4585 matches found
CVE-2024-8422
CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when application user opens a malicious Zelio Soft 2 project file...
CVE-2024-8422
CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when application user opens a malicious Zelio Soft 2 project file...
CVE-2024-8518
CWE-20: Improper Input Validation vulnerability exists that could cause a crash of the Zelio Soft 2 application when a specially crafted project file is loaded by an application user...
CVE-2024-8518
CVE-2024-8518 affects Schneider Electric Zelio Soft/Ze io Soft 2. An Improper Input Validation vulnerability could cause the Zelio Soft 2 application to crash when loading a specially crafted project file. According to ICS data, affected versions are prior to 5.4.2.2. Remediation: update to versi...
CVE-2024-8422
CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when application user opens a malicious Zelio Soft 2 project file...
CVE-2024-8422
Schneider Electric Zelio Soft 2 contains a Use After Free vulnerability (CVE-2024-8422) in the parsing of ZM2 project files. Affected versions are prior to 5.4.2.2. Exploitation can lead to arbitrary code execution, with potential for denial of service and loss of confidentiality and integrity. I...
CVE-2024-8422
CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when application user opens a malicious Zelio Soft 2 project file...
PT-2024-39001 · Schneider Electric · Zelio Soft 2
Name of the Vulnerable Software and Affected Versions: Zelio Soft 2 versions prior to 5.4.2.2 Description: A Use After Free vulnerability exists that could cause arbitrary code execution, denial of service, and loss of confidentiality and integrity when an application user opens a malicious Zelio...
CVE-2024-8518: Improper Input Validation
CWE-20: Improper Input Validation vulnerability exists that could cause a crash of the Zelio Soft 2 application when a specially crafted project file is loaded by an application user...
PT-2024-8102 · Schneider Electric · Zelio Soft 2
Name of the Vulnerable Software and Affected Versions: Zelio Soft 2 affected versions not specified Description: The issue is related to improper input validation, which could cause the Zelio Soft 2 application to crash when a specially crafted project file is loaded. This can be exploited by an...
PT-2024-33990
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically in the RDMA/bnxt re driver. The issue occurs when the driver waits indefinitely for the FIFO occupancy to go below a...
Schneider Electric Zelio Soft 资源管理错误漏洞
Schneider Electric Zelio Soft is a suite of logic controller programming software from Schneider Electric France. A resource management error vulnerability exists in Schneider Electric Zelio Soft versions prior to v5.4.2.2 that stems from the presence of a post-release reuse vulnerability that...
CVE-2024-8422: Use After Free
CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when application user opens a malicious Zelio Soft 2 project file...
Schneider Electric Zelio Soft 输入验证错误漏洞
Schneider Electric Zelio Soft is a suite of logic controller programming software from Schneider Electric France. An input validation error vulnerability exists in Schneider Electric Zelio Soft versions prior to v5.4.2.2, which stems from the presence of an incorrect input validation vulnerabilit...
CVE-2024-47310
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arisoft ARI Fancy Lightbox ari-fancy-lightbox allows Stored XSS.This issue affects ARI Fancy Lightbox: from n/a through = 1.3.17...
kernel: md: fix resync softlockup when bitmap size is less than array size
In the Linux kernel, the following vulnerability has been resolved: md: fix resync softlockup when bitmap size is less than array size Is is reported that for dm-raid10, lvextend + lvchange --syncaction will trigger following softlockup: kernel:watchdog: BUG: soft lockup - CPU3 stuck for 26s!...
kernel: wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
A vulnerability was found in the cfg80211 component in the Linux kernel, where a lack of proper range validation applied to the NL80211ATTRTXQQUANTUM can lead to a scenario where the userspace passes an extremely high value that the kernel is not designed to handle efficiently ex. 2^31. This can...
Git Server Soft Serve Command Injection
The vulnerability of the Git server in Soft Serve relates to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially created malware file through t...
CVE-2024-40658
In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android that originates from the getConfig method in the SoftVideoDecoderOMXComponent.cpp file contains a heap buffer overflow that could result in an...