CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 25/07/2022 |
| CVE-2022-35870 | 높음7.8 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within com.inductiveaut | 25/07/2022 |
| CVE-2022-35869 | 심각9.8 | This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Authentication is not required to exploit this vulnerability. The specific flaw exists within com.inductiveautomation.ignition.gateway.web.pages. The issue results from th | 25/07/2022 |
| CVE-2022-1264 | 높음8.8 | The affected product may allow an attacker with access to the Ignition web configuration to run arbitrary code. | 20/07/2022 |
| CVE-2022-36126 | 높음7.2 | An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17. The ScriptInvoke function allows remote attackers to execute arbitrary code by supplying a Python script. | 16/07/2022 |
| CVE-2022-35890 | 심각9.8 | An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17. Designer and Vision Client Session IDs are mishandled. An attacker can determine which session IDs were generated in the past and then hijack sessions assigned to these IDs via Randy. | 15/07/2022 |
| CVE-2020-14479 | 보통5.3 | Sensitive information can be obtained through the handling of serialized data. The issue results from the lack of proper authentication required to query the server | 01/04/2022 |
| CVE-2015-0995 | 보통5.0 | Inductive Automation Ignition 7.7.2 uses MD5 password hashes, which makes it easier for context-dependent attackers to obtain access via a brute-force attack. | 03/04/2015 |
| CVE-2015-0994 | 보통4.0 | Inductive Automation Ignition 7.7.2 allows remote authenticated users to bypass a brute-force protection mechanism by using different session ID values in a series of HTTP requests. | 03/04/2015 |
| CVE-2015-0993 | 보통6.4 | Inductive Automation Ignition 7.7.2 does not terminate a session upon a logout action, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation. | 03/04/2015 |
| CVE-2015-0992 | 낮음2.1 | Inductive Automation Ignition 7.7.2 stores cleartext OPC Server credentials, which allows local users to obtain sensitive information via unspecified vectors. | 03/04/2015 |
| CVE-2015-0991 | 보통5.0 | Inductive Automation Ignition 7.7.2 allows remote attackers to obtain sensitive information by reading an error message about an unhandled exception, as demonstrated by pathname information. | 03/04/2015 |
| CVE-2015-0976 | 보통4.3 | Cross-site scripting (XSS) vulnerability in Inductive Automation Ignition 7.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 03/04/2015 |