CVE-2021-22698

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software V2.1.13 and prior that could allow a stack-based buffer overflow to occur which could result in remote code execution when a malicious SSD file is uploaded and...

Stack overflow

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software V2.1.13 and prior that could allow a stack-based buffer overflow to occur which could result in remote code execution when a malicious SSD file is uploaded and...

CVE-2021-22697

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software V2.1.13 and prior that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed...

CVE-2021-22698

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software V2.1.13 and prior that could allow a stack-based buffer overflow to occur which could result in remote code execution when a malicious SSD file is uploaded and...

Design/Logic Flaw

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software V2.1.13 and prior that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed...

NVIDIA Jetson AGX Xavier Series Security Vulnerability

Nvidia NVIDIA Jetson is an embedded system development module from Nvidia Corporation. A security vulnerability exists in the NVIDIA Jetson AGX Xavier Series, which arises from improper access control and results in unauthorized users accessing system power data, which could lead to information...

CVE-2021-22698

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software V2.1.13 and prior that could allow a stack-based buffer overflow to occur which could result in remote code execution when a malicious SSD file is uploaded and...

CVE-2021-22698

CVE-2021-22698 affects Schneider Electric EcoStruxure Power Build-Rapsody (V2.1.13 and prior). The issue is a CWE-434 Unrestricted Upload of File with Dangerous Type in SSD file parsing, caused by insufficient validation of user-supplied data length before copying to a fixed-length stack buffer, ...

CVE-2021-22697

CVE-2021-22697 affects Schneider Electric EcoStruxure Power Build-Rapsody (versions up to 2.1.13). The issue is a CWE-434 Unrestricted Upload of File with Dangerous Type in SSD file parsing, leading to a use-after-free condition and potential remote code execution. Exploitation described as requi...

CVE-2021-22697

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software V2.1.13 and prior that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed...

Denial of Service Vulnerability in DELTA DOP 107EG

The Delta Group is involved in areas such as providing total solutions for power management, video displays, industrial automation, network communication products, and products related to renewable energy. A denial of service vulnerability exists in DELTA DOP 107EG, which can be exploited by...

Code Execution Vulnerability in the Backend of Ecommerce Power Mall System of Shenzhen Yitongding Multimedia Co.

The business scope of Shenzhen ETD Multimedia Co., Ltd. includes: website construction, mobile WeChat mini-program development, mini-program community group-buying system, VI design, network operation, cloud products-operation and maintenance solutions. There is a code execution vulnerability in...

Schneider Electric EcoStruxure Power Build-Rapsody Buffer Overflow Vulnerability

Schneider Electric EcoStruxure Power Build-Rapsody is a software for simplifying the configuration of low-voltage distribution panels from Schneider Electric France. A buffer overflow vulnerability exists in EcoStruxure Power Build-Rapsody version V2.1.13 and prior versions when parsing SSD files...

Medium: kernel

Issue Overview: A use-after-free flaw was found in the debugfsremove function in the Linux kernel. The flaw could allow a local attacker with special user or root privilege to crash the system at the time of file or directory removal. This vulnerability can lead to a kernel information leak. The...

Schneider Electric EcoStruxure Power Build-Rapsody Code Issue Vulnerability

Schneider Electric EcoStruxure Power Build-Rapsody is a software for simplifying the configuration of low-voltage distribution panels from Schneider Electric France. A code issue vulnerability exists in EcoStruxure Power Build-Rapsody version V2.1.13 and prior versions, which arises from the...

SQL Injection Vulnerability in PV Power Plant Monitoring System of Jiangsu Goodway Power Technology Co.(CNVD-2021-05519)

Jiangsu Goodway Power Supply Technology Co., Ltd. is a new energy high-tech enterprise. A SQL injection vulnerability exists in the monitoring system of the photovoltaic power plant of Jiangsu Goodway Power Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information fr...

Schneider Electric EcoStruxure Power Build - Rapsody 代码问题漏洞

Schneider Electric EcoStruxure Power Build-Rapsody is a software for simplifying the configuration of low-voltage distribution panels from Schneider Electric France. A buffer overflow vulnerability exists in EcoStruxure Power Build-Rapsody version V2.1.13 and prior versions when parsing SSD files...

Schneider Electric EcoStruxure Power Build - Rapsody 代码问题漏洞

Schneider Electric EcoStruxure Power Build-Rapsody is a software for simplifying the configuration of low-voltage distribution panels from Schneider Electric France. A code issue vulnerability exists in EcoStruxure Power Build-Rapsody version V2.1.13 and prior versions, which arises from the...

Ubuntu: Security Advisory (USN-4678-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4681-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...