Lucene search
+L

4668 matches found

osv_suse
osv_suse
•added 2025/03/31 2:21 p.m.•5 views

SUSE-SU-2025:20257-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2025-1632: Fixed null pointer dereference in bsdunzip.c bsc1237606 - CVE-2025-25724: Fixed Buffer Overflow vulnerability in libarchive bsc1238610 - CVE-2024-48958: Fixed out-of-bounds access in executefilterdelta bsc1231624 -...

7.8CVSS7AI score0.87896EPSS
SaveExploits5References14
SUSE Linux
SUSE Linux
•added 2025/03/31 2:21 p.m.•6 views

Security update for libarchive

This update for libarchive fixes the following issues: CVE-2025-1632: Fixed null pointer dereference in bsdunzip.c bsc1237606 CVE-2025-25724: Fixed Buffer Overflow vulnerability in libarchive bsc1238610 CVE-2024-48958: Fixed out-of-bounds access in executefilterdelta bsc1231624 CVE-2024-20697:...

7.8CVSS8.2AI score0.87896EPSS
SaveExploits5References26
CNVD
CNVD
•added 2025/03/24 12:00 a.m.•127 views

Delta Electronics CNCSoft-G2 Input Validation Error Vulnerability

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. An input validation error vulnerability exists in Delta Electronics CNCSoft-G2 version 2.1.0.16 and prior versions, which can be exploited by an attacker to execute code in the current process...

7AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/15 5:05 p.m.•30 views

CVE-2024-12858

Delta Electronics CNCSoft-G2 Version 2.1.0.16 and prior lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in...

7.2AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/03/13 4:47 p.m.•7 views

CVE-2024-12858

...

8.7AI score
SaveExploits0
Cvelist
Cvelist
•added 2025/03/13 4:47 p.m.•26 views

CVE-2024-12858

...

SaveExploits0
CVE
CVE
•added 2025/03/13 4:47 p.m.•153 views

CVE-2024-12858

Delta Electronics CNCSoft-G2 suffers from a buffer overflow caused by improper validation of the length of user-supplied data prior to copying it into a fixed-length heap-based buffer. Affects CNCSoft-G2 version 2.1.0.16 and earlier; exploitation could allow code execution in the current process ...

7.6AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/03/13 12:00 a.m.•19 views

编号撤回

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. An input validation error vulnerability exists in Delta Electronics CNCSoft-G2 version 2.1.0.16 and prior versions, which can be exploited by an attacker to execute code in the current process...

7.2AI score
SaveExploits0References3
CISA
CISA
•added 2025/03/04 12:00 p.m.•24 views

CISA Releases Eight Industrial Control Systems Advisories

CISA released eight Industrial Control Systems ICS advisories on March 4, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-063-01 Carrier Block Load ICSA-25-063-02 Keysight Ixia Vision Product Family...

7AI score
SaveExploits0References8
ICS
ICS
•added 2025/03/04 7:00 a.m.•27 views

Delta Electronics CNCSoft-G2

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute code remotely. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds organizations to perform proper impact...

8.4CVSS7.1AI score0.00274EPSS
SaveExploits0References10
Zero Day Initiative
Zero Day Initiative
•added 2025/03/03 12:00 a.m.•16 views

(0Day) Delta Electronics ISPSoft DVP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics ISPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/03/03 12:00 a.m.•16 views

(0Day) Delta Electronics ISPSoft CBDGL File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics ISPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/03/03 12:00 a.m.•22 views

(0Day) Delta Electronics ISPSoft DVP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics ISPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/02/28 4:18 a.m.•15 views

CVE-2025-22881

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current...

8.4CVSS7.2AI score0.00274EPSS
SaveExploits0References3
OSS-Fuzz
OSS-Fuzz
•added 2025/02/26 11:55 a.m.•28 views

harfbuzz:hb-shape-fuzzer: Use-of-uninitialized-value in OT::SparseVariationRegion::evaluate

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6089638800588800 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-shape-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

5.4AI score
SaveExploits0
osv_cve
osv_cve
•added 2025/02/26 8:14 a.m.•15 views

CVE-2025-22881

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current...

7.8CVSS6AI score0.00274EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/26 8:14 a.m.•20 views

CVE-2025-22881

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current...

8.4CVSS0.00274EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/26 12:00 a.m.•4 views

PT-2025-8231

Name of the Vulnerable Software and Affected Versions Delta Electronics CNCSoft-G2 affected versions not specified Description The issue arises from a lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This can be exploited if a...

8.4CVSS0.00274EPSS
SaveExploits0References26
CNNVD
CNNVD
•added 2025/02/26 12:00 a.m.•20 views

Delta Electronics CNCSoft-G2 安全漏洞

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. The Delta Electronics CNCSoft-G2 suffers from a buffer overflow vulnerability that originates from insufficient validation of user-supplied data lengths, which can be exploited by an attacker to...

8.4CVSS7.6AI score0.00274EPSS
SaveExploits0References2
CISA
CISA
•added 2025/02/18 12:00 p.m.•28 views

CISA Releases Two Industrial Control Systems Advisories

CISA released two Industrial Control Systems ICS advisories on February 18, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-191-01 Delta Electronics CNCSoft-G2 Update A ICSA-25-035-02 Rockwell Automation...

7AI score
SaveExploits0References2
Rows per page
Query Builder