CVE-2024-34520: Authorization Bypass Through User-Controlled Key

An authorization bypass vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R10240, which allows an authenticated 'guest' user to perform unauthorized administrative actions, such as accessing the 'add user' feature, by bypassing client-side access controls...

CVE-2024-34520

An authorization bypass vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R10240, which allows an authenticated 'guest' user to perform unauthorized administrative actions, such as accessing the 'add user' feature, by bypassing client-side access controls...

CVE-2024-34521

A directory traversal vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R10240, which allows an administrative user to access system files with the file permissions of the privileged system user running the application...

CVE-2024-34521

A directory traversal vulnerability exists in the Mavenir SCE Application Provisioning Portal , specifically in version PORTAL-LBS-R_1_0_24_0 . This flaw allows an administrative user to access system files using the permissions of the privileged system user running the application. While the vul...

PT-2025-6644

Name of the Vulnerable Software and Affected Versions Mavenir SCE Application Provisioning Portal version PORTAL-LBS-R 1 0 24 0 Description The issue concerns an authorization bypass in the Mavenir SCE Application Provisioning Portal. This allows an authenticated 'guest' user to perform...

PT-2025-6645

Name of the Vulnerable Software and Affected Versions Mavenir SCE Application Provisioning Portal version PORTAL-LBS-R 1 0 24 0 Description A directory traversal issue exists in the portal, allowing an administrative user to access system files with the file permissions of the privileged system...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a post-release reuse issue contained in the SCE-Mink component...

CVE-2022-24661

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions V2022.1. The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process...

CVE-2022-24661

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions V2022.1. The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process...

CVE-2022-24661

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions V2022.1. The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process...

CVE-2022-24661: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions V2022.1. The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process...

PT-2022-16783

Name of the Vulnerable Software and Affected Versions Simcenter STAR-CCM+ Viewer versions prior to V2022.1 Description A memory corruption issue has been identified in the starview+.exe component while parsing specially crafted .SCE files. This could allow an attacker to execute code in the conte...

The vulnerability relates to the execution of the starview executable file and the .exe program for viewing scenarios and graphics in Simcenter STAR-CCM+ Viewer. This allows a malicious individual to execute arbitrary code or cause a service failure.

The vulnerability of the starview executable file and the .exe program for displaying scenes and graphics in Simcenter STAR-CCM+ Viewer lies in the issue of buffer overflows during syntax analysis of Vorimat SCE files. Exploiting this vulnerability can allow attackers to execute arbitrary code or...

Siemens Simcenter STAR-CCM+ SCE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter STAR-CCM+. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2021-4190

Name of the Vulnerable Software and Affected Versions Simcenter STAR-CCM+ Viewer versions prior to V2021.2.1 Description The issue is related to a buffer overflow when parsing SCE format files, which could allow an attacker to execute arbitrary code or cause a denial of service by using a special...

Cross-Site Scripting (XSS)

angular is vulnerable to cross-site scripting XSS. There is no $sce protection against linkhref, which would allow a remote attacker to inject arbitrary Javascript into a victim's browser via RESOURCEURL...

WS-2016-7105

Security vulnerability was found in angular.js before 1.6.1. Inconsistent handling of $sce trustedUrl with $http...

Design/Logic Flaw

Unspecified vulnerability in the SSH server in 1 Cisco Service Control Engine SCE 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and 2 Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service management interface outage via SSH traffic that occurs during management...

CVE-2008-0536

Unspecified vulnerability in the SSH server in 1 Cisco Service Control Engine SCE 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and 2 Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service management interface outage via SSH traffic that occurs during management...

CVE-2008-0536

CVE-2008-0536 affects Cisco Service Control Engine (SCE) 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and Icon Labs Iconfidant SSH before 2.3.8. The vulnerability allows remote SSH-based denial of service (management interface outage) by triggering illegal I/O operations during management tasks (Bu...