CVE-2022-29522

Use after free vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

Design/Logic Flaw

Use after free vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

Heap overflow

Heap-based buffer overflow exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

Cross site scripting

Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor 'V-SFT' v6.1.3.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-29506

Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor 'V-SFT' v6.1.3.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-29506

CVE-2022-29506 affects Fuji Electric Monitouch V-SFT, specifically the simulator module, with V-SFT versions up to 6.1.3.0 vulnerable to an out-of-bounds read (CWE-125) that can lead to information disclosure and arbitrary code execution when a user opens a specially crafted image file. JPN/JPCER...

CVE-2022-26302

CVE-2022-26302 affects Fuji Electric V-SFT in the simulator module; versions prior to v6.1.6.0 are vulnerable to a heap-based buffer overflow when opening a specially crafted image file. The underlying impact reported is potential information disclosure and/or arbitrary code execution. Red Hat se...

CVE-2022-29506: Out-of-bounds Read

Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor 'V-SFT' v6.1.3.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-29925: Access of Uninitialized Pointer

Access of uninitialized pointer vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-29522: Use After Free

Use after free vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-26302: Out-of-bounds Write

Heap-based buffer overflow exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

PT-2022-19664

Name of the Vulnerable Software and Affected Versions V-SFT versions 6.1.3.0 and earlier Description An out-of-bounds read issue exists in the simulator module of the graphic editor V-SFT, which may allow an attacker to obtain information and/or execute arbitrary code by having a user open a...

Unicorn Engine Denial of Service Vulnerability

Unicorn Engine is an application. A lightweight, multi-platform, multi-architecture CPU simulator framework based on QEMU. Unicorn Engine v2.0.0-rc7 and earlier versions have a denial of service vulnerability that stems from qemuramfree dereferencing null pointers. An attacker could exploit this...

Multiple vulnerabilities in Fuji Electric V-SFT

Overview Multiple vulnerabilities listed below exist in the simulator module contained in the graphic editor "V-SFT" provided by FUJI ELECTRIC CO., LTD. Out-of-bounds Write CWE-787 - CVE-2022-30538 Out-of-bounds Read CWE-125 - CVE-2022-30546 Heap-based Buffer Overflow CWE-122 - CVE-2022-26302 Use...

@adobe/helix-deploy (>=3.0.0, <=3.16.0), @nordicsemiconductor/asset-tracker-cloud-device-simulator-azure (>=1.0.0, <=1.2.0) +1 more potentially affected by CVE-2021-28458 via @azure/ms-rest-nodeauth (>=3.0.3, <=3.0.7)

@azure/ms-rest-nodeauth NPM version =3.0.3, =3.0.0, =1.0.0, =1.2.0 - @trulive/sye-tools 3.0.1 Source cves: CVE-2021-28458 Source advisory: GHSA-QPFW-4M9X-RXX8...

org.drools:drools-camel-server (>=5.3.1.final, <=5.4.0.beta2), org.drools:drools-simulator (5.4.0.beta2) +3 more potentially affected by CVE-2014-8125 via org.jbpm:jbpm-bpmn2 (5.2.0.final)

org.jbpm:jbpm-bpmn2 MAVEN version 5.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jbpm:jbpm-bpmn2 and may be impacted: - org.drools:drools-camel-server =5.3.1.final, =5.3.1.final, =5.4.0.beta2 Source cves: CVE-2014-8125 Source advisory:...

com.geeoz.atom:atom-api (>=1.0d12, <=1.0d31), com.geeoz.atom:atom-kie (1.0d31) +24 more potentially affected by CVE-2014-8125 via org.jbpm:jbpm-bpmn2 (>=6.0.0.alpha6, <=6.2.0.cr4)

org.jbpm:jbpm-bpmn2 MAVEN version =6.0.0.alpha6, =1.0d12, =1.0d30, =1.0d18, =1.0d12, =1.0d12, =6.0.0.alpha7, =6.0.0.alpha7, =6.0.0.alpha7, =6.0.0.alpha7, =6.0.0.alpha7, =6.0.0.alpha7, =6.0.0.alpha7, =6.0.0.alpha7, =6.0.0.beta1 and more Source cves: CVE-2014-8125 Source advisory:...

org.drools:drools-camel-server (5.4.0.final), org.drools:drools-simulator (5.4.0.final) +7 more potentially affected by CVE-2014-8125 via org.jbpm:jbpm-bpmn2 (5.3.0.final)

org.jbpm:jbpm-bpmn2 MAVEN version 5.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jbpm:jbpm-bpmn2 and may be impacted: - org.drools:drools-camel-server 5.4.0.final - org.drools:drools-simulator 5.4.0.final -...

org.drools:drools-camel-server-example (5.6.0.cr1), org.drools:drools-simulator (5.6.0.cr1) +12 more potentially affected by CVE-2014-8125 via org.jbpm:jbpm-bpmn2 (5.5.0.cr1)

org.jbpm:jbpm-bpmn2 MAVEN version 5.5.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jbpm:jbpm-bpmn2 and may be impacted: - org.drools:drools-camel-server-example 5.6.0.cr1 - org.drools:drools-simulator 5.6.0.cr1 -...

com.tacitknowledge:simulator-core (1.1), org.jruby:jruby-core (1.7.0.rc1) potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.0.rc1)

org.jruby:jruby-stdlib MAVEN version 1.7.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.tacitknowledge:simulator-core 1.1 - org.jruby:jruby-core 1.7.0.rc1 Source cves: CVE-2018-1000079 Source...