Browse CVEs

HIGH 7.3 CVE-2018-19015 An attacker could inject commands to launch programs and create, write, and read files on CX-Supervisor (Versions 3.42 and prior) through a specially… Cx Supervisor after 3.42 Fix from $1,9502019-01-28 HIGH 7.3 CVE-2018-19019 A type confusion vulnerability exists when processing project files in CX-Supervisor (Versions 3.42 and prior). An attacker could use a specially cra… Cx Supervisor after 3.42 Fix from $1,9502019-01-22 HIGH 8.8 CVE-2018-19011 CX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project file. An attacker could exploit this to execute code u… Cx Supervisor after 3.42 Fix from $1,9502019-01-22 HIGH 8.8 CVE-2018-19017 Several use after free vulnerabilities have been identified in CX-Supervisor (Versions 3.42 and prior). When processing project files, the applicatio… Cx Supervisor after 3.42 Fix from $1,9502019-01-22 MEDIUM 5.0 CVE-2018-19013 An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor (Versions 3.42 and prior) through a specially… Cx Supervisor after 3.42 Fix from $1,6002019-01-22 HIGH 7.8 CVE-2018-18989 In CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior), when processing project files, the… Cx One after 9.66 Fix from $1,9502018-12-04 HIGH 7.8 CVE-2018-18993 Two stack-based buffer overflow vulnerabilities have been discovered in CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-… Cx One after 9.66 Fix from $1,9502018-12-04 HIGH 7.8 CVE-2018-17905 When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with a specific byte, memory corruption may occur withi… Cx Supervisor after 3.4.1.0 Fix from $1,9502018-11-05 HIGH 7.8 CVE-2018-17909 When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it is referencing freed memory, wh… Cx Supervisor after 3.4.1.0 Fix from $1,9502018-11-05 HIGH 7.8 CVE-2018-17913 A type confusion vulnerability exists when processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, which may allow an attacker to… Cx Supervisor after 3.4.1.0 Fix from $1,9502018-11-05 HIGH 7.8 CVE-2018-7514 Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-P… Cx Flnet after 9.65 Fix from $1,9502018-04-17 HIGH 7.8 CVE-2018-7530 Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-P… Cx Flnet after 9.65 Fix from $1,9502018-04-17 HIGH 7.8 CVE-2018-8834 Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-P… Cx Flnet after 9.65 Fix from $1,9502018-04-17 MEDIUM 5.3 CVE-2018-7513 In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow. Cx Supervisor after 3.30 Fix from $1,6002018-03-21 MEDIUM 5.3 CVE-2018-7515 In Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities can be exploited when CX Supervisor indirectly calls … Cx Supervisor after 3.30 Fix from $1,6002018-03-21 MEDIUM 5.3 CVE-2018-7517 In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out of bounds vulnerability. Cx Supervisor after 3.30 Fix from $1,6002018-03-21 MEDIUM 5.3 CVE-2018-7519 In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a heap-based buffer overflow. Cx Supervisor after 3.30 Fix from $1,6002018-03-21 MEDIUM 5.3 CVE-2018-7521 In Omron CX-Supervisor Versions 3.30 and prior, use after free vulnerabilities can be exploited when CX Supervisor parses a specially crafted project… Cx Supervisor after 3.30 Fix from $1,6002018-03-21 MEDIUM 5.3 CVE-2018-7523 In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a double free vulnerability. Cx Supervisor after 3.30 Fix from $1,6002018-03-21 MEDIUM 5.3 CVE-2018-7525 In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untrusted pointer dereference vuln… Cx Supervisor after 3.30 Fix from $1,6002018-03-21 CRITICAL 9.8 CVE-2018-6624 OMRON NS devices 1.1 through 1.3 allow remote attackers to bypass authentication via a direct request to the .html file for a specific screen, as dem… Ns Series Firmware after 1.3 Fix from $2,3002018-02-05 CRITICAL 10.0 CVE-2015-0987 Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 rely on cleartext password transmission, which al… Cx Programmer after 9.5 Fix from $2,3002015-10-06 MEDIUM 6.0 CVE-2014-2369 Cross-site request forgery (CSRF) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allo… Ns Series System Program Firmware Mitigation only Fix from $1,6002014-07-24