10419 matches found
CVE-2018-17914
CVE-2018-17914 affects Schneider Electric InduSoft Web Studio <8.1 SP2 and InTouch Edge HMI
AVEVA InduSoft Web Studio / InTouch Edge HMI UniSoft.dll wcscpy() Stack Overflow
Binary data scadaavevaiwsitehunisoftstackoverflow.nbin...
GHSA-G4GG-9F62-JFPH OrientDB Studio web management interface is vulnerable to clickjacking attacks
The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...
OrientDB Studio web management interface is vulnerable to clickjacking attacks
The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...
OrientDB-Server vulnerable to Cross-Site Request Forgery
The JSONP endpoint in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict callback values, which allows remote attackers to conduct cross-site request forgery CSRF attacks, and obtain sensitive information, via a crafted HTTP...
Wecon PI Studio HMI and PI Studio Buffer Overflow Vulnerability (CNVD-2018-21173)
Wecon PI Studio HMI and PI Studio are both HMI programming software from Wecon Technologies China. A buffer overflow vulnerability exists in Wecon PI Studio HMI version 4.1.9 and earlier and PI Studio version 4.2.34 and earlier. An attacker could exploit the vulnerability to execute code in the...
Wecon PI Studio HMI and PI Studio XML External Entity Injection Vulnerability
Wecon PI Studio HMI and PI Studio are both HMI programming software from Wecon Technologies China. An XML external entity injection vulnerability exists in XMLParser in Wecon PI Studio HMI 4.1.9 and earlier and PI Studio 4.2.34 and earlier. An attacker can exploit this vulnerability to obtain...
Microsoft Visual Studio Code URL Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Visual Studio Code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Wecon PI Studio HMI and PI Studio Buffer Overflow Vulnerability
Wecon PI Studio HMI and PI Studio are both HMI programming software from Wecon Technologies China. A stack buffer overflow vulnerability exists in Wecon PI Studio HMI version 4.1.9 and earlier and PI Studio version 4.2.34 and earlier. A remote attacker could exploit this vulnerability to execute...
The vulnerability of the PI Studio XML development tool analyzer arises from incorrect restrictions on XML references to external objects, allowing attackers to disclose protected information.
The vulnerability of the PI Studio XML analysis tool arises from an incorrect limitation on XML references to external objects. Operating this tool may allow a malicious actor to disclose protected information...
The vulnerability of the development tool PI Studio arises from the possibility of writing beyond the boundaries of the allocated buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the development tool PI Studio arises from the possibility of writing beyond the boundaries of the allocated buffer in memory. This allows a malicious actor, operating remotely, to execute arbitrary code...
The vulnerability of the development tool PI Studio arises from insufficient verification of the data entered by users. This allows attackers to gain access to protected information.
The vulnerability of the development tool PI Studio arises from insufficient verification of the data entered by users. Operating this tool may allow a malicious actor to gain access to protected information...
The vulnerability of the development tool PI Studio arises from buffer overflow in the stack, allowing an attacker to execute arbitrary code.
The vulnerability of the development tool PI Studio arises from an overflow in the buffer of the stack. Operating this tool allows a malicious actor to execute arbitrary code...
Microsoft SQL Server Management Studio (SSMS) Installed
Binary data microsoftssmsinstalled.nbin...
Wecon PI Studio HMI and PI Studio Buffer Overflow Vulnerability
Wecon PI Studio HMI and PI Studio are both HMI programming software from Wecon Technologies China. An out-of-bounds read vulnerability exists in Wecon PI Studio HMI version 4.1.9 and earlier and PI Studio version 4.2.34 and earlier, where the program fails to properly validate user-submitted data...
Microsoft SQL Server Management Studio 17.9 / 18.0 Preview 4 XML Injection
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-SQL-SERVER-MGMT-STUDIO-REGSRVR-FILES-XML-INJECTION-CVE-2018-8533.txt + ISR: ApparitionSec + Zero Day Initiative Program Vendor www.microsoft.com Product SQL Server...
Microsoft SQL Server Management Studio 17.9 - XML External Entity Injection
Microsoft SQL Server Management Studio 17.9 - XML External Entity Injection Exploit Title: Microsoft SQL Server Management Studio 17.9 - XML External Entity Injection Date: 2018-10-10 Author: John Page aka hyp3rlinx Website: hyp3rlinx.altervista.org Venodor: www.microsoft.com Software: SQL Server...
Microsoft SQL Server Management Studio 17.9 / 18.0 Preview 4 XML Injection
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-SQL-SERVER-MGMT-STUDIO-XMLA-FILETYPE-XML-INJECTION-CVE-2018-8532.txt + ISR: ApparitionSec + Zero Day Initiative Program Vendor www.microsoft.com Product SQL Server...
Microsoft SQL Server Management Studio 17.9 - .xmla XML External Entity Injection
Microsoft SQL Server Management Studio 17.9 - .xmla XML External Entity Injection Exploit Title: Microsoft SQL Server Management Studio 17.9 - '.xmla' XML External Entity Injection Date: 2018-10-10 Author: John Page aka hyp3rlinx Website: hyp3rlinx.altervista.org Venodor: www.microsoft.com...
