CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 18/08/2021 |
| CVE-2021-21867 | ALTO7.8 | An unsafe deserialization vulnerability exists in the ObjectManager.plugin ObjectStream.ProfileByteArray functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability. | 18/08/2021 |
| CVE-2021-21863 | ALTO7.8 | A unsafe deserialization vulnerability exists in the ComponentModel Profile.FromFile() functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability. | 05/08/2021 |
| CVE-2021-36765 | ALTO7.5 | In CODESYS EtherNetIP before 4.1.0.0, specific EtherNet/IP requests may cause a null pointer dereference in the downloaded vulnerable EtherNet/IP stack that is executed by the CODESYS Control runtime system. | 04/08/2021 |
| CVE-2021-36764 | ALTO7.5 | In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference. Crafted communication requests may cause a Null pointer dereference in the affected CODESYS products and may result in a denial-of-service condition. | 04/08/2021 |
| CVE-2021-36763 | ALTO7.5 | In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties. | 03/08/2021 |
| CVE-2021-33486 | ALTO7.5 | All versions of the CODESYS V3 Runtime Toolkit for VxWorks from version V3.5.8.0 and before version V3.5.17.10 have Improper Handling of Exceptional Conditions. | 03/08/2021 |
| CVE-2021-33485 | CRITICO9.8 | CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow. | 03/08/2021 |
| CVE-2021-21866 | ALTO7.8 | A unsafe deserialization vulnerability exists in the ObjectManager.plugin ProfileInformation.ProfileData functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability. | 02/08/2021 |
| CVE-2021-21865 | ALTO7.8 | A unsafe deserialization vulnerability exists in the PackageManagement.plugin ExtensionMethods.Clone() functionality of CODESYS GmbH CODESYS Development System 3.5.16. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability. | 02/08/2021 |
| CVE-2021-21864 | ALTO7.8 | A unsafe deserialization vulnerability exists in the ComponentModel ComponentManager.StartupCultureSettings functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability | 02/08/2021 |
| CVE-2021-30195 | ALTO7.5 | CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation. | 25/05/2021 |
| CVE-2021-30194 | CRITICO9.1 | CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read. | 25/05/2021 |
| CVE-2021-30193 | CRITICO9.8 | CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write. | 25/05/2021 |
| CVE-2021-30192 | CRITICO9.8 | CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check. | 25/05/2021 |
| CVE-2021-30191 | ALTO7.5 | CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input. | 25/05/2021 |
| CVE-2021-30190 | CRITICO9.8 | CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control. | 25/05/2021 |
| CVE-2021-30189 | CRITICO9.8 | CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow. | 25/05/2021 |