KEYENCE KV STUDIO security vulnerabilities

KEYENCE KV STUDIO is a PLC programming and debugging software from KEYENCE Japan. A security vulnerability exists in KEYENCE KV STUDIO version 12.23 and earlier, which originates from a stack buffer overflow and could lead to the execution of arbitrary code...

CVE-2025-58775: Stack-based Buffer Overflow

KV STUDIO and VT5-WX15/WX12 contain a stack-based buffer overflow vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product...

PT-2025-40320

Name of the Vulnerable Software and Affected Versions VT STUDIO versions 8.53 and prior Description VT STUDIO versions 8.53 and earlier are susceptible to an out-of-bounds read issue. Processing a specially crafted file may lead to arbitrary code execution on the affected product. Recommendations...

PT-2025-40321

Name of the Vulnerable Software and Affected Versions VT STUDIO versions 8.53 and prior Description VT STUDIO versions 8.53 and earlier have a use after free issue. A specially crafted file can trigger arbitrary code execution on a vulnerable system. Recommendations Update VT STUDIO to a version...

PT-2025-40317

Name of the Vulnerable Software and Affected Versions KV Studio versions 12.23 and prior Description KV Studio versions 12.23 and earlier are susceptible to a stack-based buffer overflow. Exploitation involves processing a specially crafted file, potentially leading to arbitrary code execution on...

CVE-2025-58777: Access of Uninitialized Pointer

VT Studio versions 8.53 and prior contain an access of uninitialized pointer vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product...

PT-2025-40316

Name of the Vulnerable Software and Affected Versions KV STUDIO affected versions not specified VT5-WX15/WX12 affected versions not specified Description A stack-based buffer overflow exists in KV STUDIO and VT5-WX15/WX12. Exploitation of this issue through a specially crafted file may lead to...

CVE-2025-61691: Out-of-bounds Read

VT STUDIO versions 8.53 and prior contain an out-of-bounds read vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product...

CVE-2025-58776: Stack-based Buffer Overflow

KV Studio versions 12.23 and prior contain a stack-based buffer overflow vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product...

PT-2025-40318

Name of the Vulnerable Software and Affected Versions VT Studio versions 8.53 and prior Description VT Studio versions 8.53 and earlier are susceptible to an issue where an uninitialized pointer can be accessed. Exploitation of this condition, through the use of a specially crafted file, may lead...

CVE-2025-61692: Use After Free

VT STUDIO versions 8.53 and prior contain a use after free vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product...

Security Bulletin: IBM Watson Studio on Cloud Pak for Data is vulnerable to a cross-site scripting vulnerability

Summary Watson Studio on Cloud Pak for Data is vulnerable to cross-site scripting within the Web UI CVE-2025-33116 Vulnerability Details CVEID:CVE-2025-33116 DESCRIPTION: IBM Cloud Pak for Data is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitra...

Agentic AI Component Code Execution

The vulnerability of the Agentic AI component of the Visual Studio Code editor lies in the lack of measures taken at the control level to protect data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Empowering defenders in the era of agentic AI with Microsoft Sentinel

Microsoft unveils a new wave of security innovation—delivering an agentic platform to protect organizations at scale We are living through a turning point in how organizations work and defend themselves. Across industries, “Frontier Firms” are emerging; these are businesses where humans and AI...

CVE-2025-59845

Apollo Studio Embeddable Explorer & Embeddable Sandbox are website embeddable software solutions from Apollo GraphQL. Prior to Apollo Sandbox version 2.7.2 and Apollo Explorer version 3.7.3, a cross-site request forgery CSRF vulnerability was identified. The vulnerability arises from missing orig...

Advisory ROSA-SA-2025-3019

software: git 2.51.0 WASP: ROSA-CHROME unaffected versions = git-2.51.0-1 affected versions git-2.51.0-1 CVE-ID: CVE-2025-48384 BDU-ID: 2025-08691 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Git distributed version control system of the Microsoft Visual Studio software development tool is...

CVE-2025-11139

A vulnerability was determined in Bjskzy Zhiyou ERP up to 11.0. Affected is the function uploadStudioFile of the component com.artery.form.services.FormStudioUpdater. This manipulation of the argument filepath causes path traversal. Remote exploitation of the attack is possible. The exploit has...

CVE-2025-11139

A vulnerability was determined in Bjskzy Zhiyou ERP up to 11.0. Affected is the function uploadStudioFile of the component com.artery.form.services.FormStudioUpdater. This manipulation of the argument filepath causes path traversal. Remote exploitation of the attack is possible. The exploit has...

CVE-2025-11139

Summary (CVE-2025-11139): Bjskzy Zhiyou ERP (versions up to 11.0) is affected by a path traversal vulnerability in the function uploadStudioFile of the component com.artery.form.services.FormStudioUpdater. The vulnerability stems from manipulating the filepath argument, enabling path traversal an...

CVE-2025-11139 Bjskzy Zhiyou ERP com.artery.form.services.FormStudioUpdater uploadStudioFile path traversal

A vulnerability was determined in Bjskzy Zhiyou ERP up to 11.0. Affected is the function uploadStudioFile of the component com.artery.form.services.FormStudioUpdater. This manipulation of the argument filepath causes path traversal. Remote exploitation of the attack is possible. The exploit has...