https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-67634.htmlhttps://patchthecve.com/cve/CVE-2025-67634.htmlWed, 07 Oct 2026 20:10:01 +0000MEDIUM 4.4: The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting via text fields. If an attacker could convince a user to import a specially-crafted JSON file, the Tool would load JavaScript from the file into the page. The JavaScript would exechttps://patchthecve.com/cve/CVE-2023-7244.htmlhttps://patchthecve.com/cve/CVE-2023-7244.htmlWed, 17 Jun 2026 06:52:23 +0000CRITICAL 9.8: Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write in their primary analyses function for Ethercat communication packets. This could allow an attacker to cause arbitrary code execution. https://patchthecve.com/cve/CVE-2023-7243.htmlhttps://patchthecve.com/cve/CVE-2023-7243.htmlWed, 17 Jun 2026 06:52:23 +0000CRITICAL 9.8: Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write while analyzing specific Ethercat datagrams. This could allow an attacker to cause arbitrary code execution. https://patchthecve.com/cve/CVE-2023-7242.htmlhttps://patchthecve.com/cve/CVE-2023-7242.htmlWed, 17 Jun 2026 06:52:23 +0000HIGH 8.2: Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds read during the process of analyzing a specific Ethercat packet. This could allow an attacker to crash the Zeek process and leak some information in me