Lucene search
+L

130 matches found

OSV
OSV
added 2023/01/03 3:15 a.m.5 views

CVE-2022-47908

Stack-based buffer overflow vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file...

7.8CVSS6.3AI score0.00253EPSS
Exploits0References2
Prion
Prion
added 2023/01/03 3:15 a.m.19 views

Cross site scripting

Out-of-bounds write vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file...

4.4CVSS7.6AI score0.00228EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2023/01/03 3:15 a.m.17 views

Cross site scripting

Out-of-bounds read vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file...

4.4CVSS7.5AI score0.00228EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/03 12:0 a.m.8 views

PT-2023-15238 · V-Server · V-Server

Name of the Vulnerable Software and Affected Versions: V-Server versions 4.0.12.0 and earlier Description: The issue is an out-of-bounds write vulnerability that allows a local attacker to obtain information and/or execute arbitrary code. This can be achieved by having a user open a specially...

7.8CVSS7.3AI score0.00228EPSS
Exploits0References5
Cvelist
Cvelist
added 2023/01/03 12:0 a.m.22 views

CVE-2022-41645

Out-of-bounds read vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file...

7.8AI score0.00228EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/01/03 12:0 a.m.4 views

Fuji Electric V-Server 缓冲区错误漏洞

Fuji Electric V-Server is a software package for collecting and managing real-time field data. An out-of-bounds write vulnerability exists in Fuji Electric V-Server, which can be exploited by an attacker to obtain information and execute arbitrary code by allowing a user to open a specially craft...

7.8CVSS7.5AI score0.00228EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/01/03 12:0 a.m.7 views

PT-2023-14006 · V-Server · V-Server

Name of the Vulnerable Software and Affected Versions: V-Server versions 4.0.12.0 and earlier Description: The issue is an out-of-bounds read vulnerability that allows a local attacker to obtain information and/or execute arbitrary code by having a user open a specially crafted project file...

7.8CVSS7.4AI score0.00228EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2023/01/03 12:0 a.m.8 views

PT-2023-15523 · V-Server · V-Server

Name of the Vulnerable Software and Affected Versions: V-Server versions 4.0.12.0 and earlier Description: A stack-based buffer overflow issue allows a local attacker to obtain information and/or execute arbitrary code by having a user open a specially crafted project file. Recommendations: For...

7.8CVSS8AI score0.00253EPSS
Exploits0References4
OSV
OSV
added 2021/12/17 5:15 p.m.7 views

CVE-2021-20607

Integer Underflow vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric EZSocket versions 5.4 and prior allows an attacker to cause a DoS condition in the software by getting a user to open...

5.5CVSS6.1AI score0.00932EPSS
Exploits0References3
NVD
NVD
added 2021/11/05 4:15 p.m.24 views

CVE-2021-42543

The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, system reboot, and system shutdown...

7.8CVSS0.00766EPSS
Exploits0References1
OSV
OSV
added 2021/11/05 4:15 p.m.6 views

CVE-2021-42701

An attacker could prepare a specially crafted project file that, if opened, would attempt to connect to the cloud and trigger a man in the middle MiTM attack. This could allow an attacker to obtain credentials and take over the user’s cloud account...

6.3CVSS6.6AI score0.0057EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2021/11/05 4:15 p.m.4 views

CVE-2021-42701

An attacker could prepare a specially crafted project file that, if opened, would attempt to connect to the cloud and trigger a man in the middle MiTM attack. This could allow an attacker to obtain credentials and take over the user’s cloud account...

6.3CVSS6.6AI score0.0057EPSS
Exploits0References2
Prion
Prion
added 2021/11/05 4:15 p.m.19 views

Code injection

The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, system reboot, and system shutdown...

7.5CVSS7.5AI score0.00766EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/11/05 3:39 p.m.55 views

CVE-2021-42701

CVE-2021-42701 relates to AzeoTech DAQFactory. A crafted project file can trigger a MiTM attempt by connecting to the cloud, potentially exposing credentials and enabling takeover of a user’s cloud account. Affected products: DAQFactory up to all versions 18.1 Build 2347 and earlier. Root cause d...

6.3CVSS5.7AI score0.0057EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/11/05 3:39 p.m.27 views

CVE-2021-42543 AzeoTech DAQFactory

The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, system reboot, and system shutdown...

7.8CVSS7.8AI score0.00766EPSS
Exploits0References1
CVE
CVE
added 2021/11/05 3:39 p.m.54 views

CVE-2021-42543

CVE-2021-42543 affects DAQFactory by AzeoTech. The vulnerability arises from Use of Inherently Dangerous Function (CWE-242) in DAQFactory project file handling, allowing a crafted project file to trigger code execution, potentially leading to system reboot or shutdown. Affected products: DAQFacto...

7.8CVSS7.6AI score0.00766EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2021/10/26 12:0 a.m.6 views

Fuji Electric V-Server Lite 安全漏洞

Fuji Electric V-Server Lite is a remote monitoring software for industrial environments from Fuji Electric Japan. The software collects information from devices such as PLCs, temperature controllers, and inverters. A security vulnerability exists in Fuji Electric Tellus Lite V-Simulator and...

7.8CVSS8.1AI score0.00973EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2021/09/02 4:53 p.m.6 views

CVE-2021-22792

A CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU par...

7.2AI score0.00929EPSS
Exploits0References1
OSV
OSV
added 2021/08/30 6:15 p.m.3 views

CVE-2021-33007

A heap-based buffer overflow in Delta Electronics TPEditor: v1.98.06 and prior may be exploited by processing a specially crafted project file. Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.01068EPSS
Exploits0References1
OSV
OSV
added 2021/08/30 6:15 p.m.5 views

CVE-2021-33019

A stack-based buffer overflow vulnerability in Delta Electronics DOPSoft Version 4.00.11 and prior may be exploited by processing a specially crafted project file, which may allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.02376EPSS
Exploits0References2
Rows per page
Query Builder