PT-2019-19339

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.2.8 Description An issue was discovered in the DesignManager module, specifically in the files action.admin bulk css.php and action.admin bulk template.php. With an unprivileged user having Designer permission, it is...

CVE-2019-9055: Deserialization of Untrusted Data

An issue was discovered in CMS Made Simple 2.2.8. In the module DesignManager in the files action.adminbulkcss.php and action.adminbulktemplate.php, with an unprivileged user with Designer permission, it is possible reach an unserialize call with a crafted value in the m1allparms parameter, and...

CMS Made Simple Authenticated RCE via object injection

An issue was discovered in CMS Made Simple 2.2.8. In the module DesignManager in the files action.adminbulkcss.php and action.adminbulktemplate.php, with an unprivileged user with Designer permission, it is possible to reach an unserialize call with a crafted value in the m1allparms parameter, an...

CVE-2016-5800

A malicious attacker can trigger a remote buffer overflow in the Communication Server in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0...

Buffer overflow

A malicious attacker can trigger a remote buffer overflow in the Communication Server in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0...

CVE-2016-5800

CVE-2016-5800 describes a remote buffer overflow in the Communication Server of Fatek Automation PM Designer v3 (2.1.2.2) and FV Designer (1.2.8.0). The issue enables remote exploitation that could crash the system or allow arbitrary code execution. Affected components: Communication Server withi...

PT-2019-7835

Name of the Vulnerable Software and Affected Versions Fatek Automation PM Designer V3 version 2.1.2.2 Fatek Automation FV Designer version 1.2.8.0 Description A malicious attacker can trigger a remote buffer overflow in the Communication Server. Recommendations For Fatek Automation PM Designer V3...

CVE-2016-5800: Stack-based Buffer Overflow

A malicious attacker can trigger a remote buffer overflow in the Communication Server in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0...

The vulnerability of the Vijeo Designer Lite software lies in its insufficient control over memory boundaries, allowing a malicious actor to cause system failures in the application.

The vulnerability of the Vijeo Designer Lite software is related to insufficient control over memory boundaries during operation. Exploiting this vulnerability can allow an attacker to cause a malfunction of the application upon opening a DOP project file...

Beckhoff TE5910 Motion Designer Detection (Windows SMB Login)

Detects the installed version of Beckhoff TE5910 Motion Designer for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Schneider Electric Vijeo Designer Detection (Windows SMB Login)

This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2019-20265

Уязвимость программного обеспечения Vijeo Designer Lite связана с недостаточным контролем границ при работе с памятью. Эксплуатация уязвимости может позволить нарушителю вызвать сбой работы приложения при открытии файла DOP-проекта...

Fedora 29 : phpMyAdmin (2019-09ae31d880)

Upstream announcement: Security fix: phpMyAdmin 4.8.5 is released The phpMyAdmin team announces the release of phpMyAdmin version 4.8.5. Among other bug fixes, this contains several important security fixes. Upgrading is highly recommended for all users. The security fixes involve : - Arbitrary...

Updated phpmyadmin packages fix security vulnerabilities

- Possible SQL injection in Designer feature - When AllowArbitraryServer configuration set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access...

PT-2019-20240

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description The issue concerns a possible SQL injection in the Designer feature. When the AllowArbitraryServer configuration is set to true, an attacker can utilize a rogue MySQL server to read any...

SQL Injection

phpmyadmin is vulnerable to SQL injection. The vulnerability is possible because it allows the attacker to inject malicious SQL scripts via the username in the designer feature...

FreeBSD : phpMyAdmin -- File disclosure and SQL injection (111aefca-2213-11e9-9c8d-6805ca0b3d42)

The phpMyAdmin development team reports : Summary Arbitrary file read vulnerability Description When AllowArbitraryServer configuration set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. phpMyadmin attempts to bloc...

DEBIAN-CVE-2019-6798

An issue was discovered in phpMyAdmin before 4.8.5. A vulnerability was reported where a specially crafted username can be used to trigger a SQL injection attack through the designer feature...

Sql injection

An issue was discovered in phpMyAdmin before 4.8.5. A vulnerability was reported where a specially crafted username can be used to trigger a SQL injection attack through the designer feature...

UBUNTU-CVE-2019-6798

An issue was discovered in phpMyAdmin before 4.8.5. A vulnerability was reported where a specially crafted username can be used to trigger a SQL injection attack through the designer feature...