Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
com/4525-1/ - https://lists.debian.org/debian-lts-announce/2020/09/msg00025.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html - https://www.oracle.com/security-alerts/cpuApr2021.html - https://security.netapp.com/advisory/ntap-20200814-0004/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c51f8f88d705e06bd696d7510aff22b33eb8e638 - https://arxiv.org/pdf/2012.07432.pdf
CVE ID: CVE-2020-16167 State: PUBLISHED Published: 2020-08-07T19:25:50 Last Updated: 2024-08-04T13:37:54.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Missing Authentication for Critical Function in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to receive and answer calls intended for another temi user. Answering the call this way grants motor control of the temi in addition to audio/video via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.robotemi.com/software-updates/ - https://www.mcafee.com/blogs/other-blogs/mcafee-labs/call-an-exorcist-my-robots-possessed/
CVE ID: CVE-2020-16168 State: PUBLISHED Published: 2020-08-07T12:20:36 Last Updated: 2024-08-04T13:37:53.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Origin Validation Error in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to access the REST API and MQTT broker used by the temi and send it custom data/requests via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.robotemi.com/software-updates/ - https://www.mcafee.com/blogs/other-blogs/mcafee-labs/call-an-exorcist-my-robots-possessed/
CVE ID: CVE-2020-16169 State: PUBLISHED Published: 2020-08-07T19:22:11 Last Updated: 2024-08-04T13:37:54.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Authentication Bypass Using an Alternate Path or Channel in temi Robox OS prior to120, temi Android app up to 1.3.7931 allows remote attackers to gain elevated privileges on the temi and have it automatically answer the attacker's calls, granting audio, video, and motor control via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.robotemi.com/software-updates/ - https://www.mcafee.com/blogs/other-blogs/mcafee-labs/call-an-exorcist-my-robots-possessed/
CVE ID: CVE-2020-16170 State: PUBLISHED Published: 2020-08-11T19:16:28 Last Updated: 2024-08-04T13:37:54.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use of Hard-coded Credentials in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to listen in on any ongoing calls between temi robots and their users if they can brute-force/guess a six-digit value via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.robotemi.com/software-updates/ - https://www.mcafee.com/blogs/other-blogs/mcafee-labs/call-an-exorcist-my-robots-possessed/
CVE ID: CVE-2020-16171 State: PUBLISHED Published: 2020-09-21T13:07:07 Last Updated: 2024-08-04T13:37:54.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Acronis Cyber Backup before 12.5 Build 16342. Some API endpoints on port 9877 under /api/ams/ accept an additional custom Shard header. The value of this header is afterwards used in a separate web request issued by the application itself. This can be abused to conduct SSRF attacks against otherwise unreachable Acronis services that are bound to localhost such as the NotificationService on 127.0.0.1:30572. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldiscl
rvice on 127.0.0.1:30572. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2020/Sep/33 - https://www.rcesecurity.com/2020/09/CVE-2020-16171-Exploiting-Acronis-Cyber-Backup-for-Fun-and-Emails/
CVE ID: CVE-2020-16186 State: REJECTED Published: 2020-08-12T20:48:59 Last Updated: 2020-08-18T18:09:58 Description: No description available.
CVE ID: CVE-2020-16192 State: PUBLISHED Published: 2020-08-05T15:05:10 Last Updated: 2024-08-04T13:37:54.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: LimeSurvey 4.3.2 allows reflected XSS because application/controllers/LSBaseController.php lacks code to validate parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LimeSurvey/LimeSurvey/pull/1479/commits/4109a8d157e46c48ca34b995ef61a6e0f6905236
CVE ID: CVE-2020-16193 State: PUBLISHED Published: 2020-08-26T12:00:17 Last Updated: 2024-08-04T13:37:54.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo $info['notes'] call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osTicket/osTicket/blob/develop/include/staff/banrule.inc.php#L67 - https://github.com/osTicket/osTicket/pull/5616/commits/fb570820ef1138776f929a179906e1d8089179d9
CVE ID: CVE-2020-16194 State: PUBLISHED Published: 2021-02-04T14:39:14 Last Updated: 2024-08-04T13:37:54.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Insecure Direct Object Reference (IDOR) vulnerability was found in Prestashop Opart devis < 4.0.2. Unauthenticated attackers can have access to any user's invoice and delivery address by exploiting an IDOR on the delivery_address and invoice_address fields. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/login-securite/CVE/blob/main/CVE-2020-16194.md
CVE ID: CVE-2020-16196 State: REJECTED Published: 2020-12-10T21:07:32 Last Updated: 2020-12-10T21:07:32 Description: No description available.
