CVE-2022-29509

CVE-2022-29509 is a directory traversal vulnerability in T&D Data Server (Japanese Edition v2.22 and earlier) and (English Edition) v2.30 and earlier, and THERMO RECORDER DATA SERVER (Japanese/English) v2.13 and earlier. The root cause is an input validation issue that allows a remote attacker to...

PT-2022-3202 · Unknown · Igss Data Server

Name of the Vulnerable Software and Affected Versions: IGSS Data Server - IGSSdataServer.exe versions prior to V15.0.0.22170 Description: A buffer copy without checking the size of input vulnerability exists, potentially leading to a stack-based buffer overflow and remote code execution when an...

PT-2022-3203 · Unknown · Igss Data Server

Name of the Vulnerable Software and Affected Versions: IGSS Data Server versions prior to V15.0.0.22170 Description: The issue is related to a missing authentication procedure for critical functions in the IGSS Data Server, part of the Interactive Graphical SCADA System. This could allow a remote...

PT-2022-3182 · Unknown · Igss Data Server

Name of the Vulnerable Software and Affected Versions: IGSS Data Server - IGSSdataServer.exe versions prior to V15.0.0.22170 Description: A buffer copy without checking the size of input vulnerability exists, potentially leading to a stack-based buffer overflow and remote code execution when an...

PT-2022-3200 · Unknown · Igss Data Server

Name of the Vulnerable Software and Affected Versions: IGSS Data Server - IGSSdataServer.exe versions prior to V15.0.0.22170 Description: A buffer copy without checking the size of input vulnerability exists, potentially leading to a stack-based buffer overflow and remote code execution when an...

PT-2022-3201 · Unknown · Igss Data Server

Name of the Vulnerable Software and Affected Versions: IGSS Data Server - IGSSdataServer.exe versions prior to V15.0.0.22170 Description: A buffer copy without checking the size of input vulnerability exists, potentially leading to a stack-based buffer overflow and remote code execution when an...

PT-2022-3197 · Unknown · Igss Data Server

Name of the Vulnerable Software and Affected Versions: IGSS Data Server versions prior to V15.0.0.22170 Description: The issue is related to a buffer copy without checking the size of input data, which could cause a stack-based buffer overflow. This might lead to remote code execution when an...

PT-2022-3198 · Unknown · Igss Data Server

Name of the Vulnerable Software and Affected Versions: IGSS Data Server versions prior to V15.0.0.22170 Description: The issue is related to a buffer copy without checking the size of input data, which could cause a stack-based buffer overflow. This might lead to remote code execution when an...

CVE-2022-29509: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in T&D Data Server Japanese Edition Ver.2.22 and earlier, T&D Data Server English Edition Ver.2.30 and earlier, THERMO RECORDER DATA SERVER Japanese Edition Ver.2.13 and earlier, and THERMO RECORDER DATA SERVER English Edition Ver.2.13 and earlier allows a remote...

T&D Data Server and THERMO RECORDER DATA SERVER contain a directory traversal vulnerability.

Overview T Data Server and THERMO RECORDER DATA SERVER provided by T Corporation contain a directory traversal vulnerability CWE-22. Shun Asai of FiveDrive, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impa...

T&D Data Server 路径遍历漏洞

T&D Data Server is a free Windows program from T&D that can be installed and run on a PC to act as a server to receive recorded data. Even in environments where cloud services are not available, you can use functions such as saving received logged data, monitoring and graphical display via a web...

OESA-2022-1628 evolution-data-server security update

The evolution-data-server package provides a personal information management application that provides integrated mail, calendaring and address book functionality. The evolution-data-server package provides a single database for common, desktop-wide information, such as a user's address book or...

evolution-data-server bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

evolution-data-server bug fix and enhancement update

An update is available for evolution-data-server. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

PT-2022-3142 · Unknown · Igss Data Server

Name of the Vulnerable Software and Affected Versions: IGSS Data Server - IGSSdataServer.exe versions prior to V15.0.0.22073 Description: A buffer copy without checking the size of the input issue exists, potentially leading to a stack-based buffer overflow and remote code execution when an...

PT-2022-3589 · Unknown · Igss Data Server

Name of the Vulnerable Software and Affected Versions: IGSS Data Server - IGSSdataServer.exe versions prior to V15.0.0.22073 Description: A CWE-190: Integer Overflow or Wraparound issue exists, potentially causing a heap-based buffer overflow. This could lead to denial of service and possibly...

Schneider Electric IGSS Data Server Path Traversal (CVE-2022-24312)

Binary data schneiderelectricigsscve-2022-24312.nbin...

Schneider Electric IGSS

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: IGSS Interactive Graphical SCADA System Vulnerabilities: Integer Overflow or Wraparound, Path Traversal, Classic Buffer Overflow, Out-of-bounds Read, Improper...

CVE-2022-24312

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by adding at end of file or create a new file in the context of the Data Server potentially leading to remote code execution when an attacker sends a...

CVE-2022-24312

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by adding at end of file or create a new file in the context of the Data Server potentially leading to remote code execution when an attacker sends a...