CVE-2023-42034 Visualware MyConnection Server doRTAAccessCTConfig Cross-Site Scripting Authentication Bypass Vulnerability

Visualware MyConnection Server doRTAAccessCTConfig Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Visualware MyConnection Server. Minimal user interaction is required to exploit this...

CVE-2023-42032 Visualware MyConnection Server doRTAAccessUPass Exposed Dangerous Method Information Disclosure Vulnerability

Visualware MyConnection Server doRTAAccessUPass Exposed Dangerous Method Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Visualware MyConnection Server. Authentication is not required to exploit this...

CVE-2023-42032

CVE-2023-42032 affects Visualware MyConnection Server. The doRTAAccessUPass method is exposed, creating an unauthenticated remote information disclosure vulnerability. Multiple connected sources corroborate that an attacker can disclose sensitive data within the application context without authen...

CVE-2023-40517 LG SuperSign Media Editor ContentRestController getObject Directory Traversal Information Disclosure Vulnerability

LG SuperSign Media Editor ContentRestController getObject Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG SuperSign Media Editor. Authentication is not required to exploit this...

CVE-2023-40511 LG Simple Editor checkServer Authentication Bypass Vulnerability

LG Simple Editor checkServer Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the checkServer method...

CVE-2023-40509 LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability

LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists withi...

CVE-2023-40508 LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability

LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within...

CVE-2023-40492 LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability

LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2023-39495 PDF-XChange Editor readFileIntoStream Exposed Dangerous Function Information Disclosure Vulnerability

PDF-XChange Editor readFileIntoStream Exposed Dangerous Function Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that t...

CVE-2023-38094

CVE-2023-38094 affects Kofax Power PDF through the replacePages function, where a stack-based buffer is overflowed due to improper validation of user-supplied data length. This enables remote code execution with the attacker’s code running in the process context. Exploitation requires user intera...

CVE-2023-32171 Unified Automation UaGateway OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability

Unified Automation UaGateway OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. Authentication is required to exploit this...

CVE-2023-32171

CVE-2023-32171 affects Unified Automation UaGateway OPC UA Server. The vulnerability occurs in the ImportCsv method where a crafted XML payload can trigger a null pointer dereference, enabling a remote denial-of-service condition. Exploitation requires authentication and is described in ZDI-20495...

Inductive Automation Ignition 安全漏洞

Inductive Automation Ignition is an integrated software platform for SCADA systems from Inductive Automation, USA. The platform supports SCADA Data Acquisition and Monitoring Systems, HMI Human Machine Interface and more. A security vulnerability exists in Inductive Automation Ignition due to a...

VIPRE Antivirus 安全漏洞

VIPRE Antivirus is a security software from VIPRE USA that provides all the features needed to protect PCs from virus infections and other security threats. A security vulnerability exists in VIPRE Antivirus that stems from a specific flaw in the SetPrivateConfig method that allows a local attack...

VIPRE Antivirus 安全漏洞

VIPRE Antivirus is a security software from VIPRE, Inc. that provides all the features needed to protect PCs from virus infections and other security threats. A security vulnerability exists in VIPRE Antivirus that originates from a specific flaw in the DeleteHistoryFile method that allows a loca...

LG Simple Editor 安全漏洞

LG Simple Editor is a simple editor from Luckin LG Korea. Create new content by simplifying the process and instant playback on signage. A security vulnerability exists in LG Simple Editor that stems from an authentication bypass vulnerability in the checkServer method...

Voltronic Power ViewPower 安全漏洞

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A remote code execution vulnerability exists in Voltronic Power ViewPower, which stems from a specific flaw in the shutdown method, and can be exploited by an attacker to execute code in the...

LG Simple Editor 安全漏洞

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from a directory traversal arbitrary file deletion vulnerability that can be exploited by an attacker to send a crafted request to...

Unified Automation UaGateway 安全漏洞

Unified Automation UaGateway is a high performance wrapper/proxy from Unified Automation programmed in C++. A security vulnerability exists in Unified Automation UaGateway that stems from a specific flaw in the implementation of the AddServer method that allows an attacker to create a denial of...

VIPRE Antivirus 安全漏洞

VIPRE Antivirus is a security software from VIPRE USA that provides all the features needed to protect PCs from virus infections and other security threats. A security vulnerability exists in VIPRE Antivirus that stems from a specific flaw in the FPQuarTransfer method that allows a local attacker...