CVE ID: CVE-2020-16197 State: PUBLISHED Published: 2020-08-25T18:51:45 Last Updated: 2024-08-04T13:37:54.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Octopus Deploy 3.4. A deployment target can be configured with an Account or Certificate that is outside the scope of the deployment target. An authorised user can potentially use a certificate that they are not in scope to use. An authorised user is also able to obtain certificate metadata by associating a certificate with certain resources that should fail scope validation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/Issues/issues/6531 - https:
ional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/Issues/issues/6531 - https://github.com/OctopusDeploy/Issues/issues/6529 - https://github.com/OctopusDeploy/Issues/issues/6530
CVE ID: CVE-2020-16198 State: PUBLISHED Published: 2020-09-18T17:50:08 Last Updated: 2025-06-04T21:17:52.555Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Philips Products: Clinical Collaboration Platform Problem Types: CWE-693 Description: When an attacker claims to have a given identity, Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not prove or insufficiently proves the claim is correct. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01 - https://www.philips.com/a-w/security/security-advisories/product-security-2020.html#2020_archive
CVE ID: CVE-2020-16199 State: PUBLISHED Published: 2020-08-04T18:59:48 Last Updated: 2024-08-04T13:37:54.135Z Vendors: n/a Products: Delta Industrial Automation CNCSoft ScreenEditor Problem Types: CWE-121 Description: Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read/modify information, execute arbitrary code, and/or crash the application. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-217-01 - https://www.zerodayinitiative.com/advisories/ZDI-20-940
nces: - https://us-cert.cisa.gov/ics/advisories/icsa-20-217-01 - https://www.zerodayinitiative.com/advisories/ZDI-20-940/ - https://www.zerodayinitiative.com/advisories/ZDI-20-939/ - https://www.zerodayinitiative.com/advisories/ZDI-20-943/
CVE ID: CVE-2020-16200 State: PUBLISHED Published: 2020-09-18T17:53:23 Last Updated: 2025-06-04T21:21:08.344Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Philips Products: Clinical Collaboration Platform Problem Types: CWE-757 Description: Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not properly control the allocation and maintenance of a limited resource, thereby enabling an attacker to influence the amount of resources consumed, eventually leading to the exhaustion of available resources. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01 - https://www.ph
t Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01 - https://www.philips.com/a-w/security/security-advisories/product-security-2020.html#2020_archive
CVE ID: CVE-2020-16201 State: PUBLISHED Published: 2020-08-04T18:56:09 Last Updated: 2024-08-04T13:37:54.073Z Vendors: n/a Products: Delta Industrial Automation CNCSoft ScreenEditor Problem Types: CWE-125 Description: Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of-bounds read vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read information. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-217-01 - https://www.zerodayinitiative.com/advisories/ZDI-20-944/ - https://www.zerodayinitiative.com/advisories/ZDI-20-941/ - https:/
://www.zerodayinitiative.com/advisories/ZDI-20-944/ - https://www.zerodayinitiative.com/advisories/ZDI-20-941/ - https://www.zerodayinitiative.com/advisories/ZDI-20-945/ - https://www.zerodayinitiative.com/advisories/ZDI-20-947/ - https://www.zerodayinitiative.com/advisories/ZDI-20-946/ - https://www.zerodayinitiative.com/advisories/ZDI-20-942/
CVE ID: CVE-2020-16202 State: PUBLISHED Published: 2020-09-22T14:28:36 Last Updated: 2024-08-04T13:37:54.193Z Vendors: n/a Products: WebAccess Node Problem Types: CWE-732 Description: WebAccess Node (All versions prior to 9.0.1) has incorrect permissions set for resources used by specific services, which may allow code execution with system privileges. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-261-01
CVE ID: CVE-2020-16203 State: PUBLISHED Published: 2020-08-04T18:55:01 Last Updated: 2024-08-04T13:37:54.029Z Vendors: n/a Products: Delta Industrial Automation CNCSoft ScreenEditor Problem Types: CWE-824 Description: Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. An uninitialized pointer may be exploited by processing a specially crafted project file. Successful exploitation of this vulnerability may allow an attacker to read/modify information, execute arbitrary code, and/or crash the application. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-217-01 - https://www.zerodayinitiative.com/advisori
ainer: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-217-01 - https://www.zerodayinitiative.com/advisories/ZDI-20-948/
CVE ID: CVE-2020-16204 State: PUBLISHED Published: 2020-09-01T20:46:26 Last Updated: 2024-08-04T13:37:53.987Z Vendors: n/a Products: N-Tron 702-W / 702M12-W Problem Types: CWE-912 Description: The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W (all versions). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01 - http://seclists.org/fulldisclosure/2020/Sep/6 - http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html
CVE ID: CVE-2020-16205 State: PUBLISHED Published: 2020-08-14T13:56:23 Last Updated: 2024-08-04T13:37:54.180Z Vendors: n/a Products: G-Cam and G-Code Problem Types: CWE-78 Description: Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code (Firmware Versions 1.12.0.25 and prior as well as the limited Versions 1.12.13.2 and 1.12.14.5). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-219-03 - http://packetstormsecurity.com/files/158888/Geutebruck-testaction.cgi-Remote-Command-Execution.html
CVE ID: CVE-2020-16206 State: PUBLISHED Published: 2020-09-01T20:40:15 Last Updated: 2024-08-04T13:37:53.512Z Vendors: n/a Products: N-Tron 702-W / 702M12-W Problem Types: CWE-79 Description: The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W (all versions). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01 - http://seclists.org/fulldisclosure/2020/Sep/6 - http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html
CVE ID: CVE-2020-16207 State: PUBLISHED Published: 2020-08-06T18:22:34 Last Updated: 2024-08-04T13:37:54.164Z Vendors: n/a Products: Advantech WebAccess HMI Designer Problem Types: CWE-122 Description: Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by opening specially crafted project files that may overflow the heap, which may allow remote code execution, disclosure/modification of information, or cause the application to crash. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-219-02 - https://www.zerodayinitiative.com/advisories/ZDI-20-959/ -
: - https://us-cert.cisa.gov/ics/advisories/icsa-20-219-02 - https://www.zerodayinitiative.com/advisories/ZDI-20-959/ - https://www.zerodayinitiative.com/advisories/ZDI-20-958/ - https://www.zerodayinitiative.com/advisories/ZDI-20-951/ - https://www.zerodayinitiative.com/advisories/ZDI-20-955/ - https://www.zerodayinitiative.com/advisories/ZDI-20-950/
CVE ID: CVE-2020-16208 State: PUBLISHED Published: 2020-09-01T20:42:18 Last Updated: 2024-08-04T13:37:54.160Z Vendors: n/a Products: N-Tron 702-W / 702M12-W Problem Types: CWE-352 Description: The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a device by luring an authenticated user to click on a crafted link on the N-Tron 702-W / 702M12-W (all versions). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01 - http://seclists.org/fulldisclosure/2020/Sep/6 - http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF
g/fulldisclosure/2020/Sep/6 - http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html
CVE ID: CVE-2020-16209 State: PUBLISHED Published: 2022-05-19T17:17:56.000Z Last Updated: 2025-04-16T16:19:42.237Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Fieldcomm Group Products: HART-IP Developer Kit, hipserver Problem Types: CWE-121 Description: A malicious attacker could exploit the interface of the Fieldcomm Group HART-IP (release 1.0.0.0) by constructing messages with sufficiently large payloads to overflow the internal buffer and crash the device, or obtain control of the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-20-287-04
CVE ID: CVE-2020-16210 State: PUBLISHED Published: 2020-09-01T20:44:46 Last Updated: 2024-08-04T13:37:54.199Z Vendors: n/a Products: N-Tron 702-W / 702M12-W Problem Types: CWE-79 Description: The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an attacked user on the N-Tron 702-W / 702M12-W (all versions). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01 - http://seclists.org/fulldisclosure/2020/Sep/6 - http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html
CVE ID: CVE-2020-16211 State: PUBLISHED Published: 2020-08-06T18:21:40 Last Updated: 2024-08-04T13:37:53.848Z Vendors: n/a Products: Advantech WebAccess HMI Designer Problem Types: CWE-125 Description: Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. An out-of-bounds read vulnerability may be exploited by processing specially crafted project files, which may allow an attacker to read information. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-219-02 - https://www.zerodayinitiative.com/advisories/ZDI-20-957/
