9719 matches found
Hardcoded credentials
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password to encrypt protected files in transit and at rest, which may allow an attacker to access configuration files...
Input validation
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that operates outside of the designated memory area...
CVE-2019-10984
CVE-2019-10984 affects Red Lion Crimson (versions 3.0 and earlier; 3.1 before 3112.00). Root cause: uninitialized pointer in CD3 file parsing leading to arbitrary code execution. Exploitation details in sources indicate remote code execution via a specially crafted input file (and in some reports...
CVE-2019-10984
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that causes the program to mishandle pointers...
CVE-2019-10984
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that causes the program to mishandle pointers...
CVE-2019-10978
CVE-2019-10978 applies to Red Lion Controls Crimson, versions 3.0 and prior, and 3.1 prior to release 3112.00. Connected sources describe multiple vulnerabilities triggered when a valid user opens a specially crafted input file, allowing memory corruption via parsing outside designated memory are...
CVE-2019-10978
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that operates outside of the designated memory area...
CVE-2019-10996
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that can reference memory after it has been freed...
CVE-2019-10996
CVE-2019-10996 affects Red Lion Crimson, versions 3.0 and earlier and 3.1 up to release 3112.00. The issue is a use-after-free in processing a specially crafted input file, referenced in multiple connected documents; exploitation could allow code execution or crash when a valid user opens a malic...
CVE-2019-10990
CVE-2019-10990 affects Red Lion Controls Crimson: versions 3.0 and earlier, and 3.1 prior to release 3112.00 use a hard-coded password to encrypt protected files in transit and at rest, potentially exposing configuration files. This is documented in multiple sources (including Red Lion advisories...
CVE-2019-10990
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password to encrypt protected files in transit and at rest, which may allow an attacker to access configuration files...
USN-4134-2: IBus regression
USN-4134-1 fixed a vulnerability in IBus. The security fix introduced a regression when being used with Qt applications. This update reverts the security fix pending further investigation. Original advisory details: Simon McVittie discovered that IBus did not enforce appropriate access controls o...
Denial of Service Vulnerability in the Kernel Module of Guangfa Bank Security Controls
As one of the first joint-stock commercial banks organized in China, Guangfa Bank is committed to building the best retail bank and the most efficient SME bank in China. A denial of service vulnerability exists in the kernel module of the Guangfa Bank security control, which can be exploited by a...
Buffer Overflow Vulnerability in the Kernel Module of Guangfa Bank Security Controls
As one of the first joint-stock commercial banks organized in China, Guangfa Bank is committed to building the best retail bank and the most efficient SME bank in China. A buffer overflow vulnerability exists in the kernel module of the Guangfa Bank security control, which can be exploited by an...
CVE-2019-10996: Use After Free
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that can reference memory after it has been freed...
CVE-2019-10990: Use of Hard-coded Cryptographic Key
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password to encrypt protected files in transit and at rest, which may allow an attacker to access configuration files...
CVE-2019-10984: Undefined Security Weakness
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that causes the program to mishandle pointers...
CVE-2019-10978: Improper Restriction of Operations within the Bounds of a Memory Buffer
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that operates outside of the designated memory area...
CVE-2019-11210
The server component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, and TIBCO Spotfire Analytics Platform for AWS Marketplace contains a vulnerability that theoretically allows an unauthenticated user to bypass access controls and remotely execute code using the operati...
Input validation
The server component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, and TIBCO Spotfire Analytics Platform for AWS Marketplace contains a vulnerability that theoretically allows an unauthenticated user to bypass access controls and remotely execute code using the operati...