Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This advisory describes a vulnerability in Siemens Mendix Runtime, where documentation fails to clarify the special behavior of the System.User entity. This gap can lead developers to set overly permissive access rules, causing sensitive data exposure or privilege escalation.
View CSAF Summary ABB has been contacted by a researcher who identified a vulnerability in one of its products.
A vulnerability in Siemens SIMATIC S7-PLCSIM Advanced allows an unauthenticated attacker to cause a denial of service by sending high-volume multicast traffic. The affected application becomes inaccessible and requires a manual restart, but no project data is lost.
CISA disclosed a vulnerability in igloohome Smart Lock Mobile Application where successful exploitation could allow unauthorized actors to access backend services and sensitive functions.
View CSAF Summary Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.6 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl.
View CSAF Summary OpenSSL has published a stack based buffer overflow vulnerability that allows a remote attacker to cause a denial of service (DoS) or potentially allow for remote code execution.