Lucene search
+L

498 matches found

CNVD
CNVD
added 2025/02/10 12:00 a.m.47 views

Delta Electronics CNCSoft-G2 Buffer Overflow Vulnerability (CNVD-2025-06657)

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. The Delta Electronics CNCSoft-G2 suffers from a buffer overflow vulnerability that can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.4AI score0.00238EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/09 8:18 a.m.16 views

CVE-2025-22880

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current...

7.8CVSS7.2AI score0.00238EPSS
SaveExploits0References3
NVD
NVD
added 2025/02/07 8:15 a.m.31 views

CVE-2025-22880

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current...

7.8CVSS0.00238EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/07 8:15 a.m.9 views

CVE-2025-22880

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current...

7.8CVSS6AI score0.00238EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/07 7:26 a.m.9 views

CVE-2025-22880 Heap-based Buffer Overflow in CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current...

7.8CVSS7AI score0.00238EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/07 7:26 a.m.37 views

CVE-2025-22880 Heap-based Buffer Overflow in CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current...

7.8CVSS0.00238EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/07 7:26 a.m.109 views

CVE-2025-22880

CVE-2025-22880 affects Delta Electronics CNCSoft-G2. The issue is a heap-based buffer overflow caused by inadequate validation of the length of user-supplied data before copying to a fixed-length heap buffer. This can allow code execution in the context of the current process when a target visits...

7.8CVSS7AI score0.00238EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/02/07 12:00 a.m.11 views

Delta Electronics CNCSoft-G2 安全漏洞

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. The Delta Electronics CNCSoft-G2 suffers from a buffer overflow vulnerability that can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.6AI score0.00238EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/07 12:00 a.m.12 views

PT-2025-5905 · Delta Electronics · Cncsoft-G2

Name of the Vulnerable Software and Affected Versions: Delta Electronics CNCSoft-G2 affected versions not specified Description: The issue is related to a lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This can be leveraged b...

7.8CVSS7.1AI score0.00238EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
added 2025/02/04 11:17 p.m.14 views

CVE-2024-39880

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the curren...

8.8CVSS6.8AI score0.00738EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/23 12:00 a.m.10 views

Intelbras多款产品 安全漏洞

Intelbras VIP S3020 G2 and others are products of Intelbras Brazil.Intelbras VIP S3020 G2 is a bullet camera.Intelbras VIP S4020 G2 is a webcam.Intelbras VIP S4020 G3 is a webcam.Intelbras VIP S4020 G3 is a webcam. A security vulnerability exists in several Intelbras products. An attacker could...

5.3CVSS4.9AI score0.00472EPSS
SaveExploits0References4
CVE
CVE
added 2024/12/22 11:31 p.m.76 views

CVE-2024-12897

Summary of CVE-2024-12897 (Intelbras VIP cameras) Affected products: Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3, and VIP S4320 G2 (firmware up to 20241222). Vulnerability: A path traversal in the Web Interface exploiting the file ../mtd/Config/Sha1Account1 can be triggered remotely via th...

5.3CVSS4.7AI score0.00472EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/12/22 11:31 p.m.49 views

CVE-2024-12897 Intelbras VIP S4320 G2 Web Interface Sha1Account1 path traversal

A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222. It has been classified as critical. This affects an unknown part of the file ../mtd/Config/Sha1Account1 of the component Web Interface. The manipulation leads to path traversal:...

5.3CVSS0.00472EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/12/22 12:00 a.m.9 views

PT-2024-17783 · Intelbras · Intelbras Vip S4020 G3 +3

Name of the Vulnerable Software and Affected Versions: Intelbras VIP S3020 G2 versions up to 20241222 Intelbras VIP S4020 G2 versions up to 20241222 Intelbras VIP S4020 G3 versions up to 20241222 Intelbras VIP S4320 G2 versions up to 20241222 Description: A vulnerability was found in the Web...

6.9CVSS5.4AI score0.00472EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2024/12/22 12:00 a.m.6 views

Intelbras多款产品 访问控制错误漏洞

Intelbras VIP S3020 G2 and others are products of Intelbras, Brazil.Intelbras VIP S3020 G2 is a bullet camera.Intelbras VIP S4020 G2 is a webcam.Intelbras VIP S4020 G3 is a webcam. An access control error vulnerability exists in several Intelbras products. An attacker could exploit this...

6.9CVSS5.3AI score0.00472EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2024/12/11 12:00 a.m.12 views

Delta Electronics CNCSoft-G2 DPAX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-G2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00274EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/06 6:01 p.m.14 views

CLSA-2024-1730916057 Update of nss

update to CKBI 2.70 from NSS 3.104 - updated certificates: - Certificate "GLOBALTRUST 2020" - Certificate "certSIGN ROOT CA" - Certificate "ACCVRAIZ1" - Certificate "OISTE WISeKey Global Root GC CA" - removed certificates: - Certificate "Security Communication Root CA" - Certificate "Camerfirma...

5.8AI score
SaveExploits0References1
OSV
OSV
added 2024/11/06 5:02 p.m.13 views

CLSA-2024-1730912568 Update of nss

update to CKBI 2.70 from NSS 3.104 - updated certificates: - Certificate "GLOBALTRUST 2020" - Certificate "certSIGN ROOT CA" - Certificate "ACCVRAIZ1" - Certificate "OISTE WISeKey Global Root GC CA" - removed certificates: - Certificate "Security Communication Root CA" - Certificate "Camerfirma...

5.8AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/10/15 12:00 a.m.14 views

Delta Electronics CNCSoft-G2 DPAX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-G2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00274EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/10/15 12:00 a.m.19 views

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-G2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.7AI score0.03392EPSS
SaveExploits0References1
Rows per page
Query Builder