CVE-2023-49675

An unauthenticated local attacker may trick a user to open corrupted project files to execute arbitrary code or crash the system due to an out-of-bounds write vulnerability...

EUVD-2023-53610

Malicious code in bioql PyPI...

CVE-2023-49676

An unauthenticated local attacker may trick a user to open corrupted project files to crash the system due to use after free vulnerability...

CVE-2023-49676

CVE-2023-49676 affects CODESYS Development System (industrial automation tooling). A use-after-free in handling corrupted project files allows an unauthenticated local attacker to trick a user into opening a malicious project file, potentially crashing the system (availability impact noted). Some...

CVE-2023-49675 CODESYS: Out-of-bounds write through corrupted project files

An unauthenticated local attacker may trick a user to open corrupted project files to execute arbitrary code or crash the system due to an out-of-bounds write vulnerability...

CVE-2023-49675 CODESYS: Out-of-bounds write through corrupted project files

An unauthenticated local attacker may trick a user to open corrupted project files to execute arbitrary code or crash the system due to an out-of-bounds write vulnerability...

CODESYS Development System 缓冲区错误漏洞

3s-smart Software Solutions CODESYS Development System is a suite of programming tools for use in the field of industrial controllers and automation technology from 3s-smart Software Solutions, Germany. A buffer error vulnerability exists in CODESYS Development System versions prior to V2.3.9.73,...

PT-2024-13780 · Codesys · Codesys Development System V2.3

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An unauthenticated local attacker may trick a user into opening corrupted project files, potentially crashing the system due to a use-after-free issue...

CVE-2023-49676: Use After Free

An unauthenticated local attacker may trick a user to open corrupted project files to crash the system due to use after free vulnerability...

Schneider Electric EcoStruxure Control Expert 缓冲区错误漏洞

Schneider Electric EcoStruxure Control Expert formerly known as Unity Pro is a suite of programming software for Schneider Electric logic controller products from Schneider Electric, France. A buffer error vulnerability exists in Schneider Electric EcoStruxure Control Expert version V15.1 HF001 a...