PT-2018-18120

Name of the Vulnerable Software and Affected Versions Omron CX-Supervisor versions 3.30 and prior Description The issue is related to the access of uninitialized pointer vulnerabilities in Omron CX-Supervisor. This can be exploited when CX Supervisor indirectly calls an initialized pointer while...

Omron CX-Supervisor Heap Buffer Overflow Vulnerability

CX-Supervisor is a Miscellaneous Shareware software.CX-Supervisor is dedicated to the design and operation of PC visualization and machine control. A heap buffer overflow vulnerability exists in Omron CX-Supervisor version 3.30, where parsing an incorrectly formatted project file could result in ...

PT-2018-6415

Name of the Vulnerable Software and Affected Versions: Huawei DP300 version V500R002C00 Description: The issue is due to an integer overflow caused by a lack of validation, allowing an authenticated local attacker to craft specific XML files. By parsing this file, the attacker can result in Denia...

UBUNTU-CVE-2018-7729

An issue was discovered in Exempi through 2.4.4. There is a stack-based buffer over-read in the PostScriptMetaHandler::ParsePSFile function in XMPFiles/source/FileHandlers/PostScriptHandler.cpp...

WPS Office 2016 demo wppmain module suffers from null pointer reference vulnerability

WPS office is an office software suite independently developed by Kingsoft Corporation. A null pointer reference vulnerability exists in the wppmain module of the WPS presentation wpp.exe in WPS when parsing a specific pptx file, which can be exploited by an attacker to cause a denial of service...

CVE-2017-16813

Foxit MobilePDF for iOS prior to version 6.1 is affected by a denial-of-service vulnerability when a user uploads a file whose filename parameter contains hexadecimal Unicode characters over Wi‑Fi. The issue arises from the app’s parsing of that parameter, leading to a crash or DoS. No remediatio...

SRC-2019-0019 : Adobe Acrobat Pro DC Distiller PostScript File Parsing dvips TeXDict Type Confusion Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

Stack Overflow Vulnerability in WPS Forms

WPS office is an office software suite independently developed by Kingsoft Corporation. A stack overflow vulnerability exists in WPS Formset.exe in WPS when parsing a specific xls file, which can be exploited by an attacker to cause a denial of service or code execution...

USN-3550-1 clamav vulnerabilities

It was discovered that ClamAV incorrectly handled parsing certain mail messages. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2017-12374, CVE-2017-12375, CVE-2017-12379, CVE-2017-12380 It was discovered...

Vulnerability Spotlight: Multiple Unpatched Vulnerabilities in Blender Identified

Update 1/25/18: Blender has released version 2.79a to address these issues Technology has evolved in incredible ways that has helped people to create and visualize media like never before. Today, people can use tools such as Blender to visualize, model, and animate 3D content, especially since it...

CVE-2018-5268

In OpenCV 3.3.1, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmtjpeg2000.cpp when parsing a crafted image file...

Cisco WebEx ARF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

PT-2017-14752

Name of the Vulnerable Software and Affected Versions Huawei AR120-S versions V200R006C10 through V200R008C30 Huawei AR1200 versions V200R006C10 through V200R008C30 Huawei AR1200-S versions V200R006C10 through V200R008C30 Huawei AR150 versions V200R006C10 through V200R008C30 Huawei AR150-S versio...

Cisco WebEx Recorder and Player WRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Recorder and Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Cisco WebEx ARF File Parsing Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Cisco WebEx Recorder and Player WRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Recorder and Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

PT-2017-12537

Name of the Vulnerable Software and Affected Versions Cisco WebEx Network Recording Player affected versions not specified Description A remote code execution issue exists in Cisco WebEx Network Recording Player, related to the parsing of Advanced Recording Format ARF and WebEx Recording Format W...

Memory Corruption Vulnerability Exists in Video Pioneer PC (CNVD-2017-34296)

Video Pioneer is a software that can play video and audio online based on P2P Cloud 3D technology, supporting multiple streaming protocols, multiple audio and video formats. A memory corruption vulnerability exists in the Pioneer player when parsing special mp4 files. An attacker can exploit this...

Memory Corruption Vulnerability in WPS Forms (CNVD-2017-34135)

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory corruption vulnerability exists in the etmain module of the form et.exe in WPS when parsing a specific xls file, which can be exploited by an attacker to cause a denial of service or code execution...

Hancom Hangul Office HShow!NXDeleteLineObj+0x6960c Code Execution Vulnerability(CVE-2016-4290)

Description This vulnerability was discovered within the Hangul HShow application which is part of the Hangul Office Suite. Hangul Office is published by Hancom, Inc. and is considered one of the more popular Office suites used within South Korea. When opening a Hangul HShow Document .hpt and...