Design/Logic Flaw

The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

Design/Logic Flaw

The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system integrity...

Design/Logic Flaw

Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity...

Siemens PADS Standard/Plus Viewer 缓冲区错误漏洞

PADS Standard and Standard Plus provide PCB schematic design and layout functionality in an intuitive and easy-to-use environment.An out-of-bounds write vulnerability exists in Siemens PADS Standard/Plus Viewer, which could be exploited by an attacker to execute code in the context of the current...

Siemens PADS Standard/Plus Viewer 缓冲区错误漏洞

PADS Standard and Standard Plus provide PCB schematic design and layout functionality in an intuitive and easy-to-use environment.An out-of-bounds write vulnerability exists in Siemens PADS Standard/Plus Viewer, which could be exploited by an attacker to execute code in the context of the current...

CVE-2021-46741

The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system integrity...

Design/Logic Flaw

In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that no specific affected product had been identified. Notes: none...

The vulnerability of Schneider Electric CanBrass software for designing and calculating the cost of hose pipelines lies in the fact that operations can be executed outside the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Schneider Electric CanBrass’s software for designing and calculating hose pipe costs is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

PT-2022-12912 · Huawei · Emui +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to defects in the basic framework and setting module, which were introduced during the design phase. Successful exploitation of this issue may impact system...

shahindesign.ir Cross Site Scripting vulnerability OBB-2756061

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

photographydesignstudio.com Cross Site Scripting vulnerability OBB-2754475

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Design/Logic Flaw

Use After Free in GitHub repository vim/vim prior to 9.0.0046...

Design/Logic Flaw

Digital Guardian Agent 7.7.4.0042 allows an administrator who ordinarily does not have a supported way to uninstall the product to disable some of the agent functionality and then exfiltrate files to an external USB device...

Design/Logic Flaw

An issue in the isSVG function of Known v1.2.2+2020061101 allows attackers to execute arbitrary code via a crafted SVG file...

Design/Logic Flaw

Known v1.3.1+2020120201 was discovered to allow attackers to perform an account takeover via a host header injection attack...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...