738 matches found
Design/Logic Flaw
This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionRV v4.50.3.1 and prior. The issues result from the lack of proper validation of user-supplied data, which can result in reads and writes past the end of allocated data structures...
CVE-2021-44462 Horner Automation Cscape EnvisionRV Improper Input Validation
This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionRV v4.50.3.1 and prior. The issues result from the lack of proper validation of user-supplied data, which can result in reads and writes past the end of allocated data structures...
The vulnerability of the Yokogawa CENTUM VP SCADA system, related to errors in the code, allows a intruder to execute arbitrary commands.
The vulnerability of the Yokogawa CENTUM VP SCADA system is related to errors in the code. Exploiting this vulnerability allows an intruder to execute arbitrary code by modifying the project files and injecting their own code into them, which will be executed upon a specified event...
CVE-2022-23985
The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution...
CVE-2022-25170
The affected product is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...
CVE-2022-23985
The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution...
CVE-2022-21209
The affected product is vulnerable to an out-of-bounds read while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution...
CVE-2022-21209
The affected product is vulnerable to an out-of-bounds read while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution...
Stack overflow
The affected product is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...
Out-of-bounds
The affected product is vulnerable to an out-of-bounds read while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution...
Out-of-bounds
The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution...
CVE-2022-21209 ICSA-22-055-01 FATEK Automation FvDesigner
The affected product is vulnerable to an out-of-bounds read while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution...
CVE-2022-23985
The CVE-2022-23985 entry corresponds to a vulnerability in Fatek Automation FvDesigner involving FPJ file parsing. Concretely, it is an out-of-bounds write in the FPJ parser that can allow arbitrary code execution when a crafted project file is processed. Multiple sources (ZDI advisories for ZDI-...
CVE-2022-23985 ICSA-22-055-01 FATEK Automation FvDesigner
The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution...
FATEK Automation FvDesigner 缓冲区错误漏洞
A buffer error vulnerability in FATEK Automation FvDesigner, a human-computer interaction device from FATEK, stems from the fact that when handling project files, the affected product is vulnerable to out-of-bounds reads, which can be exploited to create a project file that allows arbitrary code...
FATEK Automation FvDesigner 缓冲区错误漏洞
A buffer error vulnerability exists in FATEK Automation FvDesigner, a human-computer interaction device from FATEK, which stems from out-of-bounds writes when processing project files and can be exploited to create a project file that allows arbitrary code execution...
FATEK Automation FvDesigner 缓冲区错误漏洞
FATEK Automation FvDesigner is a human-computer interaction device from FATEK. A buffer overflow vulnerability exists in FATEK Automation FvDesigner, which stems from the fact that when processing project files, the affected product is susceptible to a stack-based buffer overflow that could be...
Xerte 路径遍历漏洞
Xerte is an open source software from The Xerte Project community in the UK. Used to create learning objects. Xerte has a security vulnerability that stems from a directory traversal vulnerability in the Xerte Project Xerte to 3.10.3 when downloading project files via download.php. No details of...
CVE-2021-40363
CVE-2021-40363 affects Siemens SIMATIC PCS 7 and WinCC products. The underlying issue is that the affected component stores local system account credentials in a publicly accessible project file using an outdated cipher algorithm, enabling an attacker to brute-force credentials and take over the ...