CVE-2026-42468: Stack-based Buffer Overflow

Buffer overflow vulnerability in Open Vehicle Monitoring System 3 OVMS3 3.3.005. In canformatpcap.cpp , the parser's phdr.len field is not properly validated, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted PCAP input...

CVE-2026-42469: Stack-based Buffer Overflow

Buffer overflow vulnerability in Open Vehicle Monitoring System 3 OVMS3 3.3.005. In canformatcanswitch.cpp the parser does not properly validate a CANswitch DLC value, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted CANswitch frames...

Open-Vehicle-Monitoring-System-3 安全漏洞

Open-Vehicle-Monitoring-System-3 is an open source vehicle remote monitoring and diagnostic control system from Open Vehicles. A security vulnerability exists in Open-Vehicle-Monitoring-System-3 version 3.3.005, which stems from a failure to properly validate the CANswitch DLC value in...

CVE-2026-37541: Stack-based Buffer Overflow

Buffer overflow vulnerability in Open Vehicle Monitoring System 3 OVMS3 3.3.005. In canformatgvret.cpp, the length field in GVRET binary data is not properly validated, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted GVRET frames...

CVE-2022-4515: Improper Neutralization of Special Elements used in an OS Command

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...

PT-2022-7037

Name of the Vulnerable Software and Affected Versions Exuberant Ctags affected versions not specified Description A flaw was found in Exuberant Ctags in the way it handles the "-o" option, which specifies the tag filename. A crafted tag filename specified in the command line or in the configurati...

CVE-2021-29240: Undefined Security Weakness

The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content...

PT-2021-18137

Name of the Vulnerable Software and Affected Versions: CODESYS Development System 3 versions prior to 3.5.17.0 Description: The issue concerns the Package Manager of the CODESYS Development System 3, which does not validate packages before installation. This oversight allows for the potential...

PT-2021-18136

Name of the Vulnerable Software and Affected Versions: CODESYS Development System 3 versions prior to 3.5.17.0 Description: The issue allows malicious documents or files embedded in libraries to be displayed or executed without first checking their validity. Recommendations: For versions prior to...

CVE-2021-29239: Insufficient Verification of Data Authenticity

CODESYS Development System 3 before 3.5.17.0 displays or executes malicious documents or files embedded in libraries without first checking their validity...

Microsoft (MEPN EDU) - Client Side Cross Site Vulnerability

Document Title: =============== Microsoft MEPN EDU - Client Side Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1930 MSRC ID: 34153 TRK: 0497000318 Release Date: ============= 2016-12-14 Vulnerability Laboratory ID VL-ID:...

Cisco IOS XR Denial-of-Service Vulnerability

Cisco has identified a vulnerability that could allow an unauthenticated remote attacker to cause a denial-of-service condition. The vulnerability is due to improper processing of malformed IPv6 packets carrying extension headers. A Cisco Carrier Routing System 3 CRS-3 running a version of Cisco...