Null pointer dereference

Access of uninitialized pointer vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-29925

Access of uninitialized pointer vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-29925

CVE-2022-29925 affects Fuji Electric Monitouch V-SFT in the simulator module. An uninitialized pointer vulnerability in V-SFT versions prior to 6.1.6.0 can allow information disclosure and, potentially, arbitrary code execution when a user opens a specially crafted image file. Multiple connected ...

CVE-2022-29522

Use after free vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-29522

The CVE-2022-29522 entry affects Fuji Electric’s V-SFT (Monitouch) graphic editor, specifically the simulator module, where a Use-After-Free condition can be triggered by opening a specially crafted image file. The linked JVN/UVD entries confirm the vulnerability class (CWE-416) and indicate impa...

CVE-2022-29506

Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor 'V-SFT' v6.1.3.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-29506

CVE-2022-29506 affects Fuji Electric Monitouch V-SFT, specifically the simulator module, with V-SFT versions up to 6.1.3.0 vulnerable to an out-of-bounds read (CWE-125) that can lead to information disclosure and arbitrary code execution when a user opens a specially crafted image file. JPN/JPCER...

CVE-2022-26302

Heap-based buffer overflow exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-26302

CVE-2022-26302 affects Fuji Electric V-SFT in the simulator module; versions prior to v6.1.6.0 are vulnerable to a heap-based buffer overflow when opening a specially crafted image file. The underlying impact reported is potential information disclosure and/or arbitrary code execution. Red Hat se...

PT-2022-19664

Name of the Vulnerable Software and Affected Versions V-SFT versions 6.1.3.0 and earlier Description An out-of-bounds read issue exists in the simulator module of the graphic editor V-SFT, which may allow an attacker to obtain information and/or execute arbitrary code by having a user open a...

CVE-2022-29522: Use After Free

Use after free vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-29925: Access of Uninitialized Pointer

Access of uninitialized pointer vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-29506: Out-of-bounds Read

Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor 'V-SFT' v6.1.3.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-26302: Out-of-bounds Write

Heap-based buffer overflow exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

Multiple vulnerabilities in Fuji Electric V-SFT

Overview Multiple vulnerabilities listed below exist in the simulator module contained in the graphic editor "V-SFT" provided by FUJI ELECTRIC CO., LTD. Out-of-bounds Write CWE-787 - CVE-2022-30538 Out-of-bounds Read CWE-125 - CVE-2022-30546 Heap-based Buffer Overflow CWE-122 - CVE-2022-26302 Use...

Multiple vulnerabilities in Fuji Electric V-SFT, V-Server and V-Server Lite

Overview Multiple vulnerabilities listed below exist in the simulator module contained in the graphic editor "V-SFT" and the remote monitoring software "V-Server" and "V-Server Lite" provided by FUJI ELECTRIC CO., LTD. Out-of-bounds Read in V-SFT CWE-125 - CVE-2022-29506 Out-of-bounds Read in...

PT-2022-3354

Name of the Vulnerable Software and Affected Versions V-SFT versions prior to 6.1.6.0 Description The issue is related to an out-of-bounds write operation in the memory of the V-SFT graphic editor's simulator module. This could allow an attacker to gain unauthorized access to protected informatio...

PT-2022-3353

Name of the Vulnerable Software and Affected Versions V-SFT versions prior to v6.1.6.0 Description A heap-based buffer overflow exists in the simulator module of the graphic editor V-SFT, which may allow an attacker to obtain information and/or execute arbitrary code by having a user open a...

PT-2022-3352

Name of the Vulnerable Software and Affected Versions V-SFT versions prior to v6.1.6.0 Description A use after free vulnerability exists in the simulator module of the graphic editor V-SFT. This issue may allow an attacker to obtain information and/or execute arbitrary code by having a user open ...

CVE-2020-27646

Biscom Secure File Transfer (SFT) platforms are affected in versions prior to 5.1.1082 and 6.x prior to 6.0.1011, where a vulnerability enables user credential theft. The CVSS data indicates network exposure with a high confidentiality impact (C:H) but no integrity or availability impact, and use...