CVE-2024-57336

Incorrect access control in M2Soft CROWNIX Report & ERS affected v7.x to v7.4.3.599 and v8.x to v8.0.3.79 allows unauthorized attackers to obtain Administrator account access...

M2Soft CROWNIX Report & ERS 安全漏洞

M2Soft CROWNIX Report & ERS is a reporting solution with powerful reporting capabilities from M2Soft Korea. A security vulnerability exists in M2Soft CROWNIX Report & ERS versions 7.4.3.599 and earlier and 8.0.3.79 and earlier, which stems from improper access control and could lead to the takeov...

CVE-2024-57337

CVE-2024-57337 affects M2Soft CROWNIX Report & ERS. An arbitrary file upload in the opcode 500 functionality allows remote code execution. Affected versions: 5.x up to 5.5.14.1070; 7.x up to 7.4.3.960; 8.x up to 8.2.0.345. Exploitation described as crafting a file that is uploaded via opcode 500....

M2Soft CROWNIX Report & ERS 安全漏洞

M2Soft CROWNIX Report & ERS is a reporting solution with powerful reporting capabilities from M2Soft Korea. A security vulnerability exists in M2Soft CROWNIX Report & ERS versions 5.5.14.1070 and earlier, 7.4.3.960 and earlier, and 8.2.0.345 and earlier, which stems from an arbitrary file upload ...

CVE-2018-18695

M2SOFT Report Designer Viewer 5.0 allows a Buffer Overflow with Extended Instruction Pointer EIP control via a crafted MRD file...

Buffer overflow

M2SOFT Report Designer Viewer 5.0 allows a Buffer Overflow with Extended Instruction Pointer EIP control via a crafted MRD file...

CVE-2018-18695

M2SOFT Report Designer Viewer 5.0 allows a Buffer Overflow with Extended Instruction Pointer EIP control via a crafted MRD file...

CVE-2018-18695

The CVE-2018-18695 entry concerns M2SOFT Report Designer Viewer 5.0, where processing a crafted MRD file can trigger a buffer overflow and potentially allow control of the Extended Instruction Pointer (EIP). The available documents state the affected component and the underlying issue, but do not...