CVE ID: CVE-2020-16212 State: PUBLISHED Published: 2020-09-11T13:13:35 Last Updated: 2024-08-04T13:37:54.079Z Vendors: Philips Products: Patient Information Center iX (PICiX) Problem Types: CWE-668 Description: In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource. The application on the surveillance station operates in kiosk mode, which is vulnerable to local breakouts that could allow an attacker with physical access to escape the restricted environment with limited privileges. Additional Analyst Notes: - CVE Program Container: References: - https:
restricted environment with limited privileges. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01 - https://www.philips.com/productsecurity
CVE ID: CVE-2020-16213 State: PUBLISHED Published: 2020-08-06T18:20:45 Last Updated: 2024-08-04T13:37:54.186Z Vendors: n/a Products: Advantech WebAccess HMI Designer Problem Types: CWE-787 Description: Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied data may cause the system to write outside the intended buffer area, which may allow remote code execution, disclosure/modification of information, or cause the application to crash. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-219-02 - https://www.zerodayinitiative.com/advisories
ner: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-219-02 - https://www.zerodayinitiative.com/advisories/ZDI-20-956/
CVE ID: CVE-2020-16214 State: PUBLISHED Published: 2020-09-11T12:53:15 Last Updated: 2024-08-04T13:37:53.937Z Vendors: Philips Products: Patient Information Center iX (PICiX) Problem Types: CWE-1236 Description: In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the software saves user-provided information into a comma-separated value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by spreadsheet software. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01 - https://www.philips.com/productsecurity
CVE ID: CVE-2020-16215 State: PUBLISHED Published: 2020-08-06T18:19:43 Last Updated: 2024-08-04T13:37:54.136Z Vendors: n/a Products: Advantech WebAccess HMI Designer Problem Types: CWE-121 Description: Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied data may cause a stack-based buffer overflow, which may allow remote code execution, disclosure/modification of information, or cause the application to crash. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-219-02 - https://www.zerodayinitiative.com/advisories/ZDI-20-953/
CVE ID: CVE-2020-16216 State: PUBLISHED Published: 2020-09-11T13:06:55 Last Updated: 2024-08-04T13:37:54.166Z Vendors: Philips Products: IntelliVue patient monitors, IntelliVue Problem Types: CWE-20 Description: In IntelliVue patient monitors MX100, MX400-550, MX600, MX700, MX750, MX800, MX850, MP2-MP90, and IntelliVue X2 and X3 Versions N and prior, the product receives input or data but does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly, which can induce a denial-of-service condition through a system restart. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/ic
tem restart. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01 - https://www.philips.com/productsecurity
CVE ID: CVE-2020-16217 State: PUBLISHED Published: 2020-08-06T18:15:51 Last Updated: 2024-08-04T13:37:53.946Z Vendors: n/a Products: Advantech WebAccess HMI Designer Problem Types: CWE-415 Description: Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused by processing specially crafted project files may allow remote code execution, disclosure/modification of information, or cause the application to crash. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-219-02 - https://www.zerodayinitiative.com/advisories/ZDI-20-952/
CVE ID: CVE-2020-16218 State: PUBLISHED Published: 2020-09-11T12:50:08 Last Updated: 2024-08-04T13:37:54.157Z Vendors: Philips Products: Patient Information Center iX (PICiX) Problem Types: CWE-79 Description: In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is then used as a webpage and served to other users. Successful exploitation could lead to unauthorized access to patient data via a read-only web application. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01 - https://www.philips.
s: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01 - https://www.philips.com/productsecurity
CVE ID: CVE-2020-16219 State: PUBLISHED Published: 2020-08-06T23:10:15 Last Updated: 2024-08-04T13:37:53.945Z Vendors: n/a Products: Delta Electronics TPEditor Problem Types: CWE-125 Description: Delta Electronics TPEditor Versions 1.97 and prior. An out-of-bounds read may be exploited by processing specially crafted project files. Successful exploitation of this vulnerability may allow an attacker to read/modify information, execute arbitrary code, and/or crash the application. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-219-04 - https://www.zerodayinitiative.com/advisories/ZDI-20-961/ - https://www.zerodayinitiative.com/a
visories/icsa-20-219-04 - https://www.zerodayinitiative.com/advisories/ZDI-20-961/ - https://www.zerodayinitiative.com/advisories/ZDI-20-963/