CVE-2025-61690

KV STUDIO (Keyence KV STUDIO) versions 12.23 and earlier contain a buffer underflow vulnerability that may allow arbitrary code execution when processing a specially crafted file. The issue is local, requires user interaction, and could impact confidentiality, integrity, and availability on the a...

CVE-2025-61690

KV STUDIO versions 12.23 and prior contain a buffer underflow vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product...

CVE-2025-58776

KV Studio versions 12.23 and prior contain a stack-based buffer overflow vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product...

CVE-2025-58776

KV Studio versions 12.23 and earlier are affected by a stack-based buffer overflow that can lead to arbitrary code execution when processing a specially crafted file. The vulnerability is described across multiple sources as a local vulnerability (attack vector: LOCAL) requiring user interaction,...

CVE-2025-58776

KV Studio versions 12.23 and prior contain a stack-based buffer overflow vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product...

CVE-2025-58775

KV STUDIO and VT5-WX15/WX12 contain a stack-based buffer overflow vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product...

CVE-2025-58775

KV STUDIO and VT5-WX15/WX12 contain a stack-based buffer overflow vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product...

CVE-2025-58775

CVE-2025-58775 affects KV STUDIO and VT5-WX15/WX12, with a stack-based buffer overflow when processing a specially crafted file that could lead to arbitrary code execution on the affected product. The issue is reported across multiple sources (including Red Hat, NVD, JVN/JVNVU, and others) with h...

KEYENCE KV STUDIO 安全漏洞

KEYENCE KV STUDIO is a PLC programming and debugging software from KEYENCE Japan. A security vulnerability exists in KEYENCE KV STUDIO that originates from a stack buffer overflow and could lead to the execution of arbitrary code...

PT-2025-40319

Name of the Vulnerable Software and Affected Versions KV STUDIO versions 12.23 and prior Description KV STUDIO versions 12.23 and prior contain a buffer underflow condition. Processing a specially crafted file may lead to arbitrary code execution on the affected product. Recommendations At the...

PT-2025-40316

Name of the Vulnerable Software and Affected Versions KV STUDIO affected versions not specified VT5-WX15/WX12 affected versions not specified Description A stack-based buffer overflow exists in KV STUDIO and VT5-WX15/WX12. Exploitation of this issue through a specially crafted file may lead to...

KEYENCE KV STUDIO 安全漏洞

KEYENCE KV STUDIO is a PLC programming and debugging software from KEYENCE Japan. A security vulnerability exists in KEYENCE KV STUDIO version 12.23 and earlier, which originates from a stack buffer overflow and could lead to the execution of arbitrary code...

Malicious code in github-kv (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5fcb11aea794afd6b87c58dee41958584041b8638848807223b0633a851e3ad1 The OpenSSF Package Analysis project identified 'github-kv' @ 0.0.1.rdbd1267 rubygems as malicious. It is considered malicious because: - The...

MAL-2025-46909 Malicious code in github-kv (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5fcb11aea794afd6b87c58dee41958584041b8638848807223b0633a851e3ad1 The OpenSSF Package Analysis project identified 'github-kv' @ 0.0.1.rdbd1267 rubygems as malicious. It is considered malicious because: - The...

CVE-2023-44470

Cross-Site Request Forgery CSRF vulnerability in Kvvaradha Kv TinyMCE Editor Add Fonts plugin = 1.1 versions...

CVE-2023-42138

Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file...

CVE-2023-30530

Jenkins Consul KV Builder Plugin 2.0.13 and earlier stores the HashiCorp Consul ACL Token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

CVE-2023-30531

Jenkins Consul KV Builder Plugin 2.0.13 and earlier does not mask the HashiCorp Consul ACL Token on the global configuration form, increasing the potential for attackers to observe and capture it...

CVE-2025-47277

vLLM, an inference and serving engine for large language models LLMs, has an issue in versions 0.6.5 through 0.8.4 that ONLY impacts environments using the PyNcclPipe KV cache transfer integration with the V0 engine. No other configurations are affected. vLLM supports the use of...

GHSA-HJQ4-87XH-G4FV vLLM Allows Remote Code Execution via PyNcclPipe Communication Service

Impacted Environments This issue ONLY impacts environments using the PyNcclPipe KV cache transfer integration with the V0 engine. No other configurations are affected. Summary vLLM supports the use of the PyNcclPipe class to establish a peer-to-peer communication domain for data transmission...