Lucene search
+L

86 matches found

NVD
NVD
added 2022/08/31 9:15 p.m.32 views

CVE-2022-2898

Measuresoft ScadaPro Server and Client All Versions do not properly resolve links before file access; this could allow a denial-of-service condition...

6.1CVSS0.0022EPSS
SaveExploits0References1
OSV
OSV
added 2022/08/31 9:15 p.m.7 views

CVE-2022-2892

Measuresoft ScadaPro Server Versions prior to 6.8.0.1 uses an unmaintained ActiveX control, which may allow an out-of-bounds write condition while processing a specific project file...

7.8CVSS7.1AI score0.00294EPSS
SaveExploits0References1
Prion
Prion
added 2022/08/31 9:15 p.m.23 views

Stack overflow

Measuresoft ScadaPro Server All Versions uses unmaintained ActiveX controls. These controls may allow two stack-based buffer overflow instances while processing a specific project file...

4.4CVSS7.8AI score0.00294EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/08/31 8:54 p.m.8 views

CVE-2022-2897 Measuresoft ScadaPro Server and Client Link Following

Measuresoft ScadaPro Server and Client All Versions do not properly resolve links before file access; this could allow privilege escalation...

7.8CVSS7.7AI score0.00284EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/08/31 8:54 p.m.10 views

CVE-2022-2898 Measuresoft ScadaPro Server and Client Link Following

Measuresoft ScadaPro Server and Client All Versions do not properly resolve links before file access; this could allow a denial-of-service condition...

6.1CVSS6.3AI score0.0022EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/08/31 8:54 p.m.12 views

CVE-2022-2896 Measuresoft ScadaPro Server Use After Free

Measuresoft ScadaPro Server All Versions allows use after free while processing a specific project file...

7.8CVSS7.7AI score0.0031EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/08/31 8:54 p.m.31 views

CVE-2022-2898 Measuresoft ScadaPro Server and Client Link Following

Measuresoft ScadaPro Server and Client All Versions do not properly resolve links before file access; this could allow a denial-of-service condition...

6.1CVSS6.5AI score0.0022EPSS
SaveExploits0References1
CVE
CVE
added 2022/08/31 8:54 p.m.66 views

CVE-2022-2894

CVE-2022-2894 – Measuresoft ScadaPro Server is associated with unmaintained ActiveX controls that may permit seven untrusted pointer dereference instances when processing a specific project file. The affected product is Measuresoft ScadaPro Server (and Client per related advisories) across all ve...

7.8CVSS7.5AI score0.00288EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/08/31 8:54 p.m.7 views

CVE-2022-2892 Measuresoft ScadaPro Server Out-of-bounds Write

Measuresoft ScadaPro Server Versions prior to 6.8.0.1 uses an unmaintained ActiveX control, which may allow an out-of-bounds write condition while processing a specific project file...

7.8CVSS7.6AI score0.00294EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/08/31 8:54 p.m.28 views

CVE-2022-2895 Measuresoft ScadaPro Server Stack-based Buffer Overflow

Measuresoft ScadaPro Server All Versions uses unmaintained ActiveX controls. These controls may allow two stack-based buffer overflow instances while processing a specific project file...

7.8CVSS8AI score0.00294EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/08/31 8:54 p.m.9 views

CVE-2022-2895 Measuresoft ScadaPro Server Stack-based Buffer Overflow

Measuresoft ScadaPro Server All Versions uses unmaintained ActiveX controls. These controls may allow two stack-based buffer overflow instances while processing a specific project file...

7.8CVSS7.8AI score0.00294EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/08/24 12:0 a.m.8 views

The vulnerability of the ActiveX control on the SCADA server of Measuresoft ScadaPro Server allows a intruder to execute arbitrary code.

The vulnerability of the ActiveX control in the SCADA server of Measuresoft ScadaPro Server relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the target system using a specially crafted file...

7.8CVSS7.8AI score0.00294EPSS
SaveExploits0References3Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2022/08/23 12:0 a.m.24 views

Measuresoft ScadaPro Server ORM File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Measuresoft ScadaPro Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS3.9AI score0.00288EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/08/23 12:0 a.m.7 views

Measuresoft ScadaPro Server and Client 缓冲区错误漏洞

Measuresoft ScadaPro Server and Client is a powerful real-time data acquisition software package from Measuresoft Ireland. It provides monitoring, data logging, simulation development and report generation. A buffer error vulnerability exists in Measuresoft ScadaPro Server and Client versions pri...

7.8CVSS5.8AI score0.00294EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2022/08/23 12:0 a.m.20 views

Measuresoft ScadaPro Server ORM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Measuresoft ScadaPro Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.3AI score0.00294EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/08/23 12:0 a.m.22 views

Measuresoft ScadaPro Client Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Measuresoft ScadaPro Client. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS5.3AI score0.00284EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/08/23 12:0 a.m.9 views

PT-2022-4637 · Measuresoft · Measuresoft Scadapro Server +1

Name of the Vulnerable Software and Affected Versions: Measuresoft ScadaPro Server and Client All Versions Description: The issue is related to the incorrect resolution of links before file access in the Measuresoft ScadaPro Server and Client. This could potentially allow a remote attacker to...

7.2CVSS5.4AI score0.0022EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2022/08/23 12:0 a.m.26 views

Measuresoft ScadaPro Server ORM File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Measuresoft ScadaPro Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS3.8AI score0.0031EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/08/23 12:0 a.m.8 views

Measuresoft ScadaPro Server and Client 后置链接漏洞

Measuresoft ScadaPro Server and Client is a powerful real-time data acquisition software package from Measuresoft Ireland. It provides monitoring, data logging, simulation development and report generation. Measuresoft ScadaPro Server and Client suffers from a backlink vulnerability that stems fr...

7.8CVSS5.5AI score0.00284EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/08/23 12:0 a.m.12 views

PT-2022-4636 · Measuresoft · Measuresoft Scadapro Server +1

Name of the Vulnerable Software and Affected Versions: Measuresoft ScadaPro Server and Client All Versions Description: The issue is related to the improper resolution of links before file access, which could allow privilege escalation. This could potentially be exploited by a remote attacker to...

7.8CVSS7.3AI score0.00284EPSS
SaveExploits0References11
Rows per page
Query Builder