Michael Heinzl reported these vulnerabilities to CISA.

mySCADA myPRO Manager OS Command Injection

Ashlar-Vellum Cobalt, Xenon, Argon, Lithium Heap-based Buffer Overflow

Ashlar-Vellum Cobalt, Xenon, Argon, Lithium Out-of-bounds Write

Improper Authorization

Santesoft Sante FFT Imaging Out-of-bounds Read

Santesoft Sante DICOM Viewer Pro Out-of-bounds Write

Santesoft Sante DICOM Viewer Pro Stack-based Buffer Overflow

Horner Automation Cscape Out-of-bounds Write

Horner Automation Cscape Out-of-bounds Read

The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer.