CVE-2021-38413 Fuji Electric Tellus Lite V-Simulator stack based buffer overflow

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to a stack-based buffer overflow, which may allow an attacker to achieve code execution...

CVE-2021-38415

Fuji Electric Tellus Lite V-Simulator and V-Server Lite are affected (versions prior to 4.0.12.0). The issue is a heap-based buffer overflow when parsing a specially crafted project file, which may allow arbitrary code execution. ZDI details indicate remote code execution via V8 file parsing, wit...

CVE-2021-38415 Fuji Electric Tellus Lite V-Simulator heap based buffer overflow

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable a heap-based buffer overflow when parsing a specially crafted project file, which may allow an attacker to execute arbitrary code...

CVE-2021-38401

Fuji Electric V-Server Lite and Tellus Lite V-Simulator are affected by CVE-2021-38401 due to an untrusted pointer dereference in versions prior to 4.0.12.0. The flaw can allow arbitrary code execution and cause a crash. Publicly reported in ICSA-NC and CVE references; CVSS v3 base score is 7.8 (...

CVE-2021-38401 Fuji Electric Tellus Lite V-Simulator untrusted pointer dereference

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an untrusted pointer dereference, which may allow an attacker to execute arbitrary code and cause the application to crash...

CVE-2021-38409

CVE-2021-38409 affects Fuji Electric Tellus Lite V-Simulator and V-Server Lite, prior to version 4.0.12.0. The vulnerability is an access of an uninitialized pointer that can allow reading from or writing to unintended memory, leading to a denial of service. Affected products: V-Server Lite and T...

CVE-2021-38409 Fuji Electric Tellus Lite V-Simulator uninitialized pointer

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an access of uninitialized pointer, which may allow an attacker read from or write to unexpected memory locations, leading to a denial-of-service...

The vulnerability of the monitoring software for PLK devices from Fuji Electric, V-Server Lite and Tellus Lite V-Simulator, arises from buffer overflow in the stack. This allows a hacker to execute arbitrary code.

The vulnerability of the monitoring software for Fujitsu V-Server Lite and Tellus Lite V-Simulator lies in buffer overflows during syntax analysis of X1 files in the V-Simulator module. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created...

The vulnerability of the monitoring software for PLK devices from Fuji Electric, namely V-Server Lite and Tellus Lite V-Simulator, arises from the use of an unreliable pointer. This allows a perpetrator to execute arbitrary code or trigger a service failure.

The vulnerability of the monitoring software for PLK devices from Fuji Electric, V-Server Lite and Tellus Lite V-Simulator, lies in the use of an unreliable pointer. Exploiting this vulnerability allows a perpetrator to execute arbitrary code or cause malfunctions in the service...

The vulnerability of the monitoring software for PLK devices from Fuji Electric, namely V-Server Lite and Tellus Lite V-Simulator, stems from the use of an uninitialized pointer. This allows a intruder to trigger a service failure.

The vulnerability of the monitoring software for PLK devices from Fuji Electric, namely V-Server Lite and Tellus Lite V-Simulator, is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow a hacker to cause a service failure...

WordPress plugin cross-site scripting vulnerability (CNVD-2021-102799)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in the...

CVE-2021-24946

The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the time parameter before using it in a SQL statement in the mecloadsinglepage AJAX action, available to unauthenticated users, leading to an unauthenticated SQL injection issue...

CVE-2021-24972 Pixel Cat Lite < 2.6.3 - Admin+ Stored Cross-Site Scripting

The Pixel Cat WordPress plugin before 2.6.3 does not escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2021-24922 Pixel Cat Lite < 2.6.2 - CSRF to Stored Cross-Site Scripting

The Pixel Cat WordPress plugin before 2.6.2 does not have CSRF check when saving its settings, and did not sanitise as well as escape some of them, which could allow attacker to make a logged in admin change them and perform Cross-Site Scripting attacks...

Privilege Escalation

github.com/ether/etherpad-lite is vulnerable to Privilege Escalation. The library does not properly validate the .etherpad import files, allowing an attacker to gain admin privileges and execute arbitrary code using malicious crafted import file...

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in the...

PT-2021-16381 · WordPress · Modern Events Calendar Lite

Name of the Vulnerable Software and Affected Versions: The Modern Events Calendar Lite WordPress plugin versions prior to 6.1.5 Description: The issue is related to an unauthenticated SQL injection problem. It occurs because the time parameter is not properly sanitised and escaped before being us...

The vulnerability of the V-Simulator software module for monitoring the status of Fuji Electric’s V-Server Lite and Tellus Lite V-Simulator lies in the reading beyond the buffer boundaries in memory. This allows a perpetrator to execute arbitrary code.

The vulnerability of the V-Simulator software module for monitoring the status of Fuji Electric’s V-Server Lite and Tellus Lite V-Simulator lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a...

The vulnerability of the monitoring software for PLK devices from Fuji Electric, V-Server Lite and Tellus Lite V-Simulator, arises from the possibility of executing arbitrary code or triggering a service failure when a write operation occurs outside the buffer in memory.

The vulnerability of the monitoring software for PLK devices from Fuji Electric, V-Server Lite and Tellus Lite V-Simulator, lies in the fact that the recording operation goes beyond the buffer boundaries into memory during the syntactic analysis of V9 files in the V-Simulator module. Exploiting...

WordPress Construction Lite theme <= 1.2.5 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Lenon Leite Patchstack Red Team project in WordPress Construction Lite theme versions = 1.2.5. This theme uses a vulnerable piece of code related to previously identified vulnerability - CVE-2021-39317. Solution Deactivate and delete. The vendor...