Vulnerabilities > NI

DATE CVE VULNERABILITY TITLE RISK
2024-12-10 CVE-2024-10494 Unspecified vulnerability in NI Labview 2022/2023/2024
An out of bounds read due to improper input validation in HeapObjMapImpl.cpp in NI LabVIEW may disclose information or result in arbitrary code execution.
local
low complexity
ni
7.8
2024-12-10 CVE-2024-10495 Unspecified vulnerability in NI Labview 2022/2023/2024
An out of bounds read due to improper input validation when loading the font table in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary code execution.
local
low complexity
ni
7.8
2024-12-10 CVE-2024-10496 Unspecified vulnerability in NI Labview 2022/2023/2024
An out of bounds read due to improper input validation in BuildFontMap in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary code execution.
local
low complexity
ni
7.8
2024-07-23 CVE-2024-4079 Out-of-bounds Read vulnerability in NI Labview
An out of bounds read due to a missing bounds check in LabVIEW may disclose information or result in arbitrary code execution.
local
low complexity
ni CWE-125
7.8
2024-07-23 CVE-2024-4080 Out-of-bounds Write vulnerability in NI Labview
A memory corruption issue due to an improper length check in LabVIEW tdcore.dll may disclose information or result in arbitrary code execution.
local
low complexity
ni CWE-787
7.8
2024-07-23 CVE-2024-4081 Out-of-bounds Write vulnerability in NI Labview
A memory corruption issue due to an improper length check in NI LabVIEW may disclose information or result in arbitrary code execution.
local
low complexity
ni CWE-787
7.8
2024-07-22 CVE-2024-6791 Path Traversal vulnerability in NI Veristand
A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code execution.
local
low complexity
ni CWE-22
7.8
2024-07-22 CVE-2024-6793 Deserialization of Untrusted Data vulnerability in NI Veristand
A deserialization of untrusted data vulnerability exists in NI VeriStand DataLogging Server that may result in remote code execution.
network
low complexity
ni CWE-502
critical
9.8
2024-07-22 CVE-2024-6794 Deserialization of Untrusted Data vulnerability in NI Veristand
A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution.
network
low complexity
ni CWE-502
critical
9.8
2024-07-22 CVE-2024-6805 Missing Authorization vulnerability in NI Veristand
The NI VeriStand Gateway is missing authorization checks when an actor attempts to access File Transfer resources.
network
low complexity
ni CWE-862
critical
9.8