CVE-2022-29524

Out-of-bounds write vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

Design/Logic Flaw

Use after free vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

Heap overflow

Heap-based buffer overflow exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

Null pointer dereference

Access of uninitialized pointer vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

Cross site scripting

Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor 'V-SFT' v6.1.3.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

Cross site scripting

Out-of-bounds write vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-29925

Access of uninitialized pointer vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-29925

CVE-2022-29925 affects Fuji Electric Monitouch V-SFT in the simulator module. An uninitialized pointer vulnerability in V-SFT versions prior to 6.1.6.0 can allow information disclosure and, potentially, arbitrary code execution when a user opens a specially crafted image file. Multiple connected ...

CVE-2022-29524

Out-of-bounds write vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-29524

CVE-2022-29524 is an out-of-bounds write vulnerability in Fuji Electric V-Server (v4.0.11.0 and earlier) and V-Server Lite (v4.0.13.0 and earlier). The issue arises from a boundary/input handling flaw that could allow information disclosure and arbitrary code execution when a user opens a special...

CVE-2022-29522

Use after free vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-29522

The CVE-2022-29522 entry affects Fuji Electric’s V-SFT (Monitouch) graphic editor, specifically the simulator module, where a Use-After-Free condition can be triggered by opening a specially crafted image file. The linked JVN/UVD entries confirm the vulnerability class (CWE-416) and indicate impa...

CVE-2022-29506

Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor 'V-SFT' v6.1.3.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-29506

CVE-2022-29506 affects Fuji Electric Monitouch V-SFT, specifically the simulator module, with V-SFT versions up to 6.1.3.0 vulnerable to an out-of-bounds read (CWE-125) that can lead to information disclosure and arbitrary code execution when a user opens a specially crafted image file. JPN/JPCER...

CVE-2022-26302

Heap-based buffer overflow exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-26302

CVE-2022-26302 affects Fuji Electric V-SFT in the simulator module; versions prior to v6.1.6.0 are vulnerable to a heap-based buffer overflow when opening a specially crafted image file. The underlying impact reported is potential information disclosure and/or arbitrary code execution. Red Hat se...

Windows Hyper-V Remote Code Execution Vulnerability

...

KLA12568 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, gain privileges, execute arbitrary code, bypass security restrictions. Below is a complete list of...

KB5014697: Windows 11 Security Update (June 2022)

The remote Windows host is missing security update 5014697. It is, therefore, affected by multiple vulnerabilities - Windows Kerberos Elevation of Privilege Vulnerability CVE-2022-30165 - Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability CVE-2022-30139,...

KB5014742: Windows 7 and Windows Server 2008 R2 Security Update (June 2022)

The remote Windows host is missing security update 5014742. It is, therefore, affected by multiple vulnerabilities - Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-3016...