OSIsoft PI Data Archive Null Pointer Reference Vulnerability

OSIsoft PI Web API is a product from OSIsoft USA for accessing PI system data. A null pointer reference vulnerability exists in OSIsoft PI Data Archive, which can be exploited by an attacker to crash the PI Archive Subsystem...

MikroTik's RouterOS Console Process Memory Corruption Vulnerability

RouterOS is the operating system used on MikroTik devices such as switches, routers and access points. A memory corruption vulnerability exists in MikroTik's RouterOS console process. A null pointer reference that allows an authenticated remote attacker to send a carefully crafted packet causes t...

3S-Smart Software Solutions GmbH CODESYS Control V3 OPC UA Server

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: 3S-Smart Software Solutions GmbH Equipment: CODESYS Control V3 OPC UA Server Vulnerability: NULL Pointer Reference 2. RISK EVALUATION Successful exploitation of this vulnerability could cause a...

Null Pointer Reference Vulnerability in poppler

poppler is a widely used in linux platform pdf parsing engine. There is a null pointer reference vulnerability in poppler, which can be exploited by an attacker to cause a denial of service...

Adobe Acrobat and Reader Arbitrary Code Execution Vulnerability (CNVD-2018-26551)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader in the existence of a security vulnerability, the vulnerability...

FreeBSD Null Pointer Reference Vulnerability

FreeBSD is a set of Unix-like free operating systems in the FreeBSD project, headed by the Core Team team, and is an important branch of Unix-like systems that have evolved through BSD, 386BSD, and 4.4BSD. FreeBSD suffers from a null pointer reference vulnerability, which can be exploited by a...

CVE-2018-1000800

zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sysringbufput, sysringbufget that can result in CPU Page Fault error code 0x00000010. This attack appear to be exploitable via a malicious application call the vulnerable kernel APIs system sysringbufget and...

Beckhoff TwinCAT Untrusted Pointer Reference Vulnerability

The Beckhoff TwinCAT system software "transforms" any compatible PC into a real-time controller that replaces conventional PLCs and NC/CNC controllers as well as operating devices via multi-PLC systems, NC axis control systems, programming environments and operator stations. An untrusted pointer...

CVE-2017-17133

CVE-2017-17133 affects Huawei VP9660 (V500R002C10) license module. The vulnerability is a null pointer dereference caused by insufficient verification, allowing an authenticated local attacker to place a malicious license file and trigger memory null pointer access, leading to a denial of service...

CVE-2017-17135

CVE-2017-17135 is a null pointer reference vulnerability in the PEM module of Huawei products, including DP300 family, IPS, NGFW, NIP, S-series, Secospace USG, ViewPoint, TE, TP, USG9500, and related models, due to insufficient verification. An authenticated local attacker can call the PEM decode...

Null pointer reference vulnerability in WPS Office 2016 presentation pptreader module

WPS office is an office software suite independently developed by Kingsoft Corporation. The WPS presentation wpp.exe in WPS has a null pointer reference vulnerability in the pptreader module when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service attac...

Null pointer reference vulnerability in WPS Office 2016 demo aeocenter module

WPS office is an office software suite independently developed by Kingsoft Corporation. WPS Presentation wpp.exe in WPS has a null pointer reference vulnerability in the aeocenter module when parsing a specific ppsx file, which can be exploited by an attacker to cause a denial of service attack...

Null Pointer Reference Vulnerability in WPS Office 2016 Forms

WPS office is an office software suite independently developed by Kingsoft Corporation. A null pointer reference vulnerability exists in WPS Formset.exe in WPS when parsing a specific xls file. An attacker can exploit the vulnerability to cause a denial of service or possibly execute code...

Null pointer reference vulnerability in WPS Forms (CNVD-2018-03668)

WPS office is an office software suite independently developed by Kingsoft Corporation. A null pointer reference vulnerability exists in WPS Formset.exe in WPS when parsing a specific xls file, which can be exploited by an attacker to cause a denial of service...

Null Pointer Reference Vulnerability in Multiple Huawei Products

Huawei AR and SRG series enterprise routers are all-in-one routers for small and medium-sized offices or branches of small and medium-sized enterprises launched by Huawei; TE series, DP300, and MAX PRESENCE are all integrated desktop smart products and high-definition videoconferencing terminals...

Security Advisory - Two Vulnerabilities of License Module in Some Huawei Products

There is a uncontrolled format string vulnerability when the license module of some Huawei products output the log information. An authenticated local attacker could exploit this vulnerability to cause a denial of service. Vulnerability ID: HWPSIRT-2017-06138 This vulnerability has been assigned ...

Security Advisory - Multiple Vulnerabilities of PEM Module in Some Huawei Products

There is a null pointer reference vulnerability in PEM module of Huawei products due to insufficient verification. An authenticated local attacker calls PEM decoder with special parameter, which could cause a denial of service. Vulnerability ID: HWPSIRT-2017-06047 This vulnerability has been...

Linux Kernel Local Elevation of Privilege Vulnerability (CNVD-2017-34131)

The Linux Kernel is the kernel of the Linux operating system. Linux kernel has a local elevation of privilege vulnerability in the legousbtower driver. An attacker can exploit the vulnerability to cause a null pointer indirect reference with elevation of privilege...

Adobe Acrobat/Reader Untrustworthy Pointer Reference Vulnerability

Adobe Acrobat and Reader is the United States of America Odooby publicly issued PDF file processing program. Adobe Acrobat and Reader processing PDF files have untrustworthy pointer references vulnerability, allowing remote attackers can exploit the vulnerability to submit a special file, inducin...

Adobe Acrobat/Reader Untrustworthy Pointer Reference Vulnerability (CNVD-2017-36610)

Adobe Acrobat and Reader is the United States of America Odooby publicly issued PDF file processing program. Adobe Acrobat and Reader processing PDF files have untrustworthy pointer references vulnerability, allowing remote attackers can exploit the vulnerability to submit a special file, inducin...