CVE-2025-61860

An out-of-bounds read vulnerability exists in VS6MemInIF!settemptypedefault of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end ABEND, and arbitrary code execution...

EUVD-2025-33696

An out-of-bounds write vulnerability exists in VS6ComFile!CItemExChange::WinFontDynStrCheck of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end ABEND, and arbitrary code execution...

CVE-2025-61857

An out-of-bounds write vulnerability exists in VS6ComFile!CItemExChange::WinFontDynStrCheck of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end ABEND, and arbitrary code execution...

CVE-2025-61858

The CVE-2025-61858 entry concerns Fuji Electric V-SFT (VS6ComFile!set_AnimationItem) with out-of-bounds write affecting V-SFT v6.2.7.0 and earlier. Documented impacts include information disclosure, abnormal termination (ABEND), and arbitrary code execution. Affected component is the VS6ComFile s...

CVE-2025-61856

A stack-based buffer overflow vulnerability exists in VS6ComFile!CV7BaseMap::WriteV7DataToRom of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end ABEND, and arbitrary code execution...

CVE-2025-61856

CVE-2025-61856 affects Fuji Electric V-SFT (VS6ComFile component) up to version 6.2.7.0, with a stack-based buffer overflow in CV7BaseMap::WriteV7DataToRom. Opening specially crafted V-SFT files may lead to information disclosure, ABEND, and arbitrary code execution. Multiple sources (NVD, Red Ha...

CVE-2025-21048

Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary code...

Fuji Electric V-SFT 缓冲区错误漏洞

Fuji Electric V-SFT is a screen configuration software from Fuji Electric Japan. A buffer error vulnerability exists in Fuji Electric V-SFT v6.2.7.0 and earlier versions, which stems from an out-of-bounds write to the CItemExChange::WinFontDynStrCheck function, which could lead to information...

Fuji Electric V-SFT 缓冲区错误漏洞

Fuji Electric V-SFT is a human-machine interface HMI configuration software developed by Fuji Electric FujiElectric, which is mainly used for touch-screen interface design, PDF document viewing, video playback, alarm message management and other functions in the field of industrial automation. Fu...

Fuji Electric V-SFT 缓冲区错误漏洞

Fuji Electric V-SFT is a screen configuration software from Fuji Electric Japan. A buffer error vulnerability exists in Fuji Electric V-SFT v6.2.7.0 and earlier versions, which stems from an out-of-bounds read in VS6MemInIF!settemptypedefault, which could lead to information disclosure, abnormal...

Fuji Electric V-SFT 资源管理错误漏洞

Fuji Electric V-SFT is a screen configuration software from Fuji Electric Japan. A resource management error vulnerability exists in Fuji Electric V-SFT v6.2.7.0 and earlier versions, which stems from the existence of post-release reuse of VS6ComFile!loadlinkinf, which could lead to information...

MingSoft MCMS 安全漏洞

MingSoft MCMS is a complete open source J2ee system from China's MingFei MingSoft. A security vulnerability exists in MingSoft MCMS version v6.0.1, which originates from allowing the upload of specially crafted files and could lead to the execution of arbitrary code...

Fuji Electric V-SFT 缓冲区错误漏洞

Fuji Electric V-SFT is a screen configuration software from Fuji Electric Japan. A buffer error vulnerability exists in Fuji Electric V-SFT v6.2.7.0 and earlier versions, which stems from an out-of-bounds write to VS6ComFile!CItemDraw::ismotiontween, which could lead to information disclosure,...

PT-2025-41509

Name of the Vulnerable Software and Affected Versions Knox Enterprise versions prior to SMR Oct-2025 Release 1 Description A relative path traversal issue exists in Knox Enterprise prior to SMR Oct-2025 Release 1, potentially allowing local attackers to execute arbitrary code. Recommendations...

PT-2025-41552

Name of the Vulnerable Software and Affected Versions V-SFT versions 6.2.7.0 and earlier Description An out-of-bounds read issue exists in the VS6ComFile!load link inf function. Processing specially crafted V-SFT files can lead to information disclosure, system crashes ABEND, and arbitrary code...

ServiceNow AI Platform 安全漏洞

ServiceNow AI Platform is an AI only platform from ServiceNow, Inc. in the United States. A security vulnerability exists in ServiceNow AI Platform that stems from susceptibility to a reflective cross-site scripting attack that could lead to the execution of arbitrary code in the browser...

PT-2025-41548

Name of the Vulnerable Software and Affected Versions V-SFT versions 6.2.7.0 and earlier Description An out-of-bounds write issue exists in the VS6ComFile!CItemExChange::WinFontDynStrCheck function. Processing specially crafted V-SFT files can lead to information disclosure, system crashes ABEND,...

PT-2025-41554

Name of the Vulnerable Software and Affected Versions V-SFT versions prior to 6.2.7.0 Description An out-of-bounds read issue exists in the CSaveData::delete mem function within the VS6ComFile component. Opening specifically designed V-SFT files can result in information disclosure, system crashe...

PT-2025-41550

Name of the Vulnerable Software and Affected Versions V-SFT versions prior to 6.2.7.0 Description An out-of-bounds write vulnerability exists in the VS6ComFile!CItemDraw::is motion tween function. Opening specially crafted V-SFT files may lead to information disclosure, system crashes, and...

Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : WebKitGTK vulnerabilities (USN-7817-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7817-1 advisory. Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious...