Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Vendor: Horner Automation Component: Cscape Envisionrv Clear all filters
TI-2023-13171 CVE-2023-28653 · GHSA-7vjf-c5mj-643c

Use after free in Horner Automation Cscape

Priority LOW 36

The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00238 Published 2023-06-06 No fix listed CWE-416
TI-2023-12507 CVE-2023-27916 · GHSA-9qhf-jjcc-w776

Out-of-bounds read in Horner Automation Cscape

Priority LOW 35

The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2023-06-06 No fix listed CWE-125
TI-2023-13871 CVE-2023-29503 · GHSA-8jwf-4fqw-cf73

Stack-based buffer overflow in Horner Automation Cscape

Priority LOW 36

The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0023 Published 2023-06-06 No fix listed CWE-121
TI-2023-14962 CVE-2023-31278 · GHSA-2pww-2c9q-m4hw

Horner Automation Cscape Out-of-bounds Read

Priority LOW 35

Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2023-06-06 No fix listed CWE-125
TI-2023-15502 CVE-2023-32203 · GHSA-v8jw-x2rh-r52c

Horner Automation Cscape Out-of-bounds Write

Priority LOW 35

Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2023-06-06 No fix listed CWE-787
TI-2023-15579 CVE-2023-32281 · GHSA-2jhq-65q3-jpx9

Out-of-bounds read in Horner Automation Cscape

Priority LOW 35

The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2023-06-06 No fix listed CWE-125
TI-2023-15585 CVE-2023-32289 · GHSA-r4vw-gj85-84vr

Out-of-bounds read in Horner Automation Cscape

Priority LOW 35

The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2023-06-06 No fix listed CWE-125
TI-2023-15821 CVE-2023-32539 · GHSA-68p8-fgjv-fv2m

Horner Automation Cscape Out-of-bounds Write

Priority LOW 35

Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2023-06-06 No fix listed CWE-787
TI-2023-15827 CVE-2023-32545 · GHSA-vx55-hxqp-xhm8

Out-of-bounds read in Horner Automation Cscape

Priority LOW 35

The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2023-06-06 No fix listed CWE-125
TI-2021-20071 CVE-2021-44462 · GHSA-6fp8-84r4-prgm

Horner Automation Cscape EnvisionRV Improper Input Validation

Priority LOW 37

This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionRV v4.50.3.1 and prior.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00713 Published 2022-03-25 No fix listed CWE-20