CVE-2022-41281

CVE-2022-41281 affects Siemens JT2Go and Teamcenter Visualization (multiple versions). The vulnerability is an out-of-bounds read in CGM_NIST_Loader.dll when parsing CGM files, which can allow code execution in the current process. Affected products include JT2Go ≤14.1.0.6, Teamcenter Visualizati...

CVE-2022-41282: Out-of-bounds Read

A vulnerability has been identified in JT2Go All versions V14.1.0.6, Teamcenter Visualization V13.2 All versions V13.2.0.12, Teamcenter Visualization V13.3 All versions V13.3.0.8, Teamcenter Visualization V14.0 All versions V14.0.0.4, Teamcenter Visualization V14.1 All versions V14.1.0.6. The...

CVE-2022-41285: Use After Free

A vulnerability has been identified in JT2Go All versions V14.1.0.6, Teamcenter Visualization V13.2 All versions V13.2.0.12, Teamcenter Visualization V13.3 All versions V13.3.0.8, Teamcenter Visualization V14.0 All versions V14.0.0.4, Teamcenter Visualization V14.1 All versions V14.1.0.6. The...

CVE-2022-41279: NULL Pointer Dereference

A vulnerability has been identified in JT2Go All versions V14.1.0.6, Teamcenter Visualization V13.2 All versions V13.2.0.12, Teamcenter Visualization V13.3 All versions V13.3.0.8, Teamcenter Visualization V14.0 All versions V14.0.0.4, Teamcenter Visualization V14.1 All versions V14.1.0.6. The...

CVE-2022-41280: NULL Pointer Dereference

A vulnerability has been identified in JT2Go All versions V14.1.0.6, Teamcenter Visualization V13.2 All versions V13.2.0.12, Teamcenter Visualization V13.3 All versions V13.3.0.8, Teamcenter Visualization V14.0 All versions V14.0.0.4, Teamcenter Visualization V14.1 All versions V14.1.0.6. The...

CVE-2022-41284: Out-of-bounds Read

A vulnerability has been identified in JT2Go All versions V14.1.0.6, Teamcenter Visualization V13.2 All versions V13.2.0.12, Teamcenter Visualization V13.3 All versions V13.3.0.8, Teamcenter Visualization V14.0 All versions V14.0.0.4, Teamcenter Visualization V14.1 All versions V14.1.0.6. The...

Siemens部分产品 缓冲区错误漏洞

Siemens Teamcenter Visualization is a team collaboration software for designing 2D and 3D scenes. Siemens JT2GO is a JT file viewer. Siemens Teamcenter Visualization and JT2Go are vulnerable to an out-of-bounds write vulnerability, which can be exploited by attackers to execute code in the contex...

CVE-2022-41283

CVE-2022-41283 affects Siemens JT2Go and Teamcenter Visualization: the CGM_NIST_Loader.dll contains an out-of-bounds write when parsing CGM files, allowing code execution in the current process. Affected versions include JT2Go all versions before 14.1.0.6 and Teamcenter Visualization 13.2 before ...

CVE-2022-45484: Out-of-bounds Read

A vulnerability has been identified in JT2Go All versions V14.1.0.6, Teamcenter Visualization V13.2 All versions V13.2.0.12, Teamcenter Visualization V13.3 All versions V13.3.0.9, Teamcenter Visualization V13.3 All versions V13.3.0.8, Teamcenter Visualization V14.0 All versions V14.0.0.5,...

CVE-2022-41287

CVE-2022-41287 describes a divide-by-zero vulnerability in CGM_NIST_Loader.dll when parsing CGM files, affecting JT2Go and Teamcenter Visualization: JT2Go versions before 14.1.0.6; Teamcenter Visualization V13.2 before 13.2.0.12; V13.3 before 13.3.0.8; V14.0 before 14.0.0.4; V14.1 before 14.1.0.6...

CVE-2022-41284

CVE-2022-41284 affects Siemens JT2Go and Teamcenter Visualization: CGM_NIST_Loader.dll out-of-bounds read when parsing CGM files, enabling code execution in the current process. Affected: JT2Go all versions; Teamcenter Visualization V13.2 before 13.2.0.12; V13.3 before 13.3.0.8; V14.0 before 14.0...

Siemens部分产品 数字错误漏洞

Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. Siemens JT2GO is a JT file viewer. Siemens Teamcenter Visualization and JT2Go contain a security vulnerability that could be exploited by an attacker to crash an applicatio...

CVE-2022-41278

CVE-2022-41278 affects Siemens JT2Go and Teamcenter Visualization components. The root cause is a null pointer dereference in CGM_NIST_Loader.dll while parsing specially crafted CGM files, which can cause the targeted application to crash and produce a denial-of-service condition. Affected produc...

Siemens部分产品 缓冲区错误漏洞

Siemens Teamcenter Visualization is a team collaboration software for designing 2D and 3D scenes. Siemens JT2GO is a JT file viewer. Siemens Teamcenter Visualization and JT2Go are vulnerable to an out-of-bounds read vulnerability that can be exploited by attackers to execute code in the context o...

Siemens部分产品 资源管理错误漏洞

Siemens Teamcenter Visualization is a team collaboration software for designing 2D and 3D scenes. Siemens JT2GO is a JT file viewer. Siemens Teamcenter Visualization and JT2Go are vulnerable to a memory mis-reference vulnerability that could be exploited by attackers to execute code in the contex...

CVE-2022-41947 Cross-site Scripting with user-uploaded files in dhis2-core

DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. Through various features of DHIS2, an authenticated user may be able to upload a file which includes embedded javascript. The user could then potentially trick another authenticated...

CVE-2022-41947

CVE-2022-41947 describes a cross-site scripting (XSS) vulnerability in DHIS 2 core where an authenticated user can upload a file containing embedded JavaScript, which could be triggered when another authenticated user opens the file in a browser. Affected versions are DHIS 2 prior to 2.36.12.1, 2...

CVE-2022-41949

CVE-2022-41949 affects DHIS 2 core. An authenticated DHIS2 user can craft a request that makes the server fetch external resources, enabling a semi‑blind Server-Side Request Forgery (SSRF) in the dhis2-core component. This can allow an attacker to identify vulnerable services not publicly exposed...

GE CIMPLICITY HMI/SCADA Software Buffer Overflow Vulnerability

GE CIMPLICITY HMI/SCADA Software is an automated industrial platform from General Electric GE. It provides true client-server visualization and control from a single machine to plant locations around the world, helping to manage operations and improve decision making. A buffer overflow...

PT-2022-25936 · Tibco Software · Tibco Spotfire Desktop +3

Name of the Vulnerable Software and Affected Versions: TIBCO Spotfire Analyst versions 11.4.4 and below TIBCO Spotfire Analyst versions 11.5.0 through 12.1.0 TIBCO Spotfire Analytics Platform for AWS Marketplace versions 12.1.0 and below TIBCO Spotfire Desktop versions 11.4.4 and below TIBCO...