Denial of Service Vulnerability in CDMonitor Software

CDMonitor is a GNSS system software developed by Sinan Navigation based on the Global Positioning System GPS and utilizing modern communication technology, which has the functions of real-time and quasi-real-time GNSS raw data analysis, processing, independent ring network leveling and data...

CVE-2019-6537

Multiple stack-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior may be exploited when parsing strings within project files. The process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An...

CVE-2018-19020

When CX-Supervisor Versions 3.42 and prior processes project files and tampers with the value of an offset, an attacker can force the application to read a value outside of an array...

Type confusion

An access of uninitialized pointer vulnerability in CX-Supervisor Versions 3.42 and prior could lead to type confusion when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application...

PT-2019-9710

Name of the Vulnerable Software and Affected Versions CX-Supervisor versions 3.42 and prior Description The issue is related to an access of uninitialized pointer vulnerability when processing project files, which could lead to type confusion. An attacker could exploit this by using a specially...

CVE-2018-7817

A Use After Free CWE-416 vulnerability exists in Zelio Soft 2 v5.1 and prior versions which could cause remote code execution when opening a specially crafted Zelio Soft project file...

CVE-2018-7817: Use After Free

A Use After Free CWE-416 vulnerability exists in Zelio Soft 2 v5.1 and prior versions which could cause remote code execution when opening a specially crafted Zelio Soft project file...

CVE-2018-19002

LCDS Laquis SCADA prior to version 4.1.0.4150 allows improper control of generation of code when opening a specially crafted project file, which may allow remote code execution, data exfiltration, or cause a system crash...

CVE-2018-19029: Untrusted Pointer Dereference

LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlled memory address, which may allow remote code execution, data exfiltration, or cause a system crash...

CVE-2018-19002: Improper Control of Generation of Code

LCDS Laquis SCADA prior to version 4.1.0.4150 allows improper control of generation of code when opening a specially crafted project file, which may allow remote code execution, data exfiltration, or cause a system crash...

CVE-2018-19004

LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially crafted project file, which may allow data exfiltration...

CVE-2018-19004: Out-of-bounds Read

LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially crafted project file, which may allow data exfiltration...

CVE-2018-19015

An attacker could inject commands to launch programs and create, write, and read files on CX-Supervisor Versions 3.42 and prior through a specially crafted project file. An attacker could exploit this to execute code under the privileges of the application...

CVE-2018-19015: Improper Neutralization of Special Elements used in a Command

An attacker could inject commands to launch programs and create, write, and read files on CX-Supervisor Versions 3.42 and prior through a specially crafted project file. An attacker could exploit this to execute code under the privileges of the application...

CVE-2018-19011

CX-Supervisor Versions 3.42 and prior can execute code that has been injected into a project file. An attacker could exploit this to execute code under the privileges of the application...

CVE-2018-19011

CX-Supervisor Versions 3.42 and prior can execute code that has been injected into a project file. An attacker could exploit this to execute code under the privileges of the application...

CVE-2018-19013

An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor Versions 3.42 and prior through a specially crafted project file...

CVE-2018-19013: Improper Neutralization of Special Elements used in a Command

An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor Versions 3.42 and prior through a specially crafted project file...

CVE-2018-19019: Access of Resource Using Incompatible Type

A type confusion vulnerability exists when processing project files in CX-Supervisor Versions 3.42 and prior. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application...

CVE-2018-19011: Improper Control of Generation of Code

CX-Supervisor Versions 3.42 and prior can execute code that has been injected into a project file. An attacker could exploit this to execute code under the privileges of the application...