CVE-2025-14295

Storing Passwords in a Recoverable Format vulnerability in Automated Logic WebCTRL on Windows, Carrier i-Vu on Windows. Storing Passwords in a Recoverable Format vulnerability CWE-257 in the Web session management component allows an attacker to access stored passwords in a recoverable format whi...

CVE-2025-14295 Automated Logic WebCTRL and Carrier i-Vu Session Fixation

Storing Passwords in a Recoverable Format vulnerability in Automated Logic WebCTRL on Windows, Carrier i-Vu on Windows. Storing Passwords in a Recoverable Format vulnerability CWE-257 in the Web session management component allows an attacker to access stored passwords in a recoverable format whi...

CVE-2024-8527

Open Redirect in URL parameter in Automated Logic WebCTRL and Carrier i-Vu versions 6.0, 6.5, 7.0, 8.0, 8.5, 9.0 may allow attackers to exploit user sessions...

PT-2023-15603

Name of the Vulnerable Software and Affected Versions X2CRM Open Source Sales CRM versions 6.6 through 6.9 Description A stored cross-site scripting XSS issue was found in the Create Action function, specifically via the "index.php/actions/update" URI. This allows for potential malicious script...

Multiple Kepware Product Buffer Error Vulnerabilities

Kepware Kepserverex is a software application from Kepware USA that communicates with a wide range of industrial equipment. The software supports more than 150 communication protocols and supports the delivery of reliable, real-time data to organizations through a single platform. A buffer error...

PT-2019-4728 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.6 through 6.9 Description: The issue is related to a buffer overflow in the DHCP client component, specifically a heap overflow when parsing DHCP Offer/ACK inside ipdhcpc. This can be exploited by a remote attack...

CVE-2013-0029

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CHTML Use After Free Vulnerability."...

PT-2013-2076 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 through 9 Description: The issue allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object. This is due to a use-after-free vulnerability in the wa...

PT-2012-3617 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 through 9, and 10 Consumer Preview Description: The issue arises from improper handling of objects in memory, allowing remote attackers to execute arbitrary code by attempting to access a nonexistent...

PT-2012-3623 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 through 9 Description: The issue allows remote attackers to read content from a different domain or zone via a crafted web site. An information disclosure vulnerability exists that could allow an attacke...

PT-2012-3618 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 through 9 Description: A remote code execution issue exists due to improper handling of objects in memory by Internet Explorer, allowing attackers to execute arbitrary code by accessing a deleted object...

PT-2012-3620 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 through 9 Description: A remote code execution issue exists due to improper handling of objects in memory. This allows remote attackers to execute arbitrary code by attempting to access an undefined memo...