PT-2024-8757 · Siemens · Simcenter Femap

Name of the Vulnerable Software and Affected Versions: Simcenter Femap versions prior to V2406 Description: A vulnerability has been identified that allows an attacker to execute code in the context of the current process by exploiting an out of bounds read past the end of an allocated structure...

PT-2024-8756 · Siemens · Simcenter Femap

Name of the Vulnerable Software and Affected Versions: Simcenter Femap versions prior to V2406 Description: The issue is related to an out of bounds read in memory when parsing specially crafted IGS files. This could allow an attacker to execute arbitrary code in the context of the current proces...

PT-2024-3681 · Siemens · Simcenter Femap

Name of the Vulnerable Software and Affected Versions: Simcenter Femap versions prior to V2406 Description: The issue is related to a type confusion vulnerability when parsing IGS files. This could allow an attacker to execute code in the context of the current process by opening specially crafte...

PT-2024-8754 · Siemens · Simcenter Femap

Name of the Vulnerable Software and Affected Versions: Simcenter Femap versions prior to V2406 Description: A vulnerability has been identified that involves an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to...

PT-2024-5042 · Siemens · Simcenter Femap

Name of the Vulnerable Software and Affected Versions: Simcenter Femap versions prior to V2406 Description: A vulnerability has been identified that allows an attacker to execute code in the context of the current process by exploiting an out of bounds read past the end of an allocated structure...

PT-2024-3772 · Siemens · Simcenter Femap

Name of the Vulnerable Software and Affected Versions: Simcenter Femap versions prior to V2406 Description: The issue is related to a memory corruption vulnerability while parsing specially crafted IGS files, which could allow an attacker to execute code in the context of the current process. Thi...

CVE-2024-2406

creationtimestamp| type| source ---|---|--- 2024-03-12 22:21:56+00:00| seen| https://t.me/ctinow/206225 2024-03-12 22:27:03+00:00| seen| https://t.me/ctinow/206237...

CVE-2024-2406

CVE-2024-2406 affects Gacjie Server up to version 1.0. The vulnerability is in the function index handling in /app/admin/controller/Upload.php, where manipulating the file argument enables unrestricted file uploads. Remote exploitation is possible, and the exploit has been disclosed publicly. Mul...

Malicious code in wlwz-2312-2406 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68e160a6dd6d6ff375eaf51af8afdc05d16877d99bdf8df7bc4aa09368be629a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Medium: python-ldap

Issue Overview: python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial of service ReDoS flaw in the LDAP schema parser. By sending crafted regex input, a remote authenticated attacker could...

Amazon Linux 2 : python-ldap (ALAS-2024-2406)

The version of python-ldap installed on the remote host is prior to 2.4.15-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2406 advisory. python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, becau...

CVE-2023-2406

The Event Registration Calendar By vcita plugin, versions up to and including 3.9.1, and Online Payments – Get Paid with PayPal, Square & Stripe plugin, for WordPress are vulnerable to Stored Cross-Site Scripting via the 'email' parameter in versions up to, and including, 1.3.1 due to insufficien...

CVE-2023-2406

The CVE-2023-2406 issue affects the WordPress plugins Event Registration Calendar By vcita (up to v3.9.1) and Online Payments – Get Paid with PayPal, Square & Stripe (up to v1.3.1). Root cause: insufficient input sanitization and output escaping on the email parameter, enabling Stored XSS. Exploi...

CVE-2022-2406

The legacy Slack import feature in Mattermost version 6.7.0 and earlier fails to properly limit the sizes of imported files, which allows an authenticated attacker to crash the server by importing large files via the Slack import REST API...

CVE-2022-2406

Mattermost CVE-2022-2406 concerns the legacy Slack import feature (v6.7.0 and earlier). The root cause is failure to properly limit imported file sizes, allowing an authenticated attacker to crash the server by uploading large files via the Slack import REST API. Impact is a DoS affecting availab...

CVE-2022-2406 Malicious imports can lead to Denial of Service

The legacy Slack import feature in Mattermost version 6.7.0 and earlier fails to properly limit the sizes of imported files, which allows an authenticated attacker to crash the server by importing large files via the Slack import REST API...

CVE-2022-2406 Malicious imports can lead to Denial of Service

The legacy Slack import feature in Mattermost version 6.7.0 and earlier fails to properly limit the sizes of imported files, which allows an authenticated attacker to crash the server by importing large files via the Slack import REST API...

CVE-2021-2406

Vulnerability in the Oracle Collaborative Planning product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Collaborative...

CVE-2021-2406

CVE-2021-2406 affects Oracle E-Business Suite’s Oracle Collaborative Planning product, User Interface component. Affected versions are 12.1.1–12.1.3. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Collaborative Planning, potentially enabling u...

EulerOS 2.0 SP2 : xorg-x11-server (EulerOS-SA-2020-2406)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lead to a privilege...