CVE-2021-20359

IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer Component stores potentially sensitive information in log files that could be obtained by an unauthorized user. IBM X-Force ID: 194966...

Memory Corruption Vulnerability in PLF Files for Processing Man Machine Applications in PM Designer V2.1.07.39 at Pingtong Technology Co.

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in the PLF file of the PM Designer V2.1.07.39 Processing HMI application of Pingtong Technology Co., Ltd. which can be exploited by...

Memory Corruption Vulnerability in PM Designer V1.2.98.35 Processing PLF at Pingtone Technology Co.

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in PM Designer V1.2.98.35 Processing PLF of Pingtong Technology Co., Ltd. which can be exploited by attackers to cause the program to...

Memory Corruption Vulnerability in PM Designer V2.1.07.39 at Pingtone Technology Co.

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in PM Designer V2.1.07.39, which can be exploited by attackers to cause a denial of service attack...

Memory Corruption Vulnerability in PM Designer V1.2.98.35 at Pingtone Technology Co.

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in PM Designer V1.2.98.35 of Pingtone Technology Co. An attacker can exploit this vulnerability to cause the program to crash...

Memory corruption vulnerability exists in PM Designer V1.2.98.35 of Pingtone Technology Co.(CNVD-2021-15521)

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in PM Designer V1.2.98.35 of Pingtone Technology Co. An attacker can exploit this vulnerability to cause the program to crash...

Binary Vulnerability in PM Designer V2.1.07.39 at Pingtone Technology Co.

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A binary vulnerability exists in PM Designer V2.1.07.39 of Pingtong Technology Co., Ltd. which can be exploited by attackers to cause a program crash...

Security Bulletin: Multiple CVEs - Vulnerabilities in IBM Java Runtime affect IBM Integration Designer used in IBM Business Automation Workflow and IBM Business Process Manager

Summary Vulnerabilities in IBM® Runtime Environment Java™ Versions 7 and 8 used by IBM Integration Designer. IBM Integration Designer has addressed the following CVEs. Vulnerability Details CVEID: CVE-2020-14579 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries compone...

Security Bulletin: CVE-2019-4732 vulnerability in IBM Java Runtime affects IBM Integration Designer used in IBM Business Automation Workflow and IBM Business Process Manager

Summary A vulnerability exists in IBM® Runtime Environment Java™ Versions 7 and 8 used by IBM Integration Designer. IBM Integration Designer has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-4732 DESCRIPTION: IBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55...

WordPress Process Steps Template Designer plugin <= 1.2.1 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found in WordPress Process Steps Template Designer plugin versions = 1.2.1. Solution Update the WordPress Process Steps Template Designer plugin to the latest available version at least 1.3...

WordPress Fancy Product Designer For WooCommerce Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Fancy Product Designer For WooCommerce. An attacker c...

WordPress Fancy Product Designer For WooCommerce File Upload Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A file upload vulnerability exists in WordPress Fancy Product Designer For WooCommerce, which can be exploited...

Binary Vulnerability in TGA Image Processing by Kinco Designer Configuration Software of Shanghai BBK

Shanghai BUCO Automation Co., Ltd. has been focusing on the research, development, production, sales and related technical services of core components for industrial automation equipment control and industrial IoT/Internet software and hardware, and providing customers with equipment automation...

WordPress Fancy Product Designer plugin <= 4.5.0 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting XSS vulnerability found by Jonathan Gregson in WordPress Fancy Product Designer plugin versions = 4.5.0. Solution Update the WordPress Fancy Product Designer plugin to the latest available version at least 4.5.1...

WordPress Fancy Product Designer For WooCommerce Cross Site Scripting

About Fancy Product Designer for WooCommerce Fancy Product Designer for WooCommerce is a WordPress plugin which allows users to design custom products in a vendor's WooCommerce store. It is sold through the third-party marketplace "Envato Market" and boasts over 15,000 sales. Stored XSS via SVG...

Fancy Product Designer < 4.5.1 - Unauthenticated Stored Cross-Site Scripting

Fancy Product Designer for WooCommerce before version 4.5.1 permits the upload of unsanitized SVG files by unauthenticated users. SVG files can contain JavaScript which will be executed by the browser if the malicious SVG is accessed directly. This JavaScript will run in the context of the affect...

Security Bulletin: App Connect Enterprise Certified Container Designer instances may be vulnerable to CVE-2020-7760

Summary Some flow editor dialogs in a Designer instance App Connect Enterprise Certified Container may be vulnerable to a regular expression denial of service flaw that could make that Designer instance unresponsive. Vulnerability Details CVEID: CVE-2020-7760 DESCRIPTION: Node.js codemirror modul...

Advantech WebAccess HMI Designer suffers from dll Hijacking Vulnerability

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. Advantech WebAccess HMI Designer suffers from a dll hijacking vulnerability that can be exploited by attackers to gain administrator privileges...

Advantech WebAccess HMI PanelSim.exe suffers from a stack overflow vulnerability (CNVD-2020-61115)

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. A stack overflow vulnerability exists in Advantech WebAccess HMI PanelSim.exe, which can be exploited by an attacker to cause a denial of service on the server...

Advantech WebAccess HMI Designer suffers from dll hijacking vulnerability (CNVD-2020-61113)

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. Advantech WebAccess HMI Designer suffers from a dll hijacking vulnerability that can be exploited by attackers to gain administrator privileges...