CVE-2023-43821

A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesActionLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code...

CVE-2023-43822

A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesTimeLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code...

CVE-2023-43818

A buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution...

PT-2024-1325 · Delta Electronics · Dopsoft

Name of the Vulnerable Software and Affected Versions: Delta Industrial Automation DOPSoft affected versions not specified Description: A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the InitialMacroLen field of a DPS file. A remote,...

PT-2024-1331 · Delta Industrial Automation · Dopsoft

Name of the Vulnerable Software and Affected Versions: Delta Industrial Automation DOPSoft affected versions not specified Description: A buffer overflow exists in Delta Industrial Automation DOPSoft, allowing a remote, unauthenticated attacker to exploit this issue by enticing a user to open a...

PT-2024-1418 · Delta Electronics · Ispsoft

Name of the Vulnerable Software and Affected Versions: Delta Electronics ISPSoft affected versions not specified Description: A heap buffer-overflow exists in Delta Electronics ISPSoft, allowing an anonymous attacker to exploit this issue by enticing a user to open a specially crafted DVP file,...

Fedora 38 : gtkwave (2024-c990070fa4)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c990070fa4 advisory. Cumulative bug-fix update. This update includes fixes for multiple security issues found by Talos in which specially crafted input files could lead ...

Hancom Office Code Execution

The vulnerability of the PPT-file processor in Hancom Office software is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created PPT-file...

Kofax PowerPDF J2K File Processor Code Execution

The vulnerability of the J2K-file processor in the software for creating, converting, editing, and publishing PDF files from Kofax PowerPDF lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using ...

python-werkzeug: high resource consumption leading to denial of service

A resource consumption flaw was found in python-werkzeug. If a specially crafted file is uploaded by a remote attacker, it may cause a denial of service...

python-werkzeug: high resource consumption leading to denial of service

A resource consumption flaw was found in python-werkzeug. If a specially crafted file is uploaded by a remote attacker, it may cause a denial of service...

EulerOS 2.0 SP10 : elfutils (EulerOS-SA-2023-3205)

According to the versions of the elfutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In elfutils 0.183, an infinite loop was found in the function handlesymtab in readelf.c .Which allows attackers to cause a denial of service...

Denial Of Service

upx-ucl:sid is vulnerable to Denial Of Service. The vulnerability due to a failed crafted file passed to the the readx function unsignedlen getSize. It leads to allows attackers to cause a denial of service...

CVE-2023-51806

File Upload vulnerability in Ujcms v.8.0.2 allows a local attacker to execute arbitrary code via a crafted file...

CVE-2023-51806

File Upload vulnerability in Ujcms v.8.0.2 allows a local attacker to execute arbitrary code via a crafted file...

GTKWave integer overflow vulnerability (CNVD-2024-37203)

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An integer overflow vulnerability exists in GTKWave version 3.3.118, which can be exploited by an attacker to potentially cause arbitrary code execution via a specially crafted fst file...

GTKWave integer overflow vulnerability (CNVD-2024-37758)

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An integer overflow vulnerability exists in GTKWave version 3.3.118, which can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

PT-2024-1078 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient access control in Microsoft Edge, which can be exploited by an attacker to elevate their privileges using a specially crafted file...

Struts2 Code Execution

The vulnerability of the Struts2 component in the software for managing power sources of Voltronic Power ViewPower Pro is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

CVE-2023-50120

MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop in the function av1uvlc at mediatools/avparsers.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted MP4 file...