Lucene search
K

3981 matches found

Zero Day Initiative
Zero Day Initiative
added 2016/12/15 12:0 a.m.63 views

Delta Industrial Automation WPLSoft Heap Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation WPLSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

6.8CVSS4.9AI score0.00151EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/12/15 12:0 a.m.31 views

Delta Industrial Automation WPLSoft SFC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation WPLSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

6.8CVSS4.9AI score0.00151EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/12/15 12:0 a.m.37 views

Delta Industrial Automation ISPSoft dvp File Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation ISPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

6.8CVSS3.5AI score0.00209EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/12/15 12:0 a.m.16 views

Delta Industrial Automation PMSoft File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation PMSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.5CVSS5.2AI score0.00151EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/12/15 12:0 a.m.19 views

Delta Industrial Automation WPLSoft dvp File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation WPLSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

6.8CVSS5.3AI score0.00209EPSS
Exploits0References1
ICS
ICS
added 2016/09/16 6:0 a.m.283 views

Delta Electronics WPLSoft, ISPSoft, and PMSoft Vulnerabilities

OVERVIEW Researchers axt and Ariele Caltabiano each working with Trend Micro's Zero Day Initiative ZDI have identified vulnerabilities in Delta Electronics’ WPLSoft, ISPSoft, and PMSoft software applications. Delta Electronics has produced new software versions to mitigate these vulnerabilities...

7.8CVSS8.3AI score0.00209EPSS
Exploits0References10
Openbugbounty
Openbugbounty
added 2016/08/29 11:16 a.m.11 views

deltafarmpress.com XSS vulnerability

Vulnerable URL: http://deltafarmpress.com/search/results/" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 582676 VIP website status:| No Check...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2016/08/23 8:39 p.m.10 views

zt.delta.com XSS vulnerability

Vulnerable URL: https://zt.delta.com/smlogin/skymilesloginNow.action?refreshURL=%22%3E%3Caudio/onloadstart=%28confirm%28%22OPENBUGBOUNTY%22%29%29%20src%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2016/08/04 7:56 p.m.5 views

delta-v-setup.be XSS vulnerability

Open Bug Bounty ID: OBB-172047 Description| Value ---|--- Affected Website:| delta-v-setup.be Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

6.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2016/05/04 12:0 a.m.31 views

Amazon Linux AMI : mercurial (ALAS-2016-697)

It was discovered that Mercurial failed to properly check Git sub-repository URLs. A Mercurial repository that includes a Git sub-repository with a specially crafted URL could cause Mercurial to execute arbitrary code. CVE-2016-3068 The binary delta decoder in Mercurial before 3.7.3 allows remote...

8.8CVSS7.6AI score0.05192EPSS
Exploits0References4
OPENSUSE Linux
OPENSUSE Linux
added 2016/04/17 5:11 p.m.33 views

Security update for mercurial (important)

mercurial was updated to fix three security issues. These security issues were fixed: - CVE-2016-3069: Arbitrary code execution when converting Git repos bsc973176. - CVE-2016-3068: Arbitrary code execution with Git subrepos bsc973177. - CVE-2016-3630: Remote code execution in binary delta decodi...

6.8CVSS2.7AI score0.05192EPSS
Exploits0References3
OSV
OSV
added 2016/04/13 4:59 p.m.6 views

CVE-2016-3630

The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a 1 clone, 2 push, or 3 pull command, related to a a list sizing rounding error and b short records...

8.8CVSS8.9AI score
Exploits0References12
OSV
OSV
added 2016/04/13 4:59 p.m.2 views

DEBIAN-CVE-2016-3630

The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a 1 clone, 2 push, or 3 pull command, related to a a list sizing rounding error and b short records...

8.8CVSS8.8AI score0.05192EPSS
Exploits0References1
OSV
OSV
added 2016/04/13 4:59 p.m.34 views

PYSEC-2016-29

The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a 1 clone, 2 push, or 3 pull command, related to a a list sizing rounding error and b short records...

8.8CVSS7.6AI score0.05192EPSS
Exploits0References13
Prion
Prion
added 2016/04/13 4:59 p.m.20 views

Command injection

The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a 1 clone, 2 push, or 3 pull command, related to a a list sizing rounding error and b short records...

6.8CVSS8AI score0.05192EPSS
Exploits0References12Affected Software7
OSV
OSV
added 2016/04/13 4:59 p.m.2 views

UBUNTU-CVE-2016-3630

The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a 1 clone, 2 push, or 3 pull command, related to a a list sizing rounding error and b short records...

8.8CVSS7.7AI score0.05192EPSS
Exploits0References5
PyPA
PyPA
added 2016/04/13 4:59 p.m.6 views

PYSEC-2016-29

The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a 1 clone, 2 push, or 3 pull command, related to a a list sizing rounding error and b short records...

8.8CVSS8AI score0.05192EPSS
Exploits0References13Affected Software1
Cvelist
Cvelist
added 2016/04/13 4:0 p.m.26 views

CVE-2016-3630

The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a 1 clone, 2 push, or 3 pull command, related to a a list sizing rounding error and b short records...

8.8AI score0.05192EPSS
Exploits0References12
CVE
CVE
added 2016/04/13 4:0 p.m.82 views

CVE-2016-3630

CVE-2016-3630 : Mercurial versions before 3.7.3 are affected by a binary delta decoder vulnerability that could allow remote code execution via clone, push, or pull due to a list sizing rounding error and short records. Connected advisories indicate the fix is to upgrade Mercurial to 3.7.3 or new...

8.8CVSS8.7AI score0.05192EPSS
Exploits0References12Affected Software1
OpenVAS
OpenVAS
added 2016/04/13 12:0 a.m.26 views

openSUSE: Security Advisory for mercurial (openSUSE-SU-2016:1016-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7AI score0.05192EPSS
Exploits0References1
Rows per page
Query Builder