CVE-2017-7910: Stack-based Buffer Overflow

A Stack-Based Buffer Overflow issue was discovered in Digital Canal Structural Wind Analysis versions 9.1 and prior. An attacker may be able to run arbitrary code by remotely exploiting an executable to perform a denial-of-service attack...

Digital Canal Structural Wind Analysis Stack Overflow Vulnerability

Digital Canal Structural Wind Analysis is a structural engineering software platform. Digital Canal Structural Wind Analysis suffers from a stack overflow vulnerability that could be exploited by remote attackers to submit a special request for a denial of service attack...

Digital Canal Structural Wind Analysis

CVSS v3 7.5 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Digital Canal Structural Equipment: Wind Analysis Vulnerability: Stack-Based Buffer Overflow AFFECTED PRODUCTS The following versions of Wind Analysis, a structural engineering software platform, are affected: Wind...

CVE-2015-7599

Integer overflow in the authenticate function in svcauth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call RPC protocol is enabled, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a username and password...

Integer overflow

Integer overflow in the authenticate function in svcauth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call RPC protocol is enabled, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a username and password...

CVE-2015-7599

Integer overflow in the authenticate function in svcauth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call RPC protocol is enabled, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a username and password...

CVE-2015-7599

Wind River VxWorks CVE-2015-7599: Integer overflow in _authenticate (svc_auth.c) when RPC is enabled, enabling remote DoS and potential code execution. Affected versions: VxWorks 5.5–6.9.4.1. Public references in the connected docs show an RPC DoS exploit module (vxworks_rpc_dos) targeting VxWork...

CVE-2015-7599: Integer Overflow or Wraparound

Integer overflow in the authenticate function in svcauth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call RPC protocol is enabled, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a username and password...

Stack overflow vulnerability in Wind River VxWorks

Summary: WindRiver is releasing mitigations for a privilege escalation issue. This issue affects versions of Wind River VxWorks products. The issue being mitigated is a method to execute arbitrary code without user interactions. Description: Anonymous remote attackers can cause a stack overflow,...

Bosch BLADEcontrol wind turbine monitoring device SQL injection vulnerability

No description provided by source...

LINE WIND runner - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application LINE WIND runner published at the 'play' market has multiple vulnerabilities...

Ney Wind - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Ney Wind published at the 'play' market has multiple vulnerabilities...

Age Of Wind 2 Free - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Age Of Wind 2 Free published at the 'play' market has multiple vulnerabilities...

ZephyrFree Wind Speed Meter - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application ZephyrFree Wind Speed Meter published at the 'play' market has multiple vulnerabilities...

Wind - SD-card access, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Wind published at the 'play' market has multiple vulnerabilities...

Earth Wind - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Earth Wind published at the 'play' market has multiple vulnerabilities...

Wind Free - External URLs, WebView JavaScript enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wind Free published at the 'play' market has multiple vulnerabilities...

Wind turbines - meteo station - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wind turbines - meteo station published at the 'play' market has multiple vulnerabilities...

XZERES 442SR Wind Turbine Cross-Site Scripting Vulnerability

The XZERES 442SR Wind Turbine is a web-based interface system. XZERES 442SR Wind Turbine does not properly perform input validation, which can lead to the insertion of malicious scripts into the program...

CVE-2016-2287

The CVE-2016-2287 vulnerability affects XZERES 442SR Wind Turbine OS: a Cross-Site Scripting (CWE-79) flaw in the web-based interface due to inadequate input validation, enabling remote injection of script/HTML via unspecified vectors. ICS-CERT Update C confirms XZERES has produced a patch to mit...