Lucene search
+L

498 matches found

ICS
ICS
added 2025/08/28 6:00 a.m.13 views

Delta Electronics CNCSoft-G2

RISK EVALUATION Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on affected installations of the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds...

7.3CVSS7.8AI score0.0039EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2025/08/04 12:00 a.m.8 views

Ubiquiti多款产品 安全漏洞

Ubiquiti UniFi Access Reader and others are products of Ubiquiti, U.S.A. Ubiquiti UniFi Access Reader is an access control system viewer device.Ubiquiti UniFi Access Intercom is an intercom system device. Ubiquiti UniFi Access Reader Pro is a card reader and access control intercom device. A...

9.8CVSS7.6AI score0.01205EPSS
SaveExploits0References2
OSV
OSV
added 2025/07/09 6:54 p.m.14 views

CLSA-2025-1752087242 Update of ca-certificates

update to CKBI 2.74 from NSS 3.110 - updated certificates: - Certificate "Entrust.net Premium 2048 Secure Server CA" - Certificate "Entrust Root Certification Authority" - Certificate "AffirmTrust Commercial" - Certificate "AffirmTrust Networking" - Certificate "AffirmTrust Premium" - Certificate...

5.8AI score
SaveExploits0References1
OSV
OSV
added 2025/07/09 6:49 p.m.17 views

CLSA-2025-1752086959 Update of ca-certificates

update to CKBI 2.74 from NSS 3.110 - updated certificates: - Certificate "Entrust.net Premium 2048 Secure Server CA" - Certificate "Entrust Root Certification Authority" - Certificate "AffirmTrust Commercial" - Certificate "AffirmTrust Networking" - Certificate "AffirmTrust Premium" - Certificate...

5.8AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/06/19 12:00 a.m.8 views

Delta Electronics CNCSoft-G2 DPAX File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-G2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.5AI score0.0039EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/06/11 12:00 a.m.10 views

Delta Electronics CNCSoft-G2 Buffer Overflow Vulnerability (CNVD-2025-12362)

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. A buffer overflow vulnerability exists in Delta Electronics CNCSoft-G2 V2.1.0.20 and earlier versions, which stems from a lack of validation of user-supplied files and can be exploited by an...

7.3CVSS8.2AI score0.0039EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/06/06 9:21 a.m.23 views

CVE-2025-47728

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process...

7.3CVSS7.1AI score0.0039EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/04 8:15 a.m.10 views

CVE-2025-47728

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process...

7.3CVSS6AI score0.0039EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/06/04 8:15 a.m.7 views

CVE-2025-47728

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process...

7.3CVSS6AI score0.0039EPSS
SaveExploits0References2
NVD
NVD
added 2025/06/04 8:15 a.m.15 views

CVE-2025-47728

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process...

7.3CVSS0.0039EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/06/04 8:11 a.m.21 views

CVE-2025-47728 File Parsing Memory Corruption in CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process...

7.3CVSS0.0039EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/06/04 8:11 a.m.6 views

CVE-2025-47728 File Parsing Memory Corruption in CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process...

7.3CVSS7.2AI score0.0039EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/04 8:11 a.m.72 views

CVE-2025-47728

CVE-2025-47728 affects Delta Electronics CNCSoft-G2. The issue is a parsing/memory-corruption flaw in DPAX file handling that can allow code execution in the context of the current process when a user opens a malicious file. Metrics indicate LOCAL attack vector with low complexity and user intera...

7.3CVSS6.7AI score0.0039EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/06/04 12:00 a.m.13 views

PT-2025-23784

Name of the Vulnerable Software and Affected Versions Delta Electronics CNCSoft-G2 affected versions not specified Description The issue is related to a lack of proper validation of user-supplied files in Delta Electronics CNCSoft-G2. If a user opens a malicious file, an attacker can execute code...

7.3CVSS7.2AI score0.0039EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2025/06/04 12:00 a.m.16 views

Delta Electronics CNCSoft-G2 缓冲区错误漏洞

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. A buffer overflow vulnerability exists in Delta Electronics CNCSoft-G2 V2.1.0.20 and earlier versions, which stems from a lack of validation of user-supplied files and can be exploited by an...

7.3CVSS7.9AI score0.0039EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:42 a.m.28 views

CVE-2024-47962

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can manipulate an insider to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current...

8.4CVSS6.8AI score0.03392EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 10:42 a.m.9 views

CVE-2024-47963

Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process...

8.4CVSS6.9AI score0.00274EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 8:59 a.m.13 views

CVE-2024-47964

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process...

8.4CVSS7.3AI score0.00274EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:56 a.m.14 views

CVE-2024-29206

An Improper Access Control could allow a malicious actor authenticated in the API to enable Android Debug Bridge ADB and make unsupported changes to the system. Affected Products: UniFi Connect EV Station Version 1.1.18 and earlier UniFi Connect EV Station Pro Version 1.1.18 and earlier UniFi...

2.2CVSS6.7AI score0.0044EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:49 a.m.14 views

CVE-2023-32673

Certain versions of HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware are potentially vulnerable to elevation of privilege...

9.8CVSS6.9AI score0.00891EPSS
SaveExploits0References1
Rows per page
Query Builder