Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-7496 State: PUBLISHED Published: 2018-03-14T18:00:00 Last Updated: 2024-08-05T06:31:03.761Z Vendors: n/a Products: OSIsoft PI Vision Problem Types: CWE-200 Description: An Information Exposure issue was discovered in OSIsoft PI Vision versions 2017 and prior. The server response header and referrer-policy response header each provide unintended information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103390 - https://ics-cert.us-cert.gov/advisories/ICSA-18-072-03
CVE ID: CVE-2018-7497 State: PUBLISHED Published: 2018-05-15T22:00:00Z Last Updated: 2024-09-17T01:51:04.478Z Vendors: Advantech Products: WebAccess Problem Types: CWE-822 Description: In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, several untrusted pointer dereference vulnerabilities have been identified, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104190 - https://ics-cert.us-cert.gov/advisories/ICSA-18-135-0
Container: References: - http://www.securityfocus.com/bid/104190 - https://ics-cert.us-cert.gov/advisories/ICSA-18-135-01
CVE ID: CVE-2018-7498 State: PUBLISHED Published: 2018-03-28T17:00:00Z Last Updated: 2024-09-16T22:55:54.087Z Vendors: Philips Products: Philips Alice 6 System Problem Types: CWE-311 Description: In Philips Alice 6 System version R8.0.2 or prior, the lack of proper data encryption passes up the guarantees of confidentiality, integrity, and accountability that properly implemented encryption conveys. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-18-086-01 - http://www.securityfocus.com/bid/103537
CVE ID: CVE-2018-7499 State: PUBLISHED Published: 2018-05-15T22:00:00Z Last Updated: 2024-09-16T20:58:20.098Z Vendors: Advantech Products: WebAccess Problem Types: CWE-121 Description: In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, several stack-based buffer overflow vulnerabilities have been identified, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104190 - https://ics-cert.us-cert.gov/advisories/ICSA-18-135-01
CVE ID: CVE-2018-7500 State: PUBLISHED Published: 2018-03-14T18:00:00 Last Updated: 2024-08-05T06:31:04.282Z Vendors: n/a Products: OSIsoft PI Web API Problem Types: CWE-264 Description: A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Privileges may be escalated, giving attackers access to the PI System via the service account. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103396 - https://ics-cert.us-cert.gov/advisories/ICSA-18-072-04
CVE ID: CVE-2018-7501 State: PUBLISHED Published: 2018-05-15T22:00:00Z Last Updated: 2024-09-16T20:21:58.642Z Vendors: Advantech Products: WebAccess Problem Types: CWE-89 Description: In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, several SQL injection vulnerabilities have been identified, which may allow an attacker to disclose sensitive information from the host. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104190 - https://ics-cert.us-cert.gov/advisories/ICSA-18-
gram Container: References: - http://www.securityfocus.com/bid/104190 - https://ics-cert.us-cert.gov/advisories/ICSA-18-135-01
CVE ID: CVE-2018-7502 State: PUBLISHED Published: 2018-03-23T17:00:00Z Last Updated: 2024-09-16T17:14:23.452Z Vendors: ICS-CERT Products: Beckhoff TwinCAT PLC products Problem Types: CWE-822 Description: Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker who is able to execute code on the target may be able to exploit this vulnerability to obtain SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: References: - https://srcincite.io/advisories/src-2018-0007/ - http://www.securityfocus.com/bid/103487 - https://ics-cert.us-cert.gov/advisories/ICSA-18-081-02 - https://dow
8-0007/ - http://www.securityfocus.com/bid/103487 - https://ics-cert.us-cert.gov/advisories/ICSA-18-081-02 - https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2018-001.pdf
CVE ID: CVE-2018-7503 State: PUBLISHED Published: 2018-05-15T22:00:00Z Last Updated: 2024-09-16T17:24:19.997Z Vendors: Advantech Products: WebAccess Problem Types: CWE-22 Description: In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, a path transversal vulnerability has been identified, which may allow an attacker to disclose sensitive information on the target. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104190 - https://ics-cert.us-cert.gov/advisories/ICSA-18-135-01
CVE ID: CVE-2018-7504 State: PUBLISHED Published: 2018-03-14T18:00:00 Last Updated: 2024-08-05T06:31:03.801Z Vendors: n/a Products: OSIsoft PI Vision Problem Types: CWE-693 Description: A Protection Mechanism Failure issue was discovered in OSIsoft PI Vision versions 2017 and prior. The X-XSS-Protection response header is not set to block, allowing attempts at reflected cross-site scripting. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103390 - https://ics-cert.us-cert.gov/advisories/ICSA-18-072-03
