CVE-2024-57338

M2Soft CROWNIX Report & ERS is affected by an arbitrary file upload vulnerability in versions v5.x to v5.5.14.1070 , v7.x to v7.4.3.960 , and v8.x to v8.2.0.345 . Attackers can exploit this by supplying a crafted file to achieve arbitrary code execution . To mitigate this risk, users are advised ...

PT-2025-23118 · M2Soft · M2Soft Crownix Report & Ers

Name of the Vulnerable Software and Affected Versions: M2Soft CROWNIX Report & ERS versions 5.x through 5.5.14.1070 M2Soft CROWNIX Report & ERS versions 7.x through 7.4.3.960 M2Soft CROWNIX Report & ERS versions 8.x through 8.2.0.345 Description: An arbitrary file upload issue in the opcode 500...

PT-2025-23119 · M2Soft · M2Soft Crownix Report & Ers

Name of the Vulnerable Software and Affected Versions: M2Soft CROWNIX Report & ERS versions 5.x through 5.5.14.1070 M2Soft CROWNIX Report & ERS versions 7.x through 7.4.3.960 M2Soft CROWNIX Report & ERS versions 8.x through 8.2.0.345 Description: An arbitrary file upload issue allows attackers to...

CVE-2024-57336

Incorrect access control in M2Soft CROWNIX Report & ERS affected v7.x to v7.4.3.599 and v8.x to v8.0.3.79 allows unauthorized attackers to obtain Administrator account access...

M2Soft CROWNIX Report & ERS 安全漏洞

M2Soft CROWNIX Report & ERS is a reporting solution with powerful reporting capabilities from M2Soft Korea. A security vulnerability exists in M2Soft CROWNIX Report & ERS versions 7.4.3.599 and earlier and 8.0.3.79 and earlier, which stems from improper access control and could lead to the takeov...

M2Soft CROWNIX Report & ERS 安全漏洞

M2Soft CROWNIX Report & ERS is a reporting solution with powerful reporting capabilities from M2Soft Korea. A security vulnerability exists in M2Soft CROWNIX Report & ERS versions 5.5.14.1070 and earlier, 7.4.3.960 and earlier, and 8.2.0.345 and earlier, which stems from an arbitrary file upload ...

CVE-2024-57337

M2Soft CROWNIX Report & ERS is affected by an arbitrary file upload vulnerability within the opcode 500 functionality. This flaw allows an attacker to execute arbitrary code by supplying a crafted file. Affected versions include v5.x to v5.5.14.1070 , v7.x to v7.4.3.960 , and v8.x to v8.2.0.345 ....

Buffer overflow

M2SOFT Report Designer Viewer 5.0 allows a Buffer Overflow with Extended Instruction Pointer EIP control via a crafted MRD file...

CVE-2018-18695

M2SOFT Report Designer Viewer 5.0 allows a Buffer Overflow with Extended Instruction Pointer EIP control via a crafted MRD file...

CVE-2018-18695

M2SOFT Report Designer Viewer 5.0 allows a Buffer Overflow with Extended Instruction Pointer EIP control via a crafted MRD file...

CVE-2018-18695

The CVE-2018-18695 entry concerns M2SOFT Report Designer Viewer 5.0, where processing a crafted MRD file can trigger a buffer overflow and potentially allow control of the Extended Instruction Pointer (EIP). The available documents state the affected component and the underlying issue, but do not...

CVE-2018-18695: Improper Restriction of Operations within the Bounds of a Memory Buffer

M2SOFT Report Designer Viewer 5.0 allows a Buffer Overflow with Extended Instruction Pointer EIP control via a crafted MRD file...