CVE-2018-14788

Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. A buffer overflow information disclosure vulnerability occurs when parsing certain file types...

CVE-2018-14788

Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. A buffer overflow information disclosure vulnerability occurs when parsing certain file types...

Information disclosure

Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. A buffer overflow information disclosure vulnerability occurs when parsing certain file types...

CVE-2018-14794

Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on the length/size of a project file before copying the entire contents of the file to a heap-based buffer...

CVE-2018-14794

The issue CVE-2018-14794 affects Fuji Electric Alpha5 Smart Loader, Versions 3.7 and prior. A heap-based buffer overflow occurs because the device does not check the length/size of a project file before copying its entire contents into a heap buffer, enabling possible remote code execution. The I...

CVE-2018-14788

CVE-2018-14788 affects Fuji Electric Alpha5 Smart Loader versions 3.7 and earlier. Root cause: classic buffer overflow (buffer copy without checking input size) during parsing of certain file types, causing information disclosure. CVSSv3 base score 5.3 (vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)...

CVE-2018-14794

Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on the length/size of a project file before copying the entire contents of the file to a heap-based buffer...

Security Advisory - FRP Bypass Vulnerability in MyCloud APP of Huawei Smart Phones

There is a security vulnerability which could lead to Factory Reset Protection FRP bypass in the MyCloud APP installed on some Huawei smart phones. When re-configuring the mobile phone using the FRP function, an attacker can replace the old account with a new one through special steps by exploit...

Fuji Electric Alpha5 Smart Loader Buffer Overflow Vulnerability (CNVD-2019-03308)

The Fuji Electric Alpha5 Smart Loader is a servo motor product from Fuji Electric Japan. A heap buffer overflow vulnerability exists in Fuji Electric Alpha5 Smart Loader 3.7 and earlier versions, which can be exploited by an attacker to execute code due to the program failing to detect the...

Fuji Electric Alpha5 Smart Loader Buffer Overflow Vulnerability

The Fuji Electric Alpha5 Smart Loader is a servo motor product from Fuji Electric Japan. A buffer overflow vulnerability exists in Fuji Electric Alpha5 Smart Loader 3.7 and earlier versions, which can be exploited by an attacker to disclose information...

(0Day) Fuji Electric Alpha5 Smart Loader C5V File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fuji Electric Alpha Loader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PolyAI Integer Overflow Vulnerability

PolyAI AI is an ethereum-based virtual currency. The 'mintToken' function in PolyAI's smart contract implementation suffers from an integer overflow vulnerability that can be exploited by an attacker to set the balance of any user to any value...

September 26, 2018—KB4457136 (OS Build 16299.699)

None None...

CVE-2018-12975

The random function of the smart contract implementation for CryptoSaga, an Ethereum game, generates a random value with publicly readable variables such as timestamp, the current block's blockhash, and a private variable which can be read with a getStorageAt call. Therefore, attackers can...

Design/Logic Flaw

The random function of the smart contract implementation for CryptoSaga, an Ethereum game, generates a random value with publicly readable variables such as timestamp, the current block's blockhash, and a private variable which can be read with a getStorageAt call. Therefore, attackers can...

CVE-2018-12975

The random function of the smart contract implementation for CryptoSaga, an Ethereum game, generates a random value with publicly readable variables such as timestamp, the current block's blockhash, and a private variable which can be read with a getStorageAt call. Therefore, attackers can...

CVE-2018-12975

CVE-2018-12975 concerns CryptoSaga’s smart contract random() function. The vulnerability stems from using publicly readable variables—timestamp, current blockhash—and a private variable readable via getStorageAt—as inputs to random value creation. This allows an attacker to precompute the random ...

CVE-2018-17050

The mintToken function of a smart contract implementation for PolyAi AI, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-12511

In the mintToken function of a smart contract implementation for Substratum SUB, an Ethereum ERC20 token, the administrator can control mintedAmount, leverage an integer overflow, and modify a user account's balance arbitrarily...

Integer overflow

The mintToken function of a smart contract implementation for PolyAi AI, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...