Lucene search
+L

2704 matches found

CNVD
CNVD
added 2020/08/10 12:0 a.m.3 views

Advantech WebAccess HMI Designer Type Obfuscation Vulnerability

Advantech WebAccess HMI Designer is an integrated HMI development tool from Advantech, Taiwan, China. The product is equipped with features such as data transfer, menu editing and text editing. A type confusion vulnerability exists in Advantech WebAccess HMI Designer version 2.1.9.31 and prior...

7.8CVSS6.9AI score0.02924EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/10 12:0 a.m.24 views

Advantech WebAccess/HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess/HMI Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

7.8CVSS5.5AI score0.03735EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/10 12:0 a.m.38 views

Advantech WebAccess/HMI Designer PM3 File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess/HMI Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

7.8CVSS4.7AI score0.02924EPSS
SaveExploits0References1
OSV
OSV
added 2020/08/06 7:15 p.m.4 views

CVE-2020-16215

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied data may cause a stack-based buffer overflow, which may allow remote code execution, disclosure/modification of information, or cause the applicatio...

7.8CVSS7.7AI score0.03976EPSS
SaveExploits0References2
NVD
NVD
added 2020/08/06 7:15 p.m.17 views

CVE-2020-16213

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied data may cause the system to write outside the intended buffer area, which may allow remote code execution, disclosure/modification of information, ...

7.8CVSS8AI score0.02985EPSS
SaveExploits0References2
OSV
OSV
added 2020/08/06 7:15 p.m.5 views

CVE-2020-16213

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied data may cause the system to write outside the intended buffer area, which may allow remote code execution, disclosure/modification of information, ...

7.8CVSS7.5AI score0.02985EPSS
SaveExploits0References2
NVD
NVD
added 2020/08/06 7:15 p.m.15 views

CVE-2020-16211

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. An out-of-bounds read vulnerability may be exploited by processing specially crafted project files, which may allow an attacker to read information...

5.5CVSS5.9AI score0.01282EPSS
SaveExploits0References2
NVD
NVD
added 2020/08/06 7:15 p.m.15 views

CVE-2020-16229

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied data may cause a type confusion condition, which may allow remote code execution, disclosure/modification of information, or cause the application t...

7.8CVSS7.8AI score0.02924EPSS
SaveExploits0References2
NVD
NVD
added 2020/08/06 7:15 p.m.15 views

CVE-2020-16217

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused by processing specially crafted project files may allow remote code execution, disclosure/modification of information, or cause the application to crash...

7.8CVSS7.9AI score0.02866EPSS
SaveExploits0References2
OSV
OSV
added 2020/08/06 7:15 p.m.6 views

CVE-2020-16217

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused by processing specially crafted project files may allow remote code execution, disclosure/modification of information, or cause the application to crash...

7.8CVSS7.3AI score0.02866EPSS
SaveExploits0References2
NVD
NVD
added 2020/08/06 7:15 p.m.14 views

CVE-2020-16215

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied data may cause a stack-based buffer overflow, which may allow remote code execution, disclosure/modification of information, or cause the applicatio...

9.3CVSS7.9AI score0.03976EPSS
SaveExploits0References2
OSV
OSV
added 2020/08/06 7:15 p.m.5 views

CVE-2020-16229

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied data may cause a type confusion condition, which may allow remote code execution, disclosure/modification of information, or cause the application t...

7.8CVSS7.3AI score0.02924EPSS
SaveExploits0References2
OSV
OSV
added 2020/08/06 7:15 p.m.7 views

CVE-2020-16207

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by opening specially crafted project files that may overflow the heap, which may allow remote code execution, disclosure/modification of information, or cause the...

7.8CVSS7.5AI score0.03735EPSS
SaveExploits0References6
OSV
OSV
added 2020/08/06 7:15 p.m.3 views

CVE-2020-16211

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. An out-of-bounds read vulnerability may be exploited by processing specially crafted project files, which may allow an attacker to read information...

5.5CVSS5.8AI score0.01282EPSS
SaveExploits0References2
NVD
NVD
added 2020/08/06 7:15 p.m.23 views

CVE-2020-16207

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by opening specially crafted project files that may overflow the heap, which may allow remote code execution, disclosure/modification of information, or cause the...

7.8CVSS8.1AI score0.03735EPSS
SaveExploits0References6
Prion
Prion
added 2020/08/06 7:15 p.m.17 views

Stack overflow

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied data may cause a stack-based buffer overflow, which may allow remote code execution, disclosure/modification of information, or cause the applicatio...

9.3CVSS7.8AI score0.03976EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2020/08/06 7:15 p.m.19 views

Out-of-bounds

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. An out-of-bounds read vulnerability may be exploited by processing specially crafted project files, which may allow an attacker to read information...

4.3CVSS5.5AI score0.01282EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2020/08/06 7:15 p.m.16 views

Remote code execution

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied data may cause the system to write outside the intended buffer area, which may allow remote code execution, disclosure/modification of information, ...

6.8CVSS7.8AI score0.02985EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2020/08/06 7:15 p.m.12 views

Heap overflow

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by opening specially crafted project files that may overflow the heap, which may allow remote code execution, disclosure/modification of information, or cause the...

6.8CVSS8AI score0.03735EPSS
SaveExploits0References6Affected Software1
Prion
Prion
added 2020/08/06 7:15 p.m.18 views

Double free

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused by processing specially crafted project files may allow remote code execution, disclosure/modification of information, or cause the application to crash...

6.8CVSS7.8AI score0.02866EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder