Memory Corruption Vulnerability in PM Designer V1.2.98.35 Processing PLF at Pingtone Technology Co.

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in PM Designer V1.2.98.35 Processing PLF of Pingtong Technology Co., Ltd. which can be exploited by attackers to cause the program to...

Memory corruption vulnerability exists in PM Designer V1.2.98.35 of Pingtone Technology Co.(CNVD-2021-15521)

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in PM Designer V1.2.98.35 of Pingtone Technology Co. An attacker can exploit this vulnerability to cause the program to crash...

Memory Corruption Vulnerability in PM Designer V2.1.07.39 at Pingtone Technology Co.

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in PM Designer V2.1.07.39, which can be exploited by attackers to cause a denial of service attack...

Binary Vulnerability in PM Designer V2.1.07.39 at Pingtone Technology Co.

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A binary vulnerability exists in PM Designer V2.1.07.39 of Pingtong Technology Co., Ltd. which can be exploited by attackers to cause a program crash...

Memory Corruption Vulnerability in PM Designer V1.2.98.35 at Pingtone Technology Co.

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in PM Designer V1.2.98.35 of Pingtone Technology Co. An attacker can exploit this vulnerability to cause the program to crash...

Security Bulletin: Multiple CVEs - Vulnerabilities in IBM Java Runtime affect IBM Integration Designer used in IBM Business Automation Workflow and IBM Business Process Manager

Summary Vulnerabilities in IBM® Runtime Environment Java™ Versions 7 and 8 used by IBM Integration Designer. IBM Integration Designer has addressed the following CVEs. Vulnerability Details CVEID: CVE-2020-14579 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries compone...

Security Bulletin: CVE-2019-4732 vulnerability in IBM Java Runtime affects IBM Integration Designer used in IBM Business Automation Workflow and IBM Business Process Manager

Summary A vulnerability exists in IBM® Runtime Environment Java™ Versions 7 and 8 used by IBM Integration Designer. IBM Integration Designer has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-4732 DESCRIPTION: IBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55...

azureml-designer-classic-modules (>=0.0.127, <=0.0.129), azureml-designer-cv-modules (>=0.0.8, <=0.0.10) +17 more potentially affected by CVE-2020-35653 via pillow (7.1.0)

pillow PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - azureml-designer-classic-modules =0.0.127, =0.0.8, =0.0.10, =0.0.7, =0.0.7, =0.0.2, =0.3.1, =0.1.1, =0.0.2, =0.0.1, =0.0.4, =0.0.3, =0.1.0 - qweb...

WordPress Process Steps Template Designer plugin <= 1.2.1 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found in WordPress Process Steps Template Designer plugin versions = 1.2.1. Solution Update the WordPress Process Steps Template Designer plugin to the latest available version at least 1.3...

WordPress Fancy Product Designer For WooCommerce Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Fancy Product Designer For WooCommerce. An attacker c...

WordPress Fancy Product Designer For WooCommerce File Upload Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A file upload vulnerability exists in WordPress Fancy Product Designer For WooCommerce, which can be exploited...

Binary Vulnerability in TGA Image Processing by Kinco Designer Configuration Software of Shanghai BBK

Shanghai BUCO Automation Co., Ltd. has been focusing on the research, development, production, sales and related technical services of core components for industrial automation equipment control and industrial IoT/Internet software and hardware, and providing customers with equipment automation...

WordPress Fancy Product Designer For WooCommerce Cross Site Scripting

About Fancy Product Designer for WooCommerce Fancy Product Designer for WooCommerce is a WordPress plugin which allows users to design custom products in a vendor's WooCommerce store. It is sold through the third-party marketplace "Envato Market" and boasts over 15,000 sales. Stored XSS via SVG...

Fancy Product Designer < 4.5.1 - Unauthenticated Stored Cross-Site Scripting

Fancy Product Designer for WooCommerce before version 4.5.1 permits the upload of unsanitized SVG files by unauthenticated users. SVG files can contain JavaScript which will be executed by the browser if the malicious SVG is accessed directly. This JavaScript will run in the context of the affect...

WordPress Fancy Product Designer plugin <= 4.5.0 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting XSS vulnerability found by Jonathan Gregson in WordPress Fancy Product Designer plugin versions = 4.5.0. Solution Update the WordPress Fancy Product Designer plugin to the latest available version at least 4.5.1...

Security Bulletin: App Connect Enterprise Certified Container Designer instances may be vulnerable to CVE-2020-7760

Summary Some flow editor dialogs in a Designer instance App Connect Enterprise Certified Container may be vulnerable to a regular expression denial of service flaw that could make that Designer instance unresponsive. Vulnerability Details CVEID: CVE-2020-7760 DESCRIPTION: Node.js codemirror modul...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), monk-cuda100 (0.0.1) +9 more potentially affected by CVE-2020-15203 via tensorflow-gpu (>=2.0.0, <=2.0.1)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =0.0.9 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test 0.0.1 - monk-keras-cuda100 0.0.1 - monk-keras-cuda100-test 0.0.1 - monk-keras-cuda101 0.0.1 - monk-keras-cuda101-test 0.0.1 - monk-keras-cuda102 0.0.1 -...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), monk-cuda100 (0.0.1) +9 more potentially affected by CVE-2020-15209 via tensorflow-gpu (>=2.0.0, <=2.0.1)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =0.0.9 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test 0.0.1 - monk-keras-cuda100 0.0.1 - monk-keras-cuda100-test 0.0.1 - monk-keras-cuda101 0.0.1 - monk-keras-cuda101-test 0.0.1 - monk-keras-cuda102 0.0.1 -...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), monk-cuda100 (0.0.1) +9 more potentially affected by CVE-2020-15211 via tensorflow-gpu (>=2.0.0, <=2.0.1)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =0.0.9 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test 0.0.1 - monk-keras-cuda100 0.0.1 - monk-keras-cuda100-test 0.0.1 - monk-keras-cuda101 0.0.1 - monk-keras-cuda101-test 0.0.1 - monk-keras-cuda102 0.0.1 -...

Advantech WebAccess HMI Designer suffers from dll hijacking vulnerability (CNVD-2020-61113)

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. Advantech WebAccess HMI Designer suffers from a dll hijacking vulnerability that can be exploited by attackers to gain administrator privileges...