CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 18/08/2021 |
| CVE-2021-21867 | 높음7.8 | An unsafe deserialization vulnerability exists in the ObjectManager.plugin ObjectStream.ProfileByteArray functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability. | 18/08/2021 |
| CVE-2021-21863 | 높음7.8 | A unsafe deserialization vulnerability exists in the ComponentModel Profile.FromFile() functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability. | 05/08/2021 |
| CVE-2021-36765 | 높음7.5 | In CODESYS EtherNetIP before 4.1.0.0, specific EtherNet/IP requests may cause a null pointer dereference in the downloaded vulnerable EtherNet/IP stack that is executed by the CODESYS Control runtime system. | 04/08/2021 |
| CVE-2021-36764 | 높음7.5 | In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference. Crafted communication requests may cause a Null pointer dereference in the affected CODESYS products and may result in a denial-of-service condition. | 04/08/2021 |
| CVE-2021-36763 | 높음7.5 | In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties. | 03/08/2021 |
| CVE-2021-33486 | 높음7.5 | All versions of the CODESYS V3 Runtime Toolkit for VxWorks from version V3.5.8.0 and before version V3.5.17.10 have Improper Handling of Exceptional Conditions. | 03/08/2021 |
| CVE-2021-33485 | 심각9.8 | CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow. | 03/08/2021 |
| CVE-2021-21866 | 높음7.8 | A unsafe deserialization vulnerability exists in the ObjectManager.plugin ProfileInformation.ProfileData functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability. | 02/08/2021 |
| CVE-2021-21865 | 높음7.8 | A unsafe deserialization vulnerability exists in the PackageManagement.plugin ExtensionMethods.Clone() functionality of CODESYS GmbH CODESYS Development System 3.5.16. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability. | 02/08/2021 |
| CVE-2021-21864 | 높음7.8 | A unsafe deserialization vulnerability exists in the ComponentModel ComponentManager.StartupCultureSettings functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability | 02/08/2021 |
| CVE-2021-30195 | 높음7.5 | CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation. | 25/05/2021 |
| CVE-2021-30194 | 심각9.1 | CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read. | 25/05/2021 |
| CVE-2021-30193 | 심각9.8 | CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write. | 25/05/2021 |
| CVE-2021-30192 | 심각9.8 | CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check. | 25/05/2021 |
| CVE-2021-30191 | 높음7.5 | CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input. | 25/05/2021 |
| CVE-2021-30190 | 심각9.8 | CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control. | 25/05/2021 |
| CVE-2021-30189 | 심각9.8 | CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow. | 25/05/2021 |