CVE-2018-14810

WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior parse files and pass invalidated user data to an unsafe method call, which may allow code to be executed in the context of an administrator...

Cisco WebEx Network Recording Player ARF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

FreeBSD : clamav -- multiple vulnerabilities (8b812395-c739-11e8-ab5b-9c5c8e75236a)

Joel Esler reports : - CVE-2018-15378 : - Vulnerability in ClamAV's MEW unpacking feature that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. - Reported by Secunia Research at Flexera. - Fix for a 2-byte buffer over-read bug in...

Design/Logic Flaw

Delta Electronics ISPSoft version 3.0.5 and prior allow an attacker, by opening a crafted file, to cause the application to read past the boundary allocated to a stack object, which could allow execution of code under the context of the application...

PT-2018-1719

Name of the Vulnerable Software and Affected Versions: LAquis SCADA versions 4.1.0.3870 and prior Description: The issue is related to an untrusted pointer dereference vulnerability in the LQS file parsing functionality of the LAquis SCADA tool, which is used for data collection and process contr...

PT-2018-12722

Name of the Vulnerable Software and Affected Versions Fuji Electric Alpha5 Smart Loader versions 3.7 and prior Description A buffer overflow information disclosure issue occurs when parsing certain file types. Recommendations For Fuji Electric Alpha5 Smart Loader versions 3.7 and prior, update to...

Multiple Fuji Electric Products Cross Boundary Read Vulnerability

Fuji Electric FRENIC Loader, etc. are inverters from Fuji Electric Japan. The out-of-bounds read vulnerability exists in multiple Fuji Electric products and stems from a program's failure to properly parse an FNC file, which can be exploited by an attacker to disclose information...

Delta Industrial Automation PMSoft rtl60 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Delta Industrial Automation PMSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

PT-2018-12744

Name of the Vulnerable Software and Affected Versions Fuji Electric V-Server versions 4.0.3.0 and prior Description Multiple untrusted pointer dereference issues have been identified, which may allow remote code execution. The vulnerabilities are related to the VPR file parsing and CArchive read...

PT-2018-12742

Name of the Vulnerable Software and Affected Versions Fuji Electric V-Server versions 4.0.3.0 and prior Description A use after free vulnerability has been identified in Fuji Electric V-Server, which may allow remote code execution. The issue is related to VPR file parsing and a CObArray...

PT-2018-12746

Name of the Vulnerable Software and Affected Versions Fuji Electric V-Server version 4.0.3.0 and prior Description A heap-based buffer overflow vulnerability has been identified, which may allow remote code execution. The issue is related to the VPR file parsing, specifically a CArchive read...

Fuji Electric V-Server VPR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fuji Electric V-Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Fuji Electric V-Server VPR File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fuji Electric V-Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Fuji Electric V-Server VPR File Parsing Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fuji Electric V-Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Fuji Electric V-Server VPR File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fuji Electric V-Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Fuji Electric V-Server VPR File Parsing Type Confusion Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fuji Electric V-Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Fuji Electric V-Server VPR File Parsing CArchive Read Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fuji Electric V-Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Fuji Electric V-Server VPR File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fuji Electric V-Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows that allows a sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. This vulnerability by itself does not allow arbitrary code execution. However,...

UBUNTU-CVE-2018-15671

An issue was discovered in the HDF HDF5 1.10.2 library. Excessive stack consumption has been detected in the function H5Pgetcb in H5Pint.c during an attempted parse of a crafted HDF file. This results in denial of service...