CVE ID: CVE-2018-7505 State: PUBLISHED Published: 2018-05-15T22:00:00Z Last Updated: 2024-09-16T22:29:56.539Z Vendors: Advantech Products: WebAccess Problem Types: CWE-264 Description: In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, a TFTP application has unrestricted file uploads to the web application without authorization, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104190 - https://ics-cert.us-cert.gov/advis
tes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104190 - https://ics-cert.us-cert.gov/advisories/ICSA-18-135-01
CVE ID: CVE-2018-7506 State: PUBLISHED Published: 2018-04-06T14:00:00Z Last Updated: 2024-09-17T02:07:03.368Z Vendors: ICS-CERT Products: Moxa MXview Problem Types: Information Exposure Description: The private key of the web server in Moxa MXview versions 2.8 and prior is able to be read and accessed via an HTTP GET request, which may allow a remote attacker to decrypt encrypted information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103722 - https://ics-cert.us-cert.gov/advisories/ICSA-18-095-02
CVE ID: CVE-2018-7507 State: PUBLISHED Published: 2018-05-04T19:00:00Z Last Updated: 2024-09-16T17:43:16.317Z Vendors: ICS-CERT Products: Delta Electronics WPLSoft Problem Types: CWE-122 Description: WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length heap buffer where a value larger than the buffer can be read from a file into the buffer, causing the buffer to be overwritten, which may allow remote code execution or cause the application to crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103179 - https://ics-cert.us-cert.gov/advisories/ICSA-18-058-02
CVE ID: CVE-2018-7508 State: PUBLISHED Published: 2018-03-14T18:00:00 Last Updated: 2024-08-05T06:31:03.702Z Vendors: n/a Products: OSIsoft PI Web API Problem Types: CWE-79 Description: A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Cross-site scripting may occur when input is incorrectly neutralized. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103396 - https://ics-cert.us-cert.gov/advisories/ICSA-18-072-04
CVE ID: CVE-2018-7509 State: PUBLISHED Published: 2018-05-04T19:00:00Z Last Updated: 2024-09-16T18:23:50.927Z Vendors: ICS-CERT Products: Delta Electronics WPLSoft Problem Types: CWE-787 Description: WPLSoft in Delta Electronics versions 2.45.0 and prior writes data from a file outside the bounds of the intended buffer space, which could cause memory corruption or may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103179 - https://ics-cert.us-cert.gov/advisories/ICSA-18-058-02
CVE ID: CVE-2018-7510 State: PUBLISHED Published: 2018-06-06T20:00:00Z Last Updated: 2024-09-16T22:20:39.855Z Vendors: ICS-CERT Products: BeaconMedaes TotalAlert Scroll Medical Air Systems web application Problem Types: CWE-256 Description: In the web application in BeaconMedaes TotalAlert Scroll Medical Air Systems running software versions prior to 4107600010.23, passwords are presented in plaintext in a file that is accessible without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-18-144-01
CVE ID: CVE-2018-7511 State: PUBLISHED Published: 2018-03-20T16:00:00Z Last Updated: 2024-09-16T16:33:11.185Z Vendors: Eaton Products: Eaton ELCSoft Problem Types: CWE-20 Description: In Eaton ELCSoft versions 2.04.02 and prior, there are multiple cases where specially crafted files could cause a buffer overflow which, in turn, may allow remote execution of arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.eaton.com/ecm/idcplg?IdcService=GET_FILE&allowInterrupt=1&RevisionSelectionMethod=LatestReleased&noSaveAs=0&Rendition=Primary&dDocName=PCT_3313148 - https://ics-cert.us-cert.gov/advisories/ICSA-18-065-03 - http://www.securityfocus.com/bid/103301
CVE ID: CVE-2018-7512 State: PUBLISHED Published: 2018-03-22T18:00:00Z Last Updated: 2024-09-17T04:29:01.948Z Vendors: Geutebr&#195;&#188;ck Products: Geutebr&#195;&#188;ck G-Cam/EFD-2250 (part n&#194;&#176; 5.02024) firmware and Topline TopFD-2125 (part n&#194;&#176; 5.02820) firmware Problem Types: CWE-79 Description: A cross-site scripting vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-079-01 - http://www.securityfocus.com/bid/103474
CVE ID: CVE-2018-7513 State: PUBLISHED Published: 2018-03-21T20:00:00Z Last Updated: 2024-09-17T02:42:59.350Z Vendors: ICS-CERT Products: Omron CX-Supervisor Problem Types: CWE-121 Description: In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103394 - https://ics-cert.us-cert.gov/advisories/ICSA-18-072-01
CVE ID: CVE-2018-7514 State: PUBLISHED Published: 2018-04-17T19:00:00Z Last Updated: 2024-09-16T23:35:36.653Z Vendors: ICS-CERT Products: Omron CX-One Problem Types: CWE-121 Description: Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior, may cause a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-100-02
CVE ID: CVE-2018-7515 State: PUBLISHED Published: 2018-03-21T20:00:00Z Last Updated: 2024-09-17T02:52:00.046Z Vendors: ICS-CERT Products: BeaconMed&#195;&#166;s TotalAlert Scroll Medical Air Systems web application Problem Types: CWE-256 Description: In Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities can be exploited when CX Supervisor indirectly calls an initialized pointer when parsing malformed packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103394 - https://ics-cert.us-cert.gov/advisories/ICSA-18-072-01
CVE ID: CVE-2018-7516 State: PUBLISHED Published: 2018-03-22T18:00:00Z Last Updated: 2024-09-16T20:38:03.796Z Vendors: Geutebr&#195;&#188;ck Products: Geutebr&#195;&#188;ck G-Cam/EFD-2250 (part n&#194;&#176; 5.02024) firmware and Topline TopFD-2125 (part n&#194;&#176; 5.02820) firmware Problem Types: CWE-918 Description: A server-side request forgery vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which could lead to proxied network scans. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-079-01 - http://www.securityfocus.com/bid/103474
CVE ID: CVE-2018-7517 State: PUBLISHED Published: 2018-03-21T20:00:00Z Last Updated: 2024-09-17T02:21:26.823Z Vendors: ICS-CERT Products: Omron CX-Supervisor Problem Types: CWE-787 Description: In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out of bounds vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103394 - https://ics-cert.us-cert.gov/advisories/ICSA-18-072-01
CVE ID: CVE-2018-7518 State: PUBLISHED Published: 2018-05-24T20:00:00Z Last Updated: 2024-09-16T22:41:11.097Z Vendors: ICS-CERT Products: BeaconMed&#195;&#166;s TotalAlert Scroll Medical Air Systems web application Problem Types: CWE-522 Description: In TotalAlert Web Application in BeaconMedaes Scroll Medical Air Systems prior to v4107600010.23, an attacker with network access to the integrated web server could retrieve default or user defined credentials stored and transmitted in an insecure manner. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-18-144-01
CVE ID: CVE-2018-7519 State: PUBLISHED Published: 2018-03-21T20:00:00Z Last Updated: 2024-09-16T18:13:44.973Z Vendors: ICS-CERT Products: Omron CX-Supervisor Problem Types: CWE-122 Description: In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103394 - https://ics-cert.us-cert.gov/advisories/ICSA-18-072-01
CVE ID: CVE-2018-7520 State: PUBLISHED Published: 2018-03-22T18:00:00Z Last Updated: 2024-09-17T03:27:26.443Z Vendors: Geutebr&#195;&#188;ck Products: Geutebr&#195;&#188;ck G-Cam/EFD-2250 (part n&#194;&#176; 5.02024) firmware and Topline TopFD-2125 (part n&#194;&#176; 5.02820) firmware Problem Types: CWE-284 Description: An improper access control vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which could allow a full configuration download, including passwords. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-079-01 - http://www.securityfocus.com
E Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-079-01 - http://www.securityfocus.com/bid/103474
CVE ID: CVE-2018-7521 State: PUBLISHED Published: 2018-03-21T20:00:00Z Last Updated: 2024-09-16T19:04:25.113Z Vendors: ICS-CERT Products: Omron CX-Supervisor Problem Types: CWE-416 Description: In Omron CX-Supervisor Versions 3.30 and prior, use after free vulnerabilities can be exploited when CX Supervisor parses a specially crafted project file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103394 - https://ics-cert.us-cert.gov/advisories/ICSA-18-072-01
CVE ID: CVE-2018-7522 State: PUBLISHED Published: 2018-05-04T17:00:00Z Last Updated: 2024-09-17T00:02:25.672Z Vendors: Schneider Electric Products: Triconex Tricon Problem Types: CWE-119 Description: In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, when a system call is made, registers are stored to a fixed memory location. Modifying the data in this location could allow attackers to gain supervisor-level access and control system states. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2017-347-01/ - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-02 - http://www.securityfocus.co
wnload/document/SEVD-2017-347-01/ - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-02 - http://www.securityfocus.com/bid/103947
CVE ID: CVE-2018-7523 State: PUBLISHED Published: 2018-03-21T20:00:00Z Last Updated: 2024-09-16T16:37:44.622Z Vendors: ICS-CERT Products: Omron CX-Supervisor Problem Types: CWE-415 Description: In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a double free vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103394 - https://ics-cert.us-cert.gov/advisories/ICSA-18-072-01
CVE ID: CVE-2018-7524 State: PUBLISHED Published: 2018-03-22T18:00:00Z Last Updated: 2024-09-16T19:21:11.744Z Vendors: Geutebr&#195;&#188;ck Products: Geutebr&#195;&#188;ck G-Cam/EFD-2250 (part n&#194;&#176; 5.02024) firmware and Topline TopFD-2125 (part n&#194;&#176; 5.02820) firmware Problem Types: CWE-352 Description: A cross-site request forgery vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow an unauthorized user to be added to the system. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-079-01 - http://www.securityfocus.com/bid
ogram Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-079-01 - http://www.securityfocus.com/bid/103474
CVE ID: CVE-2018-7525 State: PUBLISHED Published: 2018-03-21T20:00:00Z Last Updated: 2024-09-16T20:21:41.541Z Vendors: ICS-CERT Products: Omron CX-Supervisor Problem Types: CWE-822 Description: In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untrusted pointer dereference vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103394 - https://ics-cert.us-cert.gov/advisories/ICSA-18-072-01
CVE ID: CVE-2018-7526 State: PUBLISHED Published: 2018-05-24T20:00:00 Last Updated: 2024-08-05T06:31:03.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TotalAlert Web Application in BeaconMedaes Scroll Medical Air Systems prior to v4107600010.23, by accessing a specific uniform resource locator (URL) on the webserver, a malicious user may be able to access information in the application without authenticating. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-18-144-01
CVE ID: CVE-2018-7527 State: PUBLISHED Published: 2018-04-26T20:00:00Z Last Updated: 2024-09-16T23:46:12.317Z Vendors: WECON Technology Co., Ltd. Products: LeviStudio HMI Editor, PI Studio HMI Project Programmer Problem Types: CWE-121 Description: A buffer overflow can be triggered in LeviStudio HMI Editor, Version 1.10 part of Wecon LeviStudioU 1.8.29, and PI Studio HMI Project Programmer, Build: November 11, 2017 and prior by opening a specially crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104016 - https://ics-cert.us-cert.gov/advisories/ICSA-18-116-02
CVE ID: CVE-2018-7528 State: PUBLISHED Published: 2018-03-22T18:00:00Z Last Updated: 2024-09-16T17:09:16.690Z Vendors: Geutebr&#195;&#188;ck Products: Geutebr&#195;&#188;ck G-Cam/EFD-2250 (part n&#194;&#176; 5.02024) firmware and Topline TopFD-2125 (part n&#194;&#176; 5.02820) firmware Problem Types: CWE-89 Description: An SQL injection vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow an attacker to alter stored data. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-079-01 - http://www.securityfocus.com/bid/103474
CVE ID: CVE-2018-7529 State: PUBLISHED Published: 2018-03-14T18:00:00 Last Updated: 2024-08-05T06:31:04.366Z Vendors: n/a Products: OSIsoft PI Data Archive Problem Types: CWE-502 Description: A Deserialization of Untrusted Data issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may modify deserialized data to send custom requests that crash the server. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-072-02 - http://www.securityfocus.com/bid/103399
CVE ID: CVE-2018-7530 State: PUBLISHED Published: 2018-04-17T19:00:00Z Last Updated: 2024-09-16T16:28:21.613Z Vendors: ICS-CERT Products: Omron CX-One Problem Types: CWE-843 Description: Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior, may allow the pointer to call an incorrect object resulting in an access of resource using incompatible type condition. Additional Analyst Notes: - CVE Program
ct object resulting in an access of resource using incompatible type condition. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-100-02
CVE ID: CVE-2018-7531 State: PUBLISHED Published: 2018-03-14T18:00:00 Last Updated: 2024-08-05T06:31:04.271Z Vendors: n/a Products: OSIsoft PI Data Archive Problem Types: CWE-20 Description: An Improper Input Validation issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may use unvalidated custom requests to crash the server. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-072-02 - http://www.securityfocus.com/bid/103399
CVE ID: CVE-2018-7532 State: PUBLISHED Published: 2018-03-22T18:00:00Z Last Updated: 2024-09-16T22:30:43.571Z Vendors: Geutebr&#195;&#188;ck Products: Geutebr&#195;&#188;ck G-Cam/EFD-2250 (part n&#194;&#176; 5.02024) firmware and Topline TopFD-2125 (part n&#194;&#176; 5.02820) firmware Problem Types: CWE-287 Description: Unauthentication vulnerabilities have been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-079-01 - https://randorisec.fr/0day-anonymous-rce-on-geutebruck-ip-cameras-
ps://ics-cert.us-cert.gov/advisories/ICSA-18-079-01 - https://randorisec.fr/0day-anonymous-rce-on-geutebruck-ip-cameras-again/ - http://www.securityfocus.com/bid/103474