CVE-2021-22759

A CWE-416: Use after free vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in loss of data or remote code execution due to use of unchecked input data, when a malicious CGF file is imported to IGSS Definition...

CVE-2021-22757

A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of sanity checks on user-supplied input data, when a malicious CGF file is imported to IGSS Definition...

Remote code execution

A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing checks of user-supplied input data, when a malicious CGF file is imported to IGSS Definition...

Design/Logic Flaw

A CWE-416: Use after free vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in loss of data or remote code execution due to use of unchecked input data, when a malicious CGF file is imported to IGSS Definition...

CVE-2021-22759

A CWE-416: Use after free vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in loss of data or remote code execution due to use of unchecked input data, when a malicious CGF file is imported to IGSS Definition...

CVE-2021-22757

The connected Red Hat and Schneider Electric disclosures confirm CVE-2021-22757 affects Schneider Electric IGSS Definition (Def.exe) versions 15.0.0.21140 and earlier. The root cause is an out-of-bounds read (CWE-125) stemming from insufficient input validation when importing a malicious CGF file...

CVE-2021-22759

CVE-2021-22759 is a use-after-free vulnerability (CWE-416) in Schneider Electric IGSS Definition (Def.exe) up to version 15.0.0.21140. The Red Hat and NVD/NVD-sourced materials describe that unchecked input data when importing a malicious CGF file into IGSS Definition can lead to data loss or rem...

CVE-2020-11235

Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobil...

Buffer overflow

Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobil...

Unspecified Vulnerability in Interactive Graphical SCADA System (IGSS)

The Schneider Electric Interactive Graphical SCADA System IGSS is an advanced SCADA system for monitoring and controlling industrial processes. A security vulnerability exists in the Definition module of Interactive Graphical SCADA System IGSS versions 15.0.0.21140 and earlier. The vulnerability...

The vulnerability of the Apache Thrift application programming library at Aurora Center, related to insufficient input data validation, allows attackers to trigger service failures.

The vulnerability of the Apache Thrift application programming interface at Aurora Center is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the kind-of application software library “Aurora Center” is related to insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the kind-of application software library Aurora Center is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the uglify-js library in the Aurora application software allows a hacker to execute arbitrary code by exploiting syntax errors in input data.

The vulnerability of the uglify-js library in the Avrora software application is related to syntax checking errors in input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted Java script...

The vulnerability of the Exim message transfer agent, related to insufficient validation of input data, allows attackers to circumvent security restrictions set by users.

The vulnerability of the Exim message transfer agent is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to circumvent security restrictions set by the user...

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in insufficient cleaning of input data, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to insufficient cleaning of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Windows Desktop Bridge application converter in Microsoft Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the Windows Desktop Bridge application converter in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of Intel ADAS IE software for autonomous driving, which arises due to insufficient testing of input data, allows a violator to increase their privileges.

The vulnerability of Intel ADAS IE software for autonomous driving exists due to insufficient testing of input data. Exploiting this vulnerability can allow hackers to gain increased privileges...

The vulnerability of the VideoLAN VLC media player lies in its lack of proper input data validation, allowing a hacker to execute arbitrary code.

The vulnerability of the VideoLAN VLC media player exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created playback list...

Out-of-bounds read in Apache Thrift

In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in insufficient input data validation, which allows attackers to trigger service failures.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...