Heap overflow

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable a heap-based buffer overflow when parsing a specially crafted project file, which may allow an attacker to execute arbitrary code...

Null pointer dereference

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an untrusted pointer dereference, which may allow an attacker to execute arbitrary code and cause the application to crash...

Stack overflow

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to a stack-based buffer overflow, which may allow an attacker to achieve code execution...

CVE-2021-38419

Fuji Electric Tellus Lite V-Simulator and V-Server Lite are affected by an out-of-bounds write in parsing of V8/V9 files (and related components), leading to data corruption, system crash, or remote code execution. Exploitation details vary by sub-variant (V8/V9 file parsing), with some advisorie...

CVE-2021-38419 Fuji Electric Tellus Lite V-Simulator out of bounds write

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an out-of-bounds write, which can result in data corruption, a system crash, or code execution...

CVE-2021-38413

CVE-2021-38413 concerns Fuji Electric Tellus Lite and V-Server Lite (V-Simulator) vulnerable to a stack-based buffer overflow in V-Simulator file parsing (X1/V9). ZDI advisories describe the flaw as improper validation of the length of user-supplied data before copying to a fixed-size stack buffe...

CVE-2021-38413 Fuji Electric Tellus Lite V-Simulator stack based buffer overflow

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to a stack-based buffer overflow, which may allow an attacker to achieve code execution...

CVE-2021-38415

Fuji Electric Tellus Lite V-Simulator and V-Server Lite are affected (versions prior to 4.0.12.0). The issue is a heap-based buffer overflow when parsing a specially crafted project file, which may allow arbitrary code execution. ZDI details indicate remote code execution via V8 file parsing, wit...

CVE-2021-38415 Fuji Electric Tellus Lite V-Simulator heap based buffer overflow

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable a heap-based buffer overflow when parsing a specially crafted project file, which may allow an attacker to execute arbitrary code...

CVE-2021-38401

Fuji Electric V-Server Lite and Tellus Lite V-Simulator are affected by CVE-2021-38401 due to an untrusted pointer dereference in versions prior to 4.0.12.0. The flaw can allow arbitrary code execution and cause a crash. Publicly reported in ICSA-NC and CVE references; CVSS v3 base score is 7.8 (...

CVE-2021-38401 Fuji Electric Tellus Lite V-Simulator untrusted pointer dereference

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an untrusted pointer dereference, which may allow an attacker to execute arbitrary code and cause the application to crash...

CVE-2021-38409

CVE-2021-38409 affects Fuji Electric Tellus Lite V-Simulator and V-Server Lite, prior to version 4.0.12.0. The vulnerability is an access of an uninitialized pointer that can allow reading from or writing to unintended memory, leading to a denial of service. Affected products: V-Server Lite and T...

CVE-2021-38409 Fuji Electric Tellus Lite V-Simulator uninitialized pointer

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an access of uninitialized pointer, which may allow an attacker read from or write to unexpected memory locations, leading to a denial-of-service...

The vulnerability of the monitoring software for PLK devices from Fuji Electric, V-Server Lite and Tellus Lite V-Simulator, arises from buffer overflow in the stack. This allows a hacker to execute arbitrary code.

The vulnerability of the monitoring software for Fujitsu V-Server Lite and Tellus Lite V-Simulator lies in buffer overflows during syntax analysis of X1 files in the V-Simulator module. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created...

The vulnerability of the monitoring software for PLK devices from Fuji Electric, namely V-Server Lite and Tellus Lite V-Simulator, arises from the use of an unreliable pointer. This allows a perpetrator to execute arbitrary code or trigger a service failure.

The vulnerability of the monitoring software for PLK devices from Fuji Electric, V-Server Lite and Tellus Lite V-Simulator, lies in the use of an unreliable pointer. Exploiting this vulnerability allows a perpetrator to execute arbitrary code or cause malfunctions in the service...

The vulnerability of the monitoring software for PLK devices from Fuji Electric, namely V-Server Lite and Tellus Lite V-Simulator, stems from the use of an uninitialized pointer. This allows a intruder to trigger a service failure.

The vulnerability of the monitoring software for PLK devices from Fuji Electric, namely V-Server Lite and Tellus Lite V-Simulator, is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow a hacker to cause a service failure...

WordPress plugin cross-site scripting vulnerability (CNVD-2021-102799)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in the...

CVE-2021-24946

The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the time parameter before using it in a SQL statement in the mecloadsinglepage AJAX action, available to unauthenticated users, leading to an unauthenticated SQL injection issue...

CVE-2021-24972 Pixel Cat Lite < 2.6.3 - Admin+ Stored Cross-Site Scripting

The Pixel Cat WordPress plugin before 2.6.3 does not escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2021-24922 Pixel Cat Lite < 2.6.2 - CSRF to Stored Cross-Site Scripting

The Pixel Cat WordPress plugin before 2.6.2 does not have CSRF check when saving its settings, and did not sanitise as well as escape some of them, which could allow attacker to make a logged in admin change them and perform Cross-Site Scripting attacks...