338 matches found
CVE-2024-11798
CVE-2024-11798 affects Fuji Electric Monitouch V-SFT, where an out-of-bounds write during X1 file parsing (due to improper validation of user-supplied data) allows remote code execution. The vulnerability requires user interaction (visiting a malicious page or opening a malicious file) and enable...
Fuji Electric Monitouch V-SFT 缓冲区错误漏洞
Fuji Electric Monitouch V-SFT is a configuration software for Human Machine Interfaces HMI from Fuji Electric. It supports a variety of features including customizable home screen, PDF document viewer, video player, alarm messages, 10 pop-up windows, and more. An out-of-bounds write code executio...
Fuji Electric Monitouch V-SFT 安全漏洞
Fuji Electric Monitouch V-SFT is a screen configuration software from Fuji Electric Japan. A security vulnerability exists in Fuji Electric Monitouch V-SFT version X1, which stems from a heap-based buffer overflow issue contained in the X1 file parsing function. An attacker could exploit the...
PT-2024-9109 · Fuji Electric · Fuji Electric Monitouch V-Sft
Name of the Vulnerable Software and Affected Versions: Fuji Electric Monitouch V-SFT affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this...
PT-2024-9106 · Fuji Electric · Fuji Electric Monitouch V-Sft
Name of the Vulnerable Software and Affected Versions: Fuji Electric Monitouch V-SFT affected versions not specified Description: The issue is related to a remote code execution vulnerability due to an out-of-bounds write in the parsing of X1 files. This vulnerability allows remote attackers to...
VulnCheck KEV: CVE-2020-14979
The WinRing0.sys and WinRing0x64.sys drivers 1.2.0 in EVGA Precision X1 through 1.0.6 allow local users, including low integrity processes, to read and write to arbitrary memory locations. This allows any user to gain NT AUTHORITY\SYSTEM privileges by mapping \Device\PhysicalMemory into the...
Malicious code in Blockсоrе.Netwоrks.X1 (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Fuji Electric Tellus Lite V-Simulator 6 X1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
x1-autoteile.de Cross Site Scripting vulnerability OBB-3881956
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-1225
A vulnerability classified as critical was found in QiboSoft QiboCMS X1 up to 1.0.6. Affected by this vulnerability is the function rmbpay of the file /application/index/controller/Pay.php. The manipulation of the argument callbackclass leads to deserialization. The attack can be launched remotel...
Deserialization of untrusted data
A vulnerability classified as critical was found in QiboSoft QiboCMS X1 up to 1.0.6. Affected by this vulnerability is the function rmbpay of the file /application/index/controller/Pay.php. The manipulation of the argument callbackclass leads to deserialization. The attack can be launched remotel...
CVE-2024-1225 QiboSoft QiboCMS X1 Pay.php rmb_pay deserialization
A vulnerability classified as critical was found in QiboSoft QiboCMS X1 up to 1.0.6. Affected by this vulnerability is the function rmbpay of the file /application/index/controller/Pay.php. The manipulation of the argument callbackclass leads to deserialization. The attack can be launched remotel...
PT-2024-17507 · Qibosoft · Qibocms X1
Name of the Vulnerable Software and Affected Versions: QiboSoft QiboCMS X1 versions up to 1.0.6 Description: A critical vulnerability was found in the function rmb pay of the file /application/index/controller/Pay.php. The manipulation of the argument callback class leads to deserialization. The...
Qibosoft QiboCMS Code Issue Vulnerability
Qibosoft QiboCMS is an application software of China Qibo Software Qibosoft Company. A website builder CMS. A code issue vulnerability exists in Qibosoft QiboCMS versions X1 through 1.0.6, which stems from the parameter callbackclass in file /application/index/controller/Pay.php that causes...
CVE-2023-47580
Multiple improper restriction of operations within the bounds of a memory buffer issues exist in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file X1, V8, or V9 file, information may be disclosed and/or arbitrary code may be executed...
CVE-2023-47581
Out-of-bounds read vulnerability exists in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file X1, V8, or V9 file, information may be disclosed and/or arbitrary code may be executed...
CVE-2023-47581
Out-of-bounds read vulnerability exists in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file X1, V8, or V9 file, information may be disclosed and/or arbitrary code may be executed...
PT-2023-6869 · Tellus +1 · Tellus +1
Name of the Vulnerable Software and Affected Versions: TELLUS versions 4.0.17.0 and earlier TELLUS Lite versions 4.0.17.0 and earlier Description: The issue is related to improper restriction of operations within the bounds of a memory buffer. If a user opens a specially crafted file, such as X1,...
kernel: usb: ucsi_acpi: Increase the command completion timeout
In the Linux kernel, the following vulnerability has been resolved: usb: ucsiacpi: Increase the command completion timeout Commit 130a96d698d7 "usb: typec: ucsi: acpi: Increase command completion timeout value" increased the timeout from 5 seconds to 60 seconds due to issues related to alternate...