Out-of-bounds

The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution...

CVE-2022-21209 ICSA-22-055-01 FATEK Automation FvDesigner

The affected product is vulnerable to an out-of-bounds read while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution...

CVE-2022-23985 ICSA-22-055-01 FATEK Automation FvDesigner

The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution...

CVE-2022-23985

The CVE-2022-23985 entry corresponds to a vulnerability in Fatek Automation FvDesigner involving FPJ file parsing. Concretely, it is an out-of-bounds write in the FPJ parser that can allow arbitrary code execution when a crafted project file is processed. Multiple sources (ZDI advisories for ZDI-...

Xerte 路径遍历漏洞

Xerte is an open source software from The Xerte Project community in the UK. Used to create learning objects. Xerte has a security vulnerability that stems from a directory traversal vulnerability in the Xerte Project Xerte to 3.10.3 when downloading project files via download.php. No details of...

FATEK Automation FvDesigner 缓冲区错误漏洞

FATEK Automation FvDesigner is a human-computer interaction device from FATEK. A buffer overflow vulnerability exists in FATEK Automation FvDesigner, which stems from the fact that when processing project files, the affected product is susceptible to a stack-based buffer overflow that could be...

FATEK Automation FvDesigner 缓冲区错误漏洞

A buffer error vulnerability in FATEK Automation FvDesigner, a human-computer interaction device from FATEK, stems from the fact that when handling project files, the affected product is vulnerable to out-of-bounds reads, which can be exploited to create a project file that allows arbitrary code...

FATEK Automation FvDesigner 缓冲区错误漏洞

A buffer error vulnerability exists in FATEK Automation FvDesigner, a human-computer interaction device from FATEK, which stems from out-of-bounds writes when processing project files and can be exploited to create a project file that allows arbitrary code execution...

CVE-2021-40363

CVE-2021-40363 affects Siemens SIMATIC PCS 7 and WinCC products. The underlying issue is that the affected component stores local system account credentials in a publicly accessible project file using an outdated cipher algorithm, enabling an attacker to brute-force credentials and take over the ...

CVE-2021-43554

FATEK WinProladder Versions 3.3024518 and prior are vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2021-43554

FATEK WinProladder Versions 3.3024518 and prior are vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2021-43556

FATEK WinProladder Versions 3.3024518 and prior are vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

Out-of-bounds

FATEK WinProladder Versions 3.3024518 and prior are vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2021-38415

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable a heap-based buffer overflow when parsing a specially crafted project file, which may allow an attacker to execute arbitrary code...

多款Mitsubishi Electric产品缓冲区错误漏洞

Mitsubishi Electric GX Works2 is a programmable controller from Mitsubishi Electric Japan. A buffer error vulnerability exists in multiple Mitsubishi Electric products, which originates when a valid user opens a malicious project file specially crafted by an attacker to read data outside of the...

CVE-2021-43983

WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to multiple stack-based buffer overflow instances while parsing project files, which may allow an attacker to execute arbitrary code...

Stack overflow

WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to multiple stack-based buffer overflow instances while parsing project files, which may allow an attacker to execute arbitrary code...

CVE-2021-43983 WECON LeviStudioU

WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to multiple stack-based buffer overflow instances while parsing project files, which may allow an attacker to execute arbitrary code...

CVE-2021-42707

PLC Editor Versions 1.3.8 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2021-42707

PLC Editor Versions 1.3.8 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...