Schneider Electric Vijeo Designer Basic and Vijeo Designer Code Issue Vulnerability

Schneider Electric Vijeo Designer Basic is a suite of programming and design software for HMIs Human Machine Interfaces from Schneider Electric, France. A code issue vulnerability exists in Schneider Electric Vijeo Designer Basic 1.1 HotFix 15 and earlier and Vijeo Designer 6.9 SP9 and earlier. T...

CVE-2020-7490

A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic V1.1 HotFix 15 and prior and Vijeo Designer V6.9 SP9 and prior, which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product...

CVE-2020-7490

Summary (CVE-2020-7490): The vulnerability is a CWE-426 Untrusted Search Path issue in Schneider Electric’s Vijeo Designer software. Affected products/versions include Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Designer (V6.9 SP9 and prior). The underlying issue is that loading a m...

CVE-2020-7490

A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic V1.1 HotFix 15 and prior and Vijeo Designer V6.9 SP9 and prior, which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product...

Design/Logic Flaw

Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion component: Web Based Report Designer. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial...

phpMyAdmin: SQL injection

Background phpMyAdmin is a web-based management tool for MySQL databases. Description PhpMyAdmin was vulnerable to an SQL injection attack through the designer feature. Impact An authenticated remote attacker, by specifying a specially crafted database/table name, could trigger an SQL injection...

Memory Corruption Vulnerability in PM Designer by Yonghong (CNVD-2020-23803)

Ltd. was founded in Taiwan in 1992 by a group of engineers engaged in PLC design and development. A memory corruption vulnerability exists in PM Designer, a PM3 file that is a project file for the software. The software has a security vulnerability in the handling of PM3 images, which can be...

Memory Corruption Vulnerability Exists in Yonghong PM Designer (CNVD-2020-18784)

PM Designer is a programmable logic controller. A memory corruption vulnerability exists in Yonghong PM Designer when handling plf files. An attacker can cause the program to crash by constructing a malformed file...

GHSA-JGJC-332C-8CMC SQL injection in phpMyAdmin

An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature...

SQL injection in phpMyAdmin

An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature...

Memory Corruption Vulnerability in Sosi Logo Designer

Shos Logo Designer is a logo creation software. A memory corruption vulnerability exists in the handling of custom project files by SUS Logo Designer. An attacker could exploit the vulnerability to cause the program to crash...

FreeBSD : phpmyadmin -- multiple vulnerabilities (ca3fe5b3-185e-11ea-9673-4c72b94353b5)

the phpmyadmin team reports : This security fix is part of an ongoing effort to improve the security of the Designer feature and is designated PMASA-2019-5. There is also an improvement for how we sanitize git version information shown on the home page. C Tenable Network Security, Inc. The...

SQL Injection

phpmyadmin/phpmyadmin is vulnerable to SQL injection. The vulnerability exists as the database and table name of designer feature is not properly sanitized to prevent arbitrary SQL query to be injected and executed...

DEBIAN-CVE-2019-18622

An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature...

CVE-2019-18622

An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature...

CVE-2019-18622

An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature...

Unrestricted file upload

Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, aka "XSS File Upload...

phpmyadmin -- multiple vulnerabilities

the phpmyadmin team reports: This security fix is part of an ongoing effort to improve the security of the Designer feature and is designated PMASA-2019-5. There is also an improvement for how we sanitize git version information shown on the home page...

CMS Made Simple 2.2.8 Remote Code Execution Exploit

An issue was discovered in CMS Made Simple version 2.2.8. In the module DesignManager in the files action.adminbulkcss.php and action.adminbulktemplate.php, with an unprivileged user with Designer permission, it is possible to reach an unserialize call with a crafted value in the m1allparms...

EximiousSoft Logo Designer Buffer Overflow Vulnerability

EximiousSoft Logo Designer is a professional and powerful logo design software. EximiousSoft Logo Designer 3.82 suffers from a heap corruption vulnerability starting with ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a78. An attacker can exploit this vulnerability to cause a denial of service...