Denial of Service Vulnerability in MXProgrammer Software

MXProgrammer software is a windows desktop software of Weihai Mack Electric Technology Co., Ltd. which is used to communicate with its MX series PLC products and complete the functions of program writing and downloading. A denial of service vulnerability exists in the MXProgrammer software. When...

Denial of Service Vulnerability in MXProgrammer Software

MXProgrammer software is a windows desktop software of Weihai Mack Electric Technology Co., Ltd. which is used to communicate with its MX series PLC products and complete the functions of program writing and downloading. A denial of service vulnerability exists in the MXProgrammer software. The...

CVE-2018-7517

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out of bounds vulnerability...

CVE-2018-7521

In Omron CX-Supervisor Versions 3.30 and prior, use after free vulnerabilities can be exploited when CX Supervisor parses a specially crafted project file...

Design/Logic Flaw

In Omron CX-Supervisor Versions 3.30 and prior, use after free vulnerabilities can be exploited when CX Supervisor parses a specially crafted project file...

CVE-2018-7521

In Omron CX-Supervisor Versions 3.30 and prior, use after free vulnerabilities can be exploited when CX Supervisor parses a specially crafted project file...

CVE-2018-7521

CVE-2018-7521 concerns Omron CX-Supervisor (versions 3.30 and earlier) with a use-after-free in the parsing/processing of project files (SCS/SCS-like). The ZDI advisories describe multiple use-after-free conditions in parsing various CX-Supervisor project/file formats that allow remote attackers ...

CVE-2018-7521: Use After Free

In Omron CX-Supervisor Versions 3.30 and prior, use after free vulnerabilities can be exploited when CX Supervisor parses a specially crafted project file...

PT-2018-18126

Name of the Vulnerable Software and Affected Versions Omron CX-Supervisor versions 3.30 and prior Description The issue arises when Omron CX-Supervisor parses a specially crafted project file, leading to use after free vulnerabilities that can be exploited for remote code execution. Recommendatio...

Omron CX-Supervisor Buffer Overflow Vulnerability

CX-Supervisor is a Miscellaneous Shareware software.CX-Supervisor is dedicated to the design and operation of PC visualization and machine control. A buffer overflow vulnerability exists in Omron CX-Supervisor 3.30 and earlier versions, where parsing an incorrectly formatted project file may resu...

Omron CX-Supervisor Heap Buffer Overflow Vulnerability

CX-Supervisor is a Miscellaneous Shareware software.CX-Supervisor is dedicated to the design and operation of PC visualization and machine control. A heap buffer overflow vulnerability exists in Omron CX-Supervisor version 3.30, where parsing an incorrectly formatted project file could result in ...

CVE-2017-16670

The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file...

Code injection

The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file...

CVE-2017-16670

The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file...

CVE-2017-16670: Improper Control of Generation of Code

The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file...

PT-2018-6303

Name of the Vulnerable Software and Affected Versions: SoapUI version 5.3.0 Description: The issue allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file. Recommendations: For SoapUI version 5.3.0, consider restricting access to the project...

CVE-2017-12705: Improper Restriction of Operations within the Bounds of a Memory Buffer

A Heap-Based Buffer Overflow issue was discovered in Advantech WebOP. A maliciously crafted project file may be able to trigger a heap-based buffer overflow, which may crash the process and allow an attacker to execute arbitrary code...

The vulnerability of the microprogramming software of Siemens SIMATIC STEP 7 (TIA Portal) arises from the incorrect file management format used for TIA project files during version updates. This allows attackers to access important information regarding configuration settings.

The vulnerability of the microprogramming software used in Siemens SIMATIC STEP 7 TIA Portal is related to the use of an incorrect file management format for TIA project files during version updates. Exploiting this vulnerability can allow a local attacker to access important configuration...

CVE-2017-14627

Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the 1 author inside the INFORMATION tag, 2 name inside the INFORMATION tag, 3 artist inside the TRACK tag, or 4 default inside the TEXT tag parameter in an lpp project file...

CVE-2017-14627

Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the 1 author inside the INFORMATION tag, 2 name inside the INFORMATION tag, 3 artist inside the TRACK tag, or 4 default inside the TEXT tag parameter in an lpp project file...