CVE-2020-27288

An untrusted pointer dereference has been identified in the way TPEditorv1.98 and prior processes project files, allowing an attacker to craft a special project file that may permit arbitrary code execution...

CVE-2020-27284

TPEditor v1.98 and prior is vulnerable to two out-of-bounds write instances in the way it processes project files, allowing an attacker to craft a special project file that may permit arbitrary code execution...

CVE-2020-16236

FPWIN Pro is vulnerable to an out-of-bounds read vulnerability when a user opens a maliciously crafted project file, which may allow an attacker to remotely execute arbitrary code...

Out-of-bounds

TPEditor v1.98 and prior is vulnerable to two out-of-bounds write instances in the way it processes project files, allowing an attacker to craft a special project file that may permit arbitrary code execution...

Design/Logic Flaw

A use after free issue has been identified in the way ISPSoftv3.12 and prior processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution...

CVE-2020-27284

CVE-2020-27284 affects Delta Electronics TPEditor (v1.98 and prior). Two out-of-bounds write vulnerabilities in how it processes project files may allow crafting a malicious project file to execute arbitrary code. Affected product: TPEditor; exploitation context is local, with reported CVSS v3 ba...

CVE-2020-27280

CVE-2020-27280 is a use-after-free vulnerability in Delta Electronics ISPSoft (v3.12 and prior) related to how it processes ISP project files. The flaw can allow an attacker to craft a malicious project file that may execute arbitrary code within the application’s context. Public-facing sources d...

CVE-2020-27288

An untrusted pointer dereference has been identified in the way TPEditorv1.98 and prior processes project files, allowing an attacker to craft a special project file that may permit arbitrary code execution...

CVE-2020-27289

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27275

Delta Electronics DOPSoft Version 4.0.8.21 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27289

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27291

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27287

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27281

A stack-based buffer overflow may exist in Delta Electronics CNCSoft ScreenEditor versions 1.01.26 and prior when processing specially crafted project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27293

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a type confusion issue while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27275

Delta Electronics DOPSoft Version 4.0.8.21 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27277

Delta Electronics DOPSoft Version 4.0.8.21 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code...

Null pointer dereference

Delta Electronics DOPSoft Version 4.0.8.21 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code...

Viki Solutions Viki Vera Access Control Error Vulnerability

Viki Solutions Viki Vera is a suite of workflow customization platforms from Canadian company Viki Solutions. The platform supports file uploading, job management, and other features. An access control error vulnerability exists in Viki Vera version 4.9.1.26180, which is related to the affected...

DOPSoft Null Pointer Dereference Vulnerability

DOPSoft is a Human Machine Interface HMI programming software from Delta Electronics. A null pointer dereference vulnerability exists in DOPSoft 4.0.8.21 and earlier versions when handling project files. An attacker could exploit this vulnerability to execute arbitrary code...