CVE-2018-19013

An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor Versions 3.42 and prior through a specially crafted project file...

CVE-2018-19013: Improper Neutralization of Special Elements used in a Command

An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor Versions 3.42 and prior through a specially crafted project file...

CVE-2018-19019: Access of Resource Using Incompatible Type

A type confusion vulnerability exists when processing project files in CX-Supervisor Versions 3.42 and prior. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application...

CVE-2018-19011: Improper Control of Generation of Code

CX-Supervisor Versions 3.42 and prior can execute code that has been injected into a project file. An attacker could exploit this to execute code under the privileges of the application...

PT-2019-9691

Name of the Vulnerable Software and Affected Versions LCDS Laquis SCADA versions prior to 4.1.0.4150 Description The issue allows for an out of bounds read when opening a specially crafted project file. This may cause a system crash or allow data exfiltration. Recommendations For versions prior t...

PT-2019-9705

Name of the Vulnerable Software and Affected Versions CX-Supervisor versions 3.42 and prior Description The issue allows an attacker to inject commands that can delete files or the contents of a file through a specially crafted project file. This can potentially lead to arbitrary file deletion...

PT-2019-9698

Name of the Vulnerable Software and Affected Versions LCDS Laquis SCADA versions prior to 4.1.0.4150 Description The issue allows for an out of bounds read when opening a specially crafted project file, which may enable data exfiltration. Recommendations For versions prior to 4.1.0.4150, update t...

PT-2019-9703

Name of the Vulnerable Software and Affected Versions OMRON CX-Supervisor versions 3.42 and prior Description The issue allows code injection into a project file, which can be exploited by an attacker to execute code under the privileges of the application. Recommendations For versions 3.42 and...

PT-2019-9707

Name of the Vulnerable Software and Affected Versions OMRON CX-Supervisor versions 3.42 and prior Description The issue allows an attacker to inject commands and execute code under the privileges of the application through a specially crafted project file. This can be exploited to launch programs...

PT-2019-9697

Name of the Vulnerable Software and Affected Versions LCDS Laquis SCADA versions prior to 4.1.0.4150 Description The issue allows for improper control of generation of code when opening a specially crafted project file. This may lead to remote code execution, data exfiltration, or cause a system...

PT-2019-9717

Name of the Vulnerable Software and Affected Versions LCDS Laquis SCADA versions prior to 4.1.0.4150 Description The issue allows an attacker to supply a pointer for a controlled memory address using a specially crafted project file. This may lead to remote code execution, data exfiltration, or...

Unspecified vulnerability in LCDS LAquis SCADA (CNVD-2019-28114)

LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of equipment with communication technology. A security vulnerability exists in LCDS LAquis SCADA version 4.1.0.3870. The...

Omron CX-Supervisor Code Injection Vulnerability

Omron CX-Supervisor is a powerful and advanced machine visualization software package that provides a very flexible PC-based HMI environment. A code injection vulnerability exists in Omron CX-Supervisor 3.42 and earlier versions, which can be exploited by an attacker to inject code into a project...

Omron CX-Supervisor Reuse After Release Vulnerability

Omron CX-Supervisor is a powerful and advanced machine visualization software package that provides a very flexible PC-based HMI environment. A post-release reuse vulnerability exists in Omron CX-Supervisor 3.42 and earlier versions, which stems from an application failing to check if a project...

Omron CX-Supervisor Command Injection Vulnerability (NVD-C-2019-12033)

Omron CX-Supervisor is a powerful and advanced machine visualization software package that provides a very flexible PC-based HMI environment. A command injection vulnerability exists in Omron CX-Supervisor 3.42 and earlier versions, which can be exploited by an attacker to inject commands via a...

Omron CX-Supervisor Command Injection Vulnerability

Omron CX-Supervisor is a powerful and advanced machine visualization software package that provides a very flexible PC-based HMI environment. A command injection vulnerability exists in Omron CX-Supervisor 3.42 and earlier versions, which can be exploited by an attacker to inject commands via a...

Directory traversal

OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file...

CVE-2019-3580

OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file...

CVE-2019-3580

OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file...

CVE-2019-3580

OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file...