Adobe After Effects has a dll hijacking vulnerability

Adobe After Effects abbreviation "AE" is a graphic video processing software launched by Adobe. Adobe After Effects has a dll hijacking vulnerability when processing aep project files, which can be exploited by attackers to load a malicious dll and execute malicious code...

CVE-2019-3947

Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext. An attacker that can gain access to the project file can recover the database credentials and gain access to the database server...

CVE-2019-3947

Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext. An attacker that can gain access to the project file can recover the database credentials and gain access to the database server...

CVE-2019-3947

Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext. An attacker that can gain access to the project file can recover the database credentials and gain access to the database server...

Heap Overflow Vulnerability in Schneider Electric Twidosuite Software When Processing Its xpr Project Files

Schneider Electric Twidosuite is a programming software. A heap overflow vulnerability exists in the Schneider Electric Twidosuite software when processing its xpr project files. An attacker could exploit the vulnerability to execute malicious code...

GitLab CE and EE Incorrect Access Control Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An Access Control Error vulnerability exists in GitLab...

CVE-2019-10919

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Attackers with access to port 10005/tcp could perform device reconfigurations and obtain project files from the devices. The system manual recommends to protect access to this port. The security vulnerabili...

CVE-2019-10919

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Attackers with access to port 10005/tcp could perform device reconfigurations and obtain project files from the devices. The system manual recommends to protect access to this port. The security vulnerabili...

Security feature bypass

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Attackers with access to port 10005/tcp could perform device reconfigurations and obtain project files from the devices. The system manual recommends to protect access to this port. The security vulnerabili...

Siemens LOGO! 8 BM (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.4 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: LOGO! 8 BM Vulnerabilities: Missing Authentication for Critical Function, Improper Handling of Extra Values, Plaintext Storage of a Password 2. UPDATE INFORMATION This updated...

Stack Overflow Vulnerability in AH-PClink

AH-PClink is a human-machine interface software. AH-PClink suffers from a stack overflow vulnerability in the handling of hmp project files, which allows an attacker to trick a user with AH-PClink installed to open a malicious hmp file, execute malicious code on the user's system, gain control of...

Stack Overflow Vulnerability in Turing Open Matter Configuration Software Studio.exe Handling SPJ Files

Beijing Turing Kaiwu Technology Co., Ltd. is a company that deals with technology development; computer system services; data processing; basic software services; application software services and other items. A stack overflow vulnerability exists in the SPJ file handled by Studio.exe of Turing's...

Memory Corruption Vulnerability in SAMSoar Developer

SAMSoar Developer is a configuration software produced by Shenzhen Xianzhong Technology Co. SAMSoar Developer has a memory corruption vulnerability in the processing of ssp project files, which can be exploited by attackers to gain control of the user's system or crash the program...

Memory Corruption Vulnerability in Display Control Remote HMI

Remote HMI is a configuration software produced by Shenzhen Xianzhu Technology Co. A memory corruption vulnerability exists in the handling of smc project files in Remote HMI, which can be exploited by attackers to gain control of the user's system or crash the program...

Memory Corruption Vulnerability in SKWorkshop

SKWorkshop is a configuration software produced by Shenzhen Xianzhong Technology Co. SKWorkshop suffers from a memory corruption vulnerability when processing shm project files, which can be exploited by attackers to gain control of a user's system or crash the program...

Memory Corruption Vulnerability in KGL_WIN

KGLWIN is a PLC programming software. A memory corruption vulnerability exists in KGLWIN's handling of kpr project files, which can be exploited by an attacker to gain control of a user's system or crash the program...

Memory Corruption Vulnerability in InotouchEditor

InotouchEditor is an HMI programming software produced by Shenzhen Huichuan Technology Co. InotouchEditor suffers from a memory corruption vulnerability when handling afs project files, which can be exploited by an attacker to gain control of the user's system or crash the program...

CVE-2019-10947

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. This may occur because CNCSoft lacks...

Design/Logic Flaw

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple out-of-bounds read vulnerabilities may be exploited, allowing information disclosure due to a lack of user input validation for processing specially crafted project files...

CVE-2019-10949

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple out-of-bounds read vulnerabilities may be exploited, allowing information disclosure due to a lack of user input validation for processing specially crafted project files...