|
247681
|
9.8 |
CRITICAL
Network
|
yokogawa
|
fcj_firmware fcn-100_firmware fcn-rtu_firmware fcn-500_firmware
|
Yokogawa STARDOM FCJ controllers R4.02 and prior, FCN-100 controllers R4.02 and prior, FCN-RTU controllers R4.02 and prior, and FCN-500 controllers R4.02 and prior utilize hard-coded credentials that…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2018-10592
|
2024-11-21 12:41 |
2018-08-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247682
|
9.8 |
CRITICAL
Network
|
aveva
|
intouch_2017 intouch_2014
|
AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update 2 allow an unauthenticated user to send a specially crafted packet that could overflow the buffer on …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-10628
|
2024-11-21 12:41 |
2018-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247683
|
7.5 |
HIGH
Network
|
moxa
|
nport_5230_firmware nport_5232_firmware nport_5210_firmware
|
In Moxa NPort 5210, 5230, and 5232 versions 2.9 build 17030709 and prior, the amount of resources requested by a malicious actor are not restricted, allowing for a denial-of-service condition.
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2018-10632
|
2024-11-21 12:41 |
2018-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247684
|
9.8 |
CRITICAL
Network
|
echelon
|
smartserver_1_firmware smartserver_2_firmware i.lon_100_firmware
|
Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. An attacker can use the SOAP API to retrieve and change s…
|
CWE-200
Information Exposure
|
CVE-2018-10627
|
2024-11-21 12:41 |
2018-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247685
|
7.5 |
HIGH
Network
|
selinc
|
acselerator_architect
|
SEL AcSELerator Architect version 2.2.24.0 and prior can be exploited when the AcSELerator Architect FTP client connects to a malicious FTP server, which may cause denial of service via 100% CPU util…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2018-10608
|
2024-11-21 12:41 |
2018-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247686
|
8.8 |
HIGH
Network
|
selinc
|
sel_compass
|
SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory, which may allow modification or overwriting of files within the Compass installation folder, resulting…
|
CWE-276
Incorrect Default Permissions
|
CVE-2018-10604
|
2024-11-21 12:41 |
2018-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247687
|
9.8 |
CRITICAL
Network
|
selinc
|
acselerator_architect
|
SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the XML parser, which may allow disclosure and retrieval of arbitrary data, arbitrary code execution (in …
|
CWE-611
XXE
|
CVE-2018-10600
|
2024-11-21 12:41 |
2018-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247688
|
9.8 |
CRITICAL
Network
|
aveva
|
intouch_machine_2017 indusoft_web_studio
|
AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted packet to exploit a stack-based buffer overflow vulner…
|
CWE-787
Out-of-bounds Write
|
CVE-2018-10620
|
2024-11-21 12:41 |
2018-07-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247689
|
7.8 |
HIGH
Local
|
abb
|
panel_builder_800
|
ABB Panel Builder 800 all versions has an improper input validation vulnerability which may allow an attacker to insert and run arbitrary code on a computer where the affected product is used.
|
CWE-20
Improper Input Validation
|
CVE-2018-10616
|
2024-11-21 12:41 |
2018-07-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247690
|
6.8 |
MEDIUM
Physics
|
medtronic
|
n\'vision_8840_firmware n\'vision_8870_firmware
|
Medtronic N'Vision Clinician Programmer 8840 N'Vision Clinician Programmer, all versions, and 8870 N'Vision removable Application Card, all versions. The 8840 Clinician Programmer executes the applic…
|
CWE-693
Protection Mechanism Failure
|
CVE-2018-10631
|
2024-11-21 12:41 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|