Vulnerabilities (CVE)

Filtered by vendor Ge Subscribe
Total 109 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-0651 1 Ge 1 Intelligent Platforms Proficy Real-time Information Portal 2024-02-04 5.0 MEDIUM N/A
The Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to read configuration files, and discover data-source credentials, via a direct request.
CVE-2012-3026 1 Ge 1 Intelligent Platforms Proficy Real-time Information Portal 2024-02-04 10.0 HIGH N/A
rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3010 and CVE-2012-3021.
CVE-2012-0230 1 Ge 1 Intelligent Platforms Proficy Plant Applications 2024-02-04 10.0 HIGH N/A
PRRDS.exe in the Proficy Remote Data Service in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TCP session on port 12299.
CVE-2012-0231 1 Ge 1 Intelligent Platforms Proficy Plant Applications 2024-02-04 10.0 HIGH N/A
PRLicenseMgr.exe in the Proficy Server License Manager in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TCP session on port 12401.
CVE-2012-0229 1 Ge 1 Intelligent Platforms Proficy Historian 2024-02-04 10.0 HIGH N/A
The Data Archiver service in GE Intelligent Platforms Proficy Historian 4.5 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted session on TCP port 14000 to (1) ihDataArchiver.exe or (2) ihDataArchiver_x64.exe.
CVE-2012-0232 1 Ge 1 Intelligent Platforms Proficy Real-time Information Portal 2024-02-04 6.4 MEDIUM N/A
Directory traversal vulnerability in rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6, 3.0, 3.0 SP1, and 3.5 allows remote attackers to modify the configuration via crafted strings.
CVE-2011-1919 1 Ge 1 Intelligent Platforms Proficy Historian 2024-02-04 10.0 HIGH N/A
Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM 43 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted TCP message traffic to (1) PRProficyMgr.exe in Proficy Server Manager, (2) PRGateway.exe in Proficy Server Gateway, (3) PRRDS.exe in Proficy Remote Data Service, or (4) PRLicenseMgr.exe in Proficy Server License Manager.
CVE-2011-3320 1 Ge 1 Intelligent Platforms Proficy Historian 2024-02-04 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in the Web Administrator component in GE Intelligent Platforms Proficy Historian 4.x and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVE-2011-1918 1 Ge 1 Intelligent Platforms Proficy Historian 2024-02-04 10.0 HIGH N/A
Stack-based buffer overflow in the Data Archiver service in GE Intelligent Platforms Proficy Historian before 3.5 SIM 17 and 4.x before 4.0 SIM 12 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted TCP message traffic.