Out-of-bounds

CNCSoft-B Versions 1.0.0.3 and prior is vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code...

CVE-2021-22664

CNCSoft-B Versions 1.0.0.3 and prior is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code...

CVE-2021-22664

CVE-2021-22664 affects Delta Electronics’ CNCSoft-B software (versions ≤ 1.0.0.3). The issue is an out-of-bounds write in the DPA file parsing path, allowing an attacker to execute arbitrary code. Multiple sources corroborate an impact to CNCSoft-B with potential code execution; ZDI explicitly de...

CVE-2021-22660

CVE-2021-22660 affects CNCSoft-B (Delta Electronics) versions 1.0.0.3 and earlier. Connected documents describe an out-of-bounds read in the DPA/DOPSoft/DPA file parsing that can lead to remote code execution, with exploitation requiring user interaction in some advisories and local access in oth...

CVE-2021-22660

CNCSoft-B Versions 1.0.0.3 and prior is vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code...

Delta Industrial Automation CNCSoft-B DOPSoft DPA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft-B DOPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

Delta Electronics CNCSoft-B Out-of-Bounds Write Vulnerability

Delta Electronics CNCSoft-B is a CNC machine simulation system software from Delta Electronics, China. The software provides high-performance motion control, rich human-machine interface functions, user-friendly operation, high stability to meet the needs of high-speed cutting, and good flexibili...

Delta Industrial Automation CNCSoft-B DOPSoft DPA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft-B DOPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

Delta Industrial Automation CNCSoft-B DOPSoft DPA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft-B DOPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

GHSA-7MX5-X372-XH87 Incorrect Session Validation in Apache Airflow

Incorrect Session Validation in Apache Airflow Webserver versions prior to 1.10.14 with default config allows a malicious airflow user on site A where they log in normally, to access unauthorized Airflow Webserver on Site B through the session from Site A. This does not affect users who have...

Delta Electronics CNCSoft-B 缓冲区错误漏洞

Delta Electronics CNCSoft-B is a CNC machine simulation system software from Delta Electronics, China. The software provides high-performance motion control, rich human-machine interface functions, user-friendly operation, high stability to meet the needs of high-speed cutting, and good flexibili...

Delta Electronics CNCSoft-B 缓冲区错误漏洞

Delta Electronics CNCSoft-B is a CNC machine simulation system software from Delta Electronics, China. The software provides high-performance motion control, rich human-machine interface functions, user-friendly operation, high stability to meet the needs of high-speed cutting, and good flexibili...

Delta Electronics CNCSoft-B

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Delta Electronics Equipment: CNCSoft-B Vulnerabilities: Out-of-bounds Read, Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities could lead to arbitrary code execution. 3. TECHNICAL...

Building an A/B Test with EdgeWorkers and EdgeKV

When paired with our new EdgeKV distributed key-value database, the Akamai EdgeWorkers serverless platform gives you the ability to do powerful things at the CDN level...

Unspecified Vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera

INSMA Wifi Mini Spy 1080P HD Security IP Camera is a camera from INSMA USA. A security vulnerability exists in INSMA Wifi Mini Spy 1080P HD Security IP Camera version 1.9.7 B, which can be exploited by an attacker to gain administrator privileges via a customized request to "/goform/formUserMng"...

ICSA-20-070-01_Siemens and PKE SiNVR/SiVMS Video Server (Update B)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendors: Siemens and PKE Equipment: SiNVR/SiVMS Video Server Vulnerabilities: Cleartext Storage in a File or on Disk, Path Traversal, Improper Input Validation, Weak Cryptography for Passwords 2. UPDATE...

CVE-2021-29255

MicroSeven MYM71080i-B 2.0.5 through 2.0.20 devices send admin credentials in cleartext to pnp.microseven.com TCP port 7007. An attacker on the same network as the device can capture these credentials...

CVE-2021-29255

MicroSeven MYM71080i-B 2.0.5 through 2.0.20 devices send admin credentials in cleartext to pnp.microseven.com TCP port 7007. An attacker on the same network as the device can capture these credentials...

CVE-2021-29255

CVE-2021-29255 affects MicroSeven MYM71080i-B firmware 2.0.5–2.0.20. The root cause is sending admin credentials in cleartext to pnp.microseven.com on TCP port 7007, enabling credential capture by an attacker on the same network. Public references confirm the issue exists in these firmware versio...

MicroSeven MYM71080i-B 安全漏洞

The MicroSeven MYM71080i-B is a camera firmware from MicroSeven, USA. A security vulnerability exists in MicroSeven MYM71080i-B 2.0.5 through 2.0.20, which originates from sending administrative credentials in clear text to pnp.microseven.com TCP port 7007...