PT-2023-34822 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.90 Description: The issue concerns the axi chan handle err function, which lacks exception protection processing for vd. This could potentially lead to security vulnerabilities, although the actual impact...

Design/Logic Flaw

A vulnerability has been identified in PADS Standard/Plus Viewer All versions. The affected application contains a stack corruption vulnerability while parsing PCB files. An attacker could leverage this vulnerability to leak information in the context of the current process. FG-VD-22-057,...

CVE-2022-34289

CVE-2022-34289 affects Siemens PADS Standard/Plus Viewer (All versions). The vulnerability is an out-of-bounds write past the end of an allocated structure when parsing PCB files, potentially allowing code execution in the current process. No known public exploits target these vulnerabilities, an...

CVE-2022-34287

Siemens PADS Standard/Plus Viewer (All versions) is affected by a stack corruption vulnerability while parsing PCB files. The issue, associated with FG-VD-22-052/22-056, can cause information disclosure in the context of the current process. Affected product: PADS Standard/Plus Viewer. Root cause...

CVE-2022-34286

A vulnerability has been identified in PADS Standard/Plus Viewer All versions. The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted PCB files. This could allow an attacker to execute code in the context of the current...

CVE-2022-34285

The CVE-2022-34285 entry concerns Siemens PADS Standard/Plus Viewer (All versions). The Connected documents confirm an out-of-bounds read vulnerability that occurs when parsing PCB files, allowing an attacker to leak information within the context of the current process. Affected product: PADS St...

CVE-2022-34284

CVE-2022-34284 affects Siemens PADS Standard/Plus Viewer (All versions). The vulnerability is an out-of-bounds write past the end of an allocated structure while parsing specially crafted PCB files, potentially allowing code execution in the current process. The issue is part of a broader set of ...

CVE-2022-34280

CVE-2022-34280 affects Siemens PADS Standard/Plus Viewer (All versions). The vulnerability is an out-of-bounds read past the end of an allocated buffer when parsing PCB files, enabling code execution in the current process. This is part of a broader family of PCB-parsing vulnerabilities reported ...

CVE-2022-34279

Siemens PADS Standard/Plus Viewer (All versions) is vulnerable to an out-of-bounds read when parsing PCB files, potentially allowing code execution in the current process. This CVE (CVE-2022-34279) is discussed across multiple sources (e.g., RH, nvd, CNVD, ics), with MITRE details consolidated in...

CVE-2019-14462

An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for the MODBUSFCWRITEMULTIPLECOILS case, aka VD-1302...

Ubuntu 18.04 LTS : libmodbus vulnerabilities (USN-5173-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5173-1 advisory. It was discovered that libmodbus incorrectly handled inputs. An attacker could possibly use this issue to cause a denial of service or other unspecified...

CVE-2018-21244

An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows arbitrary application execution via an embedded executable file in a PDF portfolio, aka FG-VD-18-029...

CVE-2018-21244

An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows arbitrary application execution via an embedded executable file in a PDF portfolio, aka FG-VD-18-029...

Design/Logic Flaw

An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows arbitrary application execution via an embedded executable file in a PDF portfolio, aka FG-VD-18-029...

CVE-2018-21244

An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows arbitrary application execution via an embedded executable file in a PDF portfolio, aka FG-VD-18-029...

CVE-2018-21244

Foxit PhantomPDF up to version 8.3.5 contains a vulnerability where an embedded executable in a PDF portfolio can lead to arbitrary code execution (FG-VD-18-029). Root cause is an improper handling of embedded executables within portfolios, enabling remote exploitation via crafted PDFs. Affected ...

CVE-2019-13408

A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230. It allows attackers to download arbitrary files via url cgibin/ExportSettings.cgi?Download=filepath, without any authentication...

CVE-2019-13406

A broken access control vulnerability found in Advan VD-1 firmware versions up to 230. An attacker can send a POST request to cgibin/ApkUpload.cgi to install arbitrary APK without any authentication...

CVE-2019-13407

A XSS found in Advan VD-1 firmware versions up to 230. VD-1 responses a path error message when a requested resource was not found in page cgibin/ssi.cgi. It leads to a reflected XSS because the error message does not escape properly...

CVE-2019-11064

A vulnerability of remote credential disclosure was discovered in Advan VD-1 firmware versions up to 230. An attacker can export system configuration which is not encrypted to get the administrator’s account and password in plain text via cgibin/ExportSettings.cgi?Export=1 without any...