CVE-2018-7530

The CVE-2018-7530 issue is a Type Confusion in Omron CX-One and its integrated apps (e.g., CX-FLnet, CX-Protocol, CX-Programmer, CX-Server, Network Configurator, Switch Box Utility) triggered by parsing malformed project files. This can cause the pointer to call an incorrect object, leading to an...

CVE-2018-8834

Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and...

CVE-2018-7514

Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and...

OMRON CX-One Network Configurator Uz01Eip21 Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OMRON CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of N...

loop.laseroptik.de XSS vulnerability

Vulnerable URL: http://loop.laseroptik.de/app/Configurator.asp?lb=%22%3Eblub%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

Secure Hub Error: Cannot Open Page: Safari cannot open the page because the address is invalid when using Apple Configurator

User sees the app VPP in the store. Clicks to add the app. Gets theError: Cannot Open Page: Safari cannot open the page because the address is invalid...

Preparing iOS Devices for Supervised Mode.

The objective of this document is to explain how user can prepare his device in Supervise Mode using Apple Configurator 2 and enroll his device with XenMobile to apply iOS device policies...

Unspecified Vulnerability in Oracle Supply Chain Products Suite Configurator Component

Oracle Supply Chain Products Suite is a suite of supply chain solutions from Oracle Corporation, of which Oracle Configurator is a configuration component that integrates order management, quoting and selling. An unspecified vulnerability in the JRAD Heartbeat subcomponent of the Oracle...

CVE-2016-3438

Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1, and 12.2 allows remote attackers to affect confidentiality and integrity via vectors related to JRAD Heartbeat. NOTE: the previous information is from the April 2016 CPU. Oracle has...

CVE-2016-3438

Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1, and 12.2 allows remote attackers to affect confidentiality and integrity via vectors related to JRAD Heartbeat. NOTE: the previous information is from the April 2016 CPU. Oracle has...

Cross site scripting

Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1, and 12.2 allows remote attackers to affect confidentiality and integrity via vectors related to JRAD Heartbeat. NOTE: the previous information is from the April 2016 CPU. Oracle has...

CVE-2016-3438

Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1, and 12.2 allows remote attackers to affect confidentiality and integrity via vectors related to JRAD Heartbeat. NOTE: the previous information is from the April 2016 CPU. Oracle has...

CVE-2016-3438

CVE-2016-3438 affects Oracle Supply Chain Products Suite — Configurator component (versions 12.0.6, 12.1, 12.2). Root cause cited as vulnerability in the JRAD Heartbeat subcomponent, allowing remote impact to confidentiality and integrity via unspecified vectors. Public descriptions also note pos...

CVE-2016-3438

Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1, and 12.2 allows remote attackers to affect confidentiality and integrity via vectors related to JRAD Heartbeat. NOTE: the previous information is from the April 2016 CPU. Oracle has...

Car 3D Configurator - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Car 3D Configurator published at the 'play' market has multiple vulnerabilities...

Bike 3D Configurator - SD-card access, Suspicious files, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application Bike 3D Configurator published at the 'play' market has multiple vulnerabilities...

Configurator IPTV - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Configurator IPTV published at the 'play' market has multiple vulnerabilities...

Oracle Supply Chain Configurator UI Servlet Component Data Access Vulnerability

Oracle Supply Chain Products Suite is a suite of supply chain solutions that provides value chain planning, value chain execution, and product lifecycle management. An unspecified security vulnerability exists in the Oracle Supply Chain Configurator UI Servlet component, which allows remote...

Oracle Supply Chain Configurator UI Servlet Component Data Access Vulnerability (CNVD-2016-00561)

Oracle Supply Chain Products Suite is a suite of supply chain solutions that provides value chain planning, value chain execution, and product lifecycle management. An unspecified vulnerability exists in the Oracle Supply Chain Configurator UI Servlet component, which allows remote attackers to...

CVE-2016-0541

Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 11.5.10.2, 12.1, and 12.2 allows remote attackers to affect confidentiality via unknown vectors related to UI Servlet, a different vulnerability than CVE-2016-0540...