CVE-2008-5050

Off-by-one error in the getunicodename function libclamav/vbaextract.c in Clam Anti-Virus ClamAV before 0.94.1 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow...

Delta Electronics TPEditor Out-of-Bounds Write Vulnerability

TPEditor is programming software for Delta Text Panels running on Windows. An out-of-bounds write vulnerability exists in Delta Electronics TPEditor version 1.94 and earlier, which can be exploited by an attacker to achieve remote code execution via a specially crafted project file...

EZAutomation EZ PLC Editor Buffer Overflow Vulnerability

EZAutomation EZ PLC Editor is a suite of PLC Programmable Logic Controller programming software from EZAutomation, USA. A buffer overflow vulnerability exists in EZAutomation EZ PLC Editor 1.8.41 and earlier versions, which can be exploited by an attacker to corrupt memory and execute code with t...

Buffer overflow

An attacker could use a specially crafted project file to overflow the buffer and execute code under the privileges of the EZ Touch Editor Versions 2.1.0 and prior...

CVE-2019-13522

An attacker could use a specially crafted project file to corrupt the memory and execute code under the privileges of the EZ PLC Editor Versions 1.8.41 and prior...

PT-2019-13388

Name of the Vulnerable Software and Affected Versions EZ PLC Editor versions 1.8.41 and prior Description An issue exists where an attacker could use a specially crafted project file to corrupt memory and execute code under the privileges of the affected software. Recommendations For EZ PLC Edito...

PT-2019-13384

Name of the Vulnerable Software and Affected Versions EZ Touch Editor versions 2.1.0 and prior Description An issue exists where an attacker could use a specially crafted project file to overflow the buffer and execute code under the privileges of the affected software. Recommendations For EZ Tou...

CVE-2019-13522: Improper Restriction of Operations within the Bounds of a Memory Buffer

An attacker could use a specially crafted project file to corrupt the memory and execute code under the privileges of the EZ PLC Editor Versions 1.8.41 and prior...

CVE-2019-13518: Stack-based Buffer Overflow

An attacker could use a specially crafted project file to overflow the buffer and execute code under the privileges of the EZ Touch Editor Versions 2.1.0 and prior...

CVE-2019-13514

In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may trigger a use-after-free vulnerability, which may allow information disclosure, remote code execution, or crash of the application...

CVE-2019-13513

In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may trigger multiple out-of-bounds read vulnerabilities, which may allow information disclosure, remote code execution, or crash of the application...

CVE-2019-13514: Use After Free

In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may trigger a use-after-free vulnerability, which may allow information disclosure, remote code execution, or crash of the application...

CVE-2019-13513: Out-of-bounds Read

In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may trigger multiple out-of-bounds read vulnerabilities, which may allow information disclosure, remote code execution, or crash of the application...

CVE-2019-10980

A type confusion vulnerability may be exploited when LAquis SCADA 4.3.1.71 processes a specially crafted project file. This may allow an attacker to execute remote code. The attacker must have local access to the system. A CVSS v3 base score of 7.8 has been calculated; the CVSS vector string is...

Type confusion

A type confusion vulnerability may be exploited when LAquis SCADA 4.3.1.71 processes a specially crafted project file. This may allow an attacker to execute remote code. The attacker must have local access to the system. A CVSS v3 base score of 7.8 has been calculated; the CVSS vector string is...

CVE-2019-10994: Out-of-bounds Read

Processing a specially crafted project file in LAquis SCADA 4.3.1.71 may trigger an out-of-bounds read, which may allow an attacker to obtain sensitive information. The attacker must have local access to the system. A CVSS v3 base score of 2.5 has been calculated; the CVSS vector string is...

PT-2019-12126

Name of the Vulnerable Software and Affected Versions LAquis SCADA version 4.3.1.71 Description Processing a specially crafted project file may trigger an out-of-bounds read, potentially allowing an attacker to obtain sensitive information. The attacker must have local access to the system...

PT-2019-12120

Name of the Vulnerable Software and Affected Versions LAquis SCADA version 4.3.1.71 Description A type confusion issue may be exploited when processing a specially crafted project file, potentially allowing an attacker to execute remote code. The attacker must have local access to the system...

CVE-2019-10980: Access of Resource Using Incompatible Type

A type confusion vulnerability may be exploited when LAquis SCADA 4.3.1.71 processes a specially crafted project file. This may allow an attacker to execute remote code. The attacker must have local access to the system. A CVSS v3 base score of 7.8 has been calculated; the CVSS vector string is...

CVE-2019-10976

Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability is triggered when input passed to the XML parser is not sanitized while parsing the XML project and/or template file .frc2. Once a user opens the file, the attacker could read arbitrary files...