Lucene search
+L

1440 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/21 12:00 a.m.•6 views

CVE-2018-7517: Out-of-bounds Write

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out of bounds vulnerability...

5.3CVSS6AI score0.00337EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/21 12:00 a.m.•8 views

CVE-2018-7525: Untrusted Pointer Dereference

In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untrusted pointer dereference vulnerability...

5.3CVSS5.8AI score0.00337EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/21 12:00 a.m.•4 views

CVE-2018-7523: Double Free

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a double free vulnerability...

5.3CVSS6AI score0.00337EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/21 12:00 a.m.•9 views

CVE-2018-7519: Heap-based Buffer Overflow

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a heap-based buffer overflow...

5.3CVSS6.3AI score0.00357EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/21 12:00 a.m.•6 views

CVE-2018-7515: Plaintext Storage of a Password

In Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities can be exploited when CX Supervisor indirectly calls an initialized pointer when parsing malformed packets...

5.3CVSS5.9AI score0.00295EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2018/03/21 12:00 a.m.•4 views

PT-2018-18120

Name of the Vulnerable Software and Affected Versions Omron CX-Supervisor versions 3.30 and prior Description The issue is related to the access of uninitialized pointer vulnerabilities in Omron CX-Supervisor. This can be exploited when CX Supervisor indirectly calls an initialized pointer while...

5.3CVSS0.00295EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2018/03/21 12:00 a.m.•4 views

PT-2018-18128

Name of the Vulnerable Software and Affected Versions Omron CX-Supervisor versions 3.30 and prior Description The issue arises when parsing malformed project files, potentially leading to a double free vulnerability. This could allow for remote code execution. Recommendations For Omron...

5.3CVSS0.00337EPSS
SaveExploits0References5
CNVD
CNVD
•added 2018/03/14 12:00 a.m.•14 views

Omron CX-Supervisor Free Use Vulnerability

CX-Supervisor is a Miscellaneous Shareware software.CX-Supervisor is dedicated to the design and operation of PC visualization and machine control. A free use vulnerability exists in Omron CX-Supervisor version 3.30, which can be exploited by an attacker to gain free use when CX Supervisor analyz...

5.3CVSS7.1AI score0.00337EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/03/14 12:00 a.m.•15 views

Unspecified vulnerability in Omron CX-Supervisor (CNVD-2018-05320)

CX-Supervisor is a Miscellaneous Shareware software.CX-Supervisor is dedicated to the design and operation of PC visualization and machine control. A security vulnerability exists in Omron CX-Supervisor version 3.30, which can be exploited by an attacker to dereference untrusted pointers via an...

5.3CVSS6.9AI score0.00337EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/03/14 12:00 a.m.•16 views

Unspecified Vulnerability in Omron CX-Supervisor

CX-Supervisor is a Miscellaneous Shareware software.CX-Supervisor is dedicated to the design and operation of PC visualization and machine control. A security vulnerability in Omron CX-Supervisor version 3.30 can be exploited by an attacker to execute arbitrary code when CX Supervisor indirectly...

5.3CVSS7.8AI score0.00295EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/03/14 12:00 a.m.•12 views

Unspecified vulnerability in Omron CX-Supervisor (CNVD-2018-05319)

CX-Supervisor is a Miscellaneous Shareware software.CX-Supervisor is dedicated to the design and operation of PC visualization and machine control. A security vulnerability in Omron CX-Supervisor version 3.30 allows remote attackers to construct malicious files that can be tricked into parsing an...

5.3CVSS7.1AI score0.00337EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/03/14 12:00 a.m.•13 views

Omron CX-Supervisor Heap Buffer Overflow Vulnerability

CX-Supervisor is a Miscellaneous Shareware software.CX-Supervisor is dedicated to the design and operation of PC visualization and machine control. A heap buffer overflow vulnerability exists in Omron CX-Supervisor version 3.30, where parsing an incorrectly formatted project file could result in ...

5.3CVSS7.5AI score0.00357EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/03/14 12:00 a.m.•12 views

Omron CX-Supervisor Out-of-Bounds Write Vulnerability

CX-Supervisor is a Miscellaneous Shareware software.CX-Supervisor is dedicated to the design and operation of PC visualization and machine control. An out-of-bounds write vulnerability exists in Omron CX-Supervisor version 3.30, which allows remote attackers to construct a malicious file and tric...

5.3CVSS7.7AI score0.00337EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/03/14 12:00 a.m.•14 views

Omron CX-Supervisor Buffer Overflow Vulnerability

CX-Supervisor is a Miscellaneous Shareware software.CX-Supervisor is dedicated to the design and operation of PC visualization and machine control. A buffer overflow vulnerability exists in Omron CX-Supervisor 3.30 and earlier versions, where parsing an incorrectly formatted project file may resu...

5.3CVSS7.5AI score0.00357EPSS
SaveExploits0References1
ICS
ICS
•added 2018/03/13 12:00 a.m.•48 views

Omron CX-Supervisor (Update A)

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION : Low skill level to exploit Vendor : Omron Equipment : CX-Supervisor Vulnerabilities : Stack-based Buffer Overflow, Use After Free, Access of Uninitialized Pointer, Double Free, Out-of-bounds Write, Untrusted Pointer Dereference, Heap-based Buffer...

5.3CVSS6.5AI score0.00357EPSS
SaveExploits0References6
Trend Micro Simply Security
Trend Micro Simply Security
•added 2018/03/02 4:22 p.m.•37 views

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of February 26, 2018

Pwn2Own 2018 is coming up in a couple of weeks and I am excited to see what interesting vulnerabilities will pop up at the contest. I attempted to explain the contest to my mom, and in the simplest terms, I told her that Pwn2Own is a contest where contestants are rewarded for breaking something...

6.3AI score
SaveExploits0
Trend Micro Simply Security
Trend Micro Simply Security
•added 2018/02/23 3:44 p.m.•88 views

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of February 19, 2018

Earlier this week, Trend Micro released its Security Roundup for 2017, which reveals an increase in ransomware, cryptocurrency mining and business email compromise BEC attempts over the past year as cybercriminals refined and targeted their attacks for greater financial return. Surprisingly, some...

7AI score
SaveExploits0
CNVD
CNVD
•added 2018/02/07 12:00 a.m.•9 views

OMRON NS Device Authentication Bypass Vulnerability

OMRON NS devices is a touch screen HMI programming device from Omron. A security vulnerability exists in OMRON NS devices versions 1.1 through 1.3. A remote attacker can exploit this vulnerability by sending a direct request to an .html file to bypass authentication...

9.8CVSS7AI score0.01649EPSS
SaveExploits0References1
Prion
Prion
•added 2018/02/05 6:29 p.m.•20 views

Authentication flaw

OMRON NS devices 1.1 through 1.3 allow remote attackers to bypass authentication via a direct request to the .html file for a specific screen, as demonstrated by monitor.html...

7.5CVSS9.5AI score0.01649EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2018/02/05 6:29 p.m.•10 views

CVE-2018-6624

OMRON NS devices 1.1 through 1.3 allow remote attackers to bypass authentication via a direct request to the .html file for a specific screen, as demonstrated by monitor.html...

9.8CVSS5.8AI score0.01649EPSS
SaveExploits0References1
Rows per page
Query Builder