Lucene search
+L

952 matches found

CNVD
CNVD
•added 2019/04/28 12:00 a.m.•13 views

Memory Corruption Vulnerability in KGL_WIN

KGLWIN is a PLC programming software. A memory corruption vulnerability exists in KGLWIN's handling of kpr project files, which can be exploited by an attacker to gain control of a user's system or crash the program...

7.2AI score
SaveExploits0
CNVD
CNVD
•added 2019/04/28 12:00 a.m.•7 views

Memory Corruption Vulnerability in SKWorkshop

SKWorkshop is a configuration software produced by Shenzhen Xianzhong Technology Co. SKWorkshop suffers from a memory corruption vulnerability when processing shm project files, which can be exploited by attackers to gain control of a user's system or crash the program...

7.2AI score
SaveExploits0
OSV
OSV
•added 2019/04/17 3:29 p.m.•11 views

CVE-2019-10951

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. There is a lack of user input validatio...

7.8CVSS7AI score0.02941EPSS
SaveExploits0References4
OSV
OSV
•added 2019/04/17 3:29 p.m.•19 views

CVE-2019-10949

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple out-of-bounds read vulnerabilities may be exploited, allowing information disclosure due to a lack of user input validation for processing specially crafted project files...

5.5CVSS6AI score0.0241EPSS
SaveExploits0References13
OSV
OSV
•added 2019/04/17 3:29 p.m.•13 views

CVE-2019-10947

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. This may occur because CNCSoft lacks...

7.8CVSS7.3AI score0.03666EPSS
SaveExploits0References10
Prion
Prion
•added 2019/04/17 3:29 p.m.•27 views

Design/Logic Flaw

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple out-of-bounds read vulnerabilities may be exploited, allowing information disclosure due to a lack of user input validation for processing specially crafted project files...

4.3CVSS5.4AI score0.0241EPSS
SaveExploits0References13Affected Software1
Cvelist
Cvelist
•added 2019/04/17 2:03 p.m.•86 views

CVE-2019-10949

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple out-of-bounds read vulnerabilities may be exploited, allowing information disclosure due to a lack of user input validation for processing specially crafted project files...

5.4AI score0.0241EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2019/04/17 12:00 a.m.•4 views

PT-2019-12098

Name of the Vulnerable Software and Affected Versions Delta Industrial Automation CNCSoft ScreenEditor version 1.00.88 and prior Description The issue is related to multiple heap-based buffer overflow vulnerabilities that can be exploited by processing specially crafted project files, allowing an...

7.8CVSS0.02941EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2019/04/17 12:00 a.m.•5 views

PT-2019-12094

Name of the Vulnerable Software and Affected Versions Delta Industrial Automation CNCSoft ScreenEditor versions 1.00.88 and prior Description The issue arises from multiple stack-based buffer overflow vulnerabilities that can be exploited by processing specially crafted project files, allowing an...

7.8CVSS0.03666EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/17 12:00 a.m.•6 views

CVE-2019-10947: Stack-based Buffer Overflow

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. This may occur because CNCSoft lacks...

7.8CVSS6.8AI score0.03666EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/17 12:00 a.m.•6 views

CVE-2019-10949: Out-of-bounds Read

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple out-of-bounds read vulnerabilities may be exploited, allowing information disclosure due to a lack of user input validation for processing specially crafted project files...

5.5CVSS5.8AI score0.0241EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/17 12:00 a.m.•6 views

CVE-2019-10951: Heap-based Buffer Overflow

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. There is a lack of user input validatio...

7.8CVSS6.7AI score0.02941EPSS
SaveExploits0References3
OSV
OSV
•added 2019/03/27 6:29 p.m.•13 views

CVE-2018-18994

LCDS Laquis SCADA prior to version 4.1.0.4150 allows an out of bounds read when opening a specially crafted project file, which may cause a system crash or allow data exfiltration...

7.1CVSS5.8AI score0.01054EPSS
SaveExploits0References1
OSV
OSV
•added 2019/02/28 9:29 p.m.•14 views

CVE-2019-6547

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.84 and prior. An out-of-bounds read vulnerability may cause the software to crash due to lacking user input validation for processing project files...

5.5CVSS6.1AI score0.01105EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/02/28 12:00 a.m.•9 views

CVE-2019-6547: Out-of-bounds Read

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.84 and prior. An out-of-bounds read vulnerability may cause the software to crash due to lacking user input validation for processing project files...

5.5CVSS5.8AI score0.01105EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2019/02/20 12:00 a.m.•15 views

PT-2019-18159 · Delta Industrial Automation · Cncsoft Screeneditor

Name of the Vulnerable Software and Affected Versions: Delta Industrial Automation CNCSoft ScreenEditor versions 1.00.84 and prior Description: An out-of-bounds read issue may cause the software to crash due to lacking user input validation for processing project files. This occurs when the...

5.5CVSS5.3AI score0.01105EPSS
SaveExploits0References5
CNVD
CNVD
•added 2019/02/15 12:00 a.m.•14 views

Schneider Electric Zelio Soft Resource Management Error Vulnerability

Schneider Electric Zelio Soft is a set of logic controller programming software from the French company Schneider Electric Schneider Electric. A resource management error vulnerability exists in Schneider Electric Zelio Soft. The vulnerability can be exploited to execute code via specially crafte...

7.8CVSS7.3AI score0.03037EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/02/13 12:00 a.m.•6 views

CVE-2019-6537: Stack-based Buffer Overflow

Multiple stack-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior may be exploited when parsing strings within project files. The process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An...

7.8CVSS6.5AI score0.01901EPSS
SaveExploits0References3
OSV
OSV
•added 2019/02/12 10:29 p.m.•14 views

CVE-2018-19018

An access of uninitialized pointer vulnerability in CX-Supervisor Versions 3.42 and prior could lead to type confusion when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application...

7.3CVSS5.9AI score0.0116EPSS
SaveExploits0References1
NVD
NVD
•added 2019/02/12 10:29 p.m.•25 views

CVE-2018-19018

An access of uninitialized pointer vulnerability in CX-Supervisor Versions 3.42 and prior could lead to type confusion when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application...

7.3CVSS7.2AI score0.0116EPSS
SaveExploits0References1
Rows per page
Query Builder