or delete arbitrary files via a full pathname. Additional Analyst Notes: - CVE Program Container: References: - http://www.gedigitalenergy.com/app/resources.aspx?prod=pulsenet&type=9 - http://zerodayinitiative.com/advisories/ZDI-15-439/ - https://ics-cert.us-cert.gov/advisories/ICSA-15-258-03
CVE ID: CVE-2015-6460 State: PUBLISHED Published: 2015-09-18T22:00:00Z Last Updated: 2024-09-16T19:51:01.642Z Vendors: CODESYS Products: 3S-Smart CODESYS Gateway Server Problem Types: n/a Description: Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.34 allow remote attackers to execute arbitrary code via opcode (1) 0x3ef or (2) 0x3f0. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-15-442/ - http://zerodayinitiative.com/advisories/ZDI-15-441/ - https://ics-cert.us-cert.gov/advisories/ICSA-15-258-02
CVE ID: CVE-2015-6461 State: PUBLISHED Published: 2019-03-21T18:17:48 Last Updated: 2024-08-06T07:22:21.501Z Vendors: n/a Products: Schneider Electric Modicon PLC Problem Types: CWE-98 Description: Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC web server, which, when launched, will result in the browser redirecting to a remote file via a Java script loaded with the web page. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-24
age. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-246-02
CVE ID: CVE-2015-6462 State: PUBLISHED Published: 2019-03-21T18:44:47 Last Updated: 2024-08-06T07:22:21.488Z Vendors: n/a Products: Schneider Electric Modicon PLC Problem Types: CWE-79 Description: Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that will be executed on the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC client browser. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-246-02
CVE ID: CVE-2015-6463 State: PUBLISHED Published: 2015-09-28T01:00:00 Last Updated: 2024-08-06T07:22:21.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: CodeWrights HART Comm DTM components, as used with Endress+Hauser FieldCare, allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via a longtag XML schema containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-267-01
CVE ID: CVE-2015-6464 State: PUBLISHED Published: 2015-09-11T16:00:00 Last Updated: 2024-08-06T07:22:21.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to bypass a read-only protection mechanism by using Firefox with a web-developer plugin. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-246-03 - http://www.moxa.com/support/download.aspx?type=support&id=328
CVE ID: CVE-2015-6465 State: PUBLISHED Published: 2015-09-11T16:00:00 Last Updated: 2024-08-06T07:22:21.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause a denial of service (reboot) via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-246-03 - http://www.securitytracker.com/id/1033543 - http://www.moxa.com/support/download.aspx?type=support&id=328
CVE ID: CVE-2015-6466 State: PUBLISHED Published: 2015-09-11T16:00:00 Last Updated: 2024-08-06T07:22:21.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Diagnosis Ping feature in the administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote attackers to inject arbitrary web script or HTML via an unspecified field. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-246-03 - http://www.moxa.com/support/download.aspx?type=support&id=328
CVE ID: CVE-2015-6467 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-06T07:22:21.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code via vectors involving a browser plugin. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01
CVE ID: CVE-2015-6468 State: PUBLISHED Published: 2015-09-25T01:00:00 Last Updated: 2024-08-06T07:22:21.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Resource Data Management Data Manager before 2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-265-01
CVE ID: CVE-2015-6469 State: PUBLISHED Published: 2015-09-25T01:00:00 Last Updated: 2024-08-06T07:22:21.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: The interpreter in IBC Solar ServeMaster TLP+ and Danfoss TLX Pro+ allows remote attackers to discover script source code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-265-02
CVE ID: CVE-2015-6470 State: PUBLISHED Published: 2015-09-25T01:00:00 Last Updated: 2024-08-06T07:22:21.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Resource Data Management Data Manager before 2.2 allows remote authenticated users to modify arbitrary passwords via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-265-01
CVE ID: CVE-2015-6471 State: PUBLISHED Published: 2015-12-23T02:00:00 Last Updated: 2024-08-06T07:22:21.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eaton Cooper Power Systems ProView 4.x and 5.x before 5.1 on Form 6 controls and Idea and IdeaPLUS relays does not properly initialize padding fields in Ethernet packets, which allows remote attackers to obtain sensitive information by reading packet data. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-295-01
CVE ID: CVE-2015-6472 State: PUBLISHED Published: 2017-08-22T18:00:00 Last Updated: 2024-08-06T07:22:21.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Mar/4 - http://www.securityfocus.com/bid/84138 - http://packetstormsecurity.com/files/136077/WAGO-IO-PLC-758-870-750-849-Credential-Management-Privilege-Separation.html
CVE ID: CVE-2015-6473 State: PUBLISHED Published: 2017-08-22T18:00:00 Last Updated: 2024-08-06T07:22:21.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Mar/4 - http://www.securityfocus.com/bid/84138 - http://packetstormsecurity.com/files/136077/WAGO-IO-PLC-758-870-750-849-Credential-Management-Privilege-Separation.html
CVE ID: CVE-2015-6474 State: PUBLISHED Published: 2015-09-25T01:00:00 Last Updated: 2024-08-06T07:22:21.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBC Solar ServeMaster TLP+ and Danfoss TLX Pro+ allow remote attackers to discover cleartext passwords by reading HTML source code. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-265-02
CVE ID: CVE-2015-6475 State: PUBLISHED Published: 2015-09-25T01:00:00 Last Updated: 2024-08-06T07:22:21.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBC Solar ServeMaster TLP+ and Danfoss TLX Pro+ allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-265-02
CVE ID: CVE-2015-6476 State: PUBLISHED Published: 2015-11-07T02:00:00 Last Updated: 2024-08-06T07:22:21.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advantech EKI-122x-BE devices with firmware before 1.65, EKI-132x devices with firmware before 1.98, and EKI-136x devices with firmware before 1.27 have hardcoded SSH keys, which makes it easier for remote attackers to obtain access via an SSH session. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-309-01
CVE ID: CVE-2015-6477 State: PUBLISHED Published: 2015-10-18T19:00:00 Last Updated: 2024-08-06T07:22:21.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Wind Farm Portal application in Nordex Control 2 (NC2) SCADA 16 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Dec/117 - http://packetstormsecurity.com/files/135068/Nordex-Control-2-NC2-SCADA-16-Cross-Site-Scripting.html - https://ics-cert.us-cert.gov/advisories/ICSA-15-286-01
CVE ID: CVE-2015-6478 State: PUBLISHED Published: 2015-11-13T02:00:00 Last Updated: 2024-08-06T07:22:21.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-578 - http://www.zerodayinitiative.com/advisories/ZDI-15-579 - http://www.zerodayinitiative.com/advisories/ZDI-15-580 - https://ics-cert.us-cert.gov/advisories/ICSA-15-274-02 - http://www.zerodayinitiative.com/advisories/ZDI-15-573 -
-580 - https://ics-cert.us-cert.gov/advisories/ICSA-15-274-02 - http://www.zerodayinitiative.com/advisories/ZDI-15-573 - http://www.zerodayinitiative.com/advisories/ZDI-15-577 - http://www.securityfocus.com/bid/77571
CVE ID: CVE-2015-6479 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-08-06T07:22:21.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: ACEmanager in Sierra Wireless ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and LS300 devices allows remote attackers to read the filteredlogs.txt file, and consequently discover potentially sensitive boot-sequence information, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-105-01
CVE ID: CVE-2015-6480 State: PUBLISHED Published: 2015-12-21T11:00:00 Last Updated: 2024-08-06T07:22:21.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MessageBrokerServlet servlet in Moxa OnCell Central Manager before 2.2 does not require authentication, which allows remote attackers to obtain administrative access via a command, as demonstrated by the addUserAndGroup action. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-15-452/ - https://ics-cert.us-cert.gov/advisories/ICSA-15-328-01
CVE ID: CVE-2015-6481 State: PUBLISHED Published: 2015-12-21T11:00:00 Last Updated: 2024-08-06T07:22:21.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login function in the RequestController class in Moxa OnCell Central Manager before 2.2 has a hardcoded root password, which allows remote attackers to obtain administrative access via a login session. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-15-453/ - https://ics-cert.us-cert.gov/advisories/ICSA-15-328-01
CVE ID: CVE-2015-6482 State: PUBLISHED Published: 2015-10-18T19:00:00 Last Updated: 2024-08-06T07:22:21.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Runtime Toolkit before 2.4.7.48 in 3S-Smart CODESYS before 2.3.9.48 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-288-01
CVE ID: CVE-2015-6484 State: PUBLISHED Published: 2015-10-25T01:00:00 Last Updated: 2024-08-06T07:22:21.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: 3S-Smart CODESYS Gateway Server before 2.3.9.48 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted (1) GET or (2) POST request. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-293-03
CVE ID: CVE-2015-6485 State: PUBLISHED Published: 2016-03-12T02:00:00 Last Updated: 2024-08-06T07:22:22.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Schneider Electric Telvent Sage 2300 RTUs with firmware before C3413-500-S01, and LANDAC II-2, Sage 1410, Sage 1430, Sage 1450, Sage 2400, and Sage 3030M RTUs with firmware before C3414-500-S02J2, allow remote attackers to obtain sensitive information from device memory by reading a padding field of an Ethernet packet. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-070-01
CVE ID: CVE-2015-6486 State: PUBLISHED Published: 2015-10-28T10:00:00 Last Updated: 2024-08-06T07:22:21.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-300-03
CVE ID: CVE-2015-6487 State: REJECTED Published: 2017-03-16T15:00:00 Last Updated: 2017-03-16T14:57:01 Description: No description available.
CVE ID: CVE-2015-6488 State: PUBLISHED Published: 2015-10-28T10:00:00 Last Updated: 2024-08-06T07:22:21.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web server on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-300-03