Lucene search
+L

4335 matches found

CNVD
CNVD
added 2021/07/14 12:00 a.m.39 views

Siemens Jt2go and Siemens Teamcenter Visualization Out-of-Bounds Writing Vulnerability (CNVD-2021-53352)

Siemens Jt2go and Siemens Teamcenter Visualization are both products of the German company Siemens. Siemens Jt2go is a JT file viewer. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. An out-of-bounds write vulnerability...

7.8CVSS3.6AI score0.0166EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/07/14 12:00 a.m.56 views

Siemens Jt2go and Siemens Teamcenter Visualization Buffer Over Read Vulnerability (CNVD-2021-53359)

Siemens Jt2go and Siemens Teamcenter Visualization are both products of Siemens AG, Germany. Siemens Jt2go is a JT file viewer. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. A buffer over-read vulnerability exists in...

5.5CVSS3.4AI score0.01421EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/07/14 12:00 a.m.42 views

Siemens Jt2go and Siemens Teamcenter Visualization Buffer Over Read Vulnerability (CNVD-2021-53357)

Siemens Jt2go and Siemens Teamcenter Visualization are both products of Siemens AG, Germany. Siemens Jt2go is a JT file viewer. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. A buffer over-read vulnerability exists in...

5.5CVSS2.9AI score0.01421EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/07/13 12:00 a.m.10 views

SAP 3D Visual Enterprise Viewer 安全漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces.SAP 3D Visual Enterprise Viewer is vulnerable to a...

6.5CVSS5.6AI score0.0084EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/07/06 12:00 a.m.21 views

Unauthorized Access Vulnerability in Brickstream 3D of LitenTronics Technology (Shenzhen) Co.

Ltd. E tag is a solution provider in Shenzhen. Ltd. Brickstream 3D suffers from an unauthorized access vulnerability that can be exploited by attackers to gain unauthorized access to sensitive information and perform unauthorized operations...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2021/06/28 12:00 a.m.61 views

Autodesk Design Review Buffer Overflow Vulnerability

Autodesk Design Review ADR is a suite of AutoCAD drawing software assist software from Autodesk, Inc. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files.A buffer overflow vulnerability exists in Autodesk Design Review, which can be exploite...

7.8CVSS5.5AI score0.01708EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/06/28 12:00 a.m.75 views

Autodesk Design Review Buffer Overflow Vulnerability (CNVD-2021-53945)

Autodesk Design Review ADR is a suite of AutoCAD drawing software assist software from Autodesk, Inc. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files.Autodesk Design Review is vulnerable to a buffer overflow vulnerability, which could be...

7.8CVSS4.4AI score0.02208EPSS
SaveExploits0References1
NVD
NVD
added 2021/06/24 2:15 p.m.18 views

CVE-2021-23996

By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox 88...

6.5CVSS0.00719EPSS
SaveExploits0References2
Prion
Prion
added 2021/06/24 2:15 p.m.24 views

Spoofing

By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox 88...

4.3CVSS6.3AI score0.00719EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2021/06/24 1:25 p.m.70 views

CVE-2021-23996

By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox 88...

6.5CVSS8AI score0.00719EPSS
SaveExploits0
CVE
CVE
added 2021/06/24 1:25 p.m.164 views

CVE-2021-23996

CVE-2021-23996 affects Mozilla Firefox prior to 88.0, where a flaw in rendering with 3D CSS and JavaScript could cause content to appear outside the viewport, enabling spoofing potentially for phishing. Multiple connected advisories (Arch Linux ASA-202104-3, Alpine, CNVD/CNNVD entries, Kaspersky,...

6.5CVSS6.2AI score0.00719EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/06/24 1:25 p.m.38 views

CVE-2021-23996

By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox 88...

7.1AI score0.00719EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2021/06/24 1:25 p.m.80 views

CVE-2021-23996

By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox 88...

6.5CVSS6.6AI score0.00719EPSS
SaveExploits0
CNVD
CNVD
added 2021/06/21 12:00 a.m.8 views

Microsoft 3D Viewer 3MF Code Execution Vulnerability

Microsoft 3D Viewer is a 3D modeling tool developed by Microsoft. A use-after-release vulnerability exists in Microsoft 3D Viewer 3MF processing, which can be exploited by an attacker to submit a special file request that can be tricked into being parsed by the user, which can cause the applicati...

7.7AI score
SaveExploits0References1
CNVD
CNVD
added 2021/06/21 12:00 a.m.11 views

Microsoft Print 3D PLY Code Execution Vulnerability (CNVD-2021-47650)

Microsoft Print 3D is a 3D modeling tool developed by Microsoft. A code execution vulnerability exists in Microsoft Print 3D PLY processing, which can be exploited by an attacker to submit a special file request that can be tricked into being parsed by the user, which can crash the application or...

8AI score
SaveExploits0References1
CNVD
CNVD
added 2021/06/21 12:00 a.m.8 views

Microsoft Print 3D PLY Code Execution Vulnerability

Microsoft Print 3D is a 3D modeling tool developed by Microsoft. The Microsoft Print 3D PLY code execution vulnerability is exploited by remote attackers to submit a special file request that induces the user to parse it, which can crash the application or execute arbitrary code in the applicatio...

8.2AI score
SaveExploits0References1
CNVD
CNVD
added 2021/06/21 12:00 a.m.5 views

Microsoft 3D Builder GLTF Memory Corruption Vulnerability

Microsoft 3D Builder is a 3D modeling tool developed by Microsoft. A memory corruption vulnerability exists in Microsoft 3D Builder GLTF processing, which can be exploited by an attacker to submit a special file request and trick the user into parsing it, which can crash the application or execut...

7.9AI score
SaveExploits0References1
CNVD
CNVD
added 2021/06/21 12:00 a.m.5 views

Microsoft 3D Builder OBJ Code Execution Vulnerability

Microsoft 3D Builder is a 3D modeling tool developed by