The server in xArrow before 3.4.1 does not properly allocate memory, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via unspecified vectors. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity.
Denial Of Service
Xarrow
NVD
CVSS 2.0
7.8
EPSS
0.5%
Untrusted search path vulnerability in Measuresoft ScadaPro Client before 4.0.0 and ScadaPro Server before 4.0.0 allows local users to gain privileges via a Trojan horse DLL in the current working. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.
Information Disclosure
Scadapro Client
Scadapro Server
NVD
CVSS 2.0
7.2
EPSS
0.1%