CVE-2019-17215

An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. There is no bruteforce protection e.g., lockout established. An attacker might be able to bruteforce the password to authenticate on the device...

CVE-2019-1309

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0712, CVE-2019-1310,...

CVE-2019-0886

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Information Disclosure Vulnerability'...

CVE-2019-17216

An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. Password authentication uses MD5 to hash passwords. Cracking is possible with minimal effort...

CVE-2011-4827

Multiple cross-site scripting XSS vulnerabilities in AutoSec Tools V-CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 p parameter to redirect.php and 2 box parameter to includes/TrueColorPicker/index.php, which is not properly handled in...

CVE-2011-4826

SQL injection vulnerability in session.php in AutoSec Tools V-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to process.php. NOTE: some of these details are obtained from third party information...

CVE-2019-1399

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0712, CVE-2019-1309, CVE-2019-1310...

CVE-2019-0701

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0690, CVE-2019-0695...

CVE-2019-0721

A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0719...

Fuji Electric V-SFT CDataRomErrorCheck::MacroCommandCheck function buffer overflow vulnerability

Fuji Electric V-SFT is a screen configuration software from Fuji Electric Japan. A buffer overflow vulnerability exists in FUJI ELECTRIC V-SFT, which originates from the CDataRomErrorCheck::MacroCommandCheck function in VS6EditData that fails to correctly validate the length and size of the input...

Fuji Electric V-SFT Conv_Macro_Data function buffer overflow vulnerability

Fuji Electric V-SFT is a screen configuration software from Fuji Electric Japan. Fuji Electric V-SFT suffers from a buffer overflow vulnerability that originates from the failure of the ConvMacroData function in VS6EditData to properly validate the length of input data, which can be exploited by ...

Fuji Electric V-SFT CWinFontInf::WinFontMsgCheck function buffer overflow vulnerability

Fuji Electric V-SFT is a screen configuration software from Fuji Electric Japan. Fuji Electric V-SFT suffers from a buffer overflow vulnerability that originates from the CWinFontInf::WinFontMsgCheck function in VS6EditData.dll that fails to correctly validate the length and size of input data,...

Fuji Electric V-SFT CDrawSLine::GetRectArea function buffer overflow vulnerability

Fuji Electric V-SFT is a screen configuration software from Fuji Electric Japan. Fuji Electric V-SFT suffers from a buffer overflow vulnerability that originates from the CDrawSLine::GetRectArea function in VS6EditData that fails to correctly validate the length and size of the input data, which...

Fuji Electric V-SFT MakeItemGlidZahyou Function Buffer Overflow Vulnerability

Fuji Electric V-SFT is a screen configuration software from Fuji Electric Japan. Fuji Electric V-SFT suffers from a buffer overflow vulnerability that originates from the MakeItemGlidZahyou function in VS6ComFile failing to correctly validate the length and size of input data, which can be...

Fuji Electric V-SFT CGamenDataRom::set_mr400_strc function buffer overflow vulnerability

Fuji Electric V-SFT is a screen configuration software from Fuji Electric Japan. Fuji Electric V-SFT suffers from a buffer overflow vulnerability that originates from the CGamenDataRom::setmr400strc function in VS6EditData that fails to correctly validate the length and size of the input data,...

Fuji Electric V-SFT CV7BaseMap::WriteV7DataToRom function buffer overflow vulnerability

Fuji Electric V-SFT is a screen configuration software from Fuji Electric Japan. Fuji Electric V-SFT suffers from a buffer overflow vulnerability that stems from the CV7BaseMap::WriteV7DataToRom function in VS6ComFile failing to properly validate the length and size of input data, which can be...

Fuji Electric V-SFT CTxSubFile::get_ProgramFile_name function buffer overflow vulnerability

Fuji Electric V-SFT is a screen configuration software from Fuji Electric Japan. Fuji Electric V-SFT suffers from a buffer overflow vulnerability that originates from the CTxSubFile::getProgramFilename function in VS6File that fails to correctly validate the length and size of input data, which c...

Fuji Electric V-SFT set_temp_type_default function buffer overflow vulnerability

Fuji Electric V-SFT is a screen configuration software from Fuji Electric Japan. Fuji Electric V-SFT suffers from a buffer overflow vulnerability that originates from the settemptypedefault function in VS6MemInIF that fails to properly validate the length of input data, which can be exploited by ...

CVE-2002-2212

The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record RR combined with spoofed response...

CVE-2002-2328

Active Directory in Windows 2000, when supporting Kerberos V authentication and GSSAPI, allows remote attackers to cause a denial of service hang via an LDAP client that sets the page length to zero during a large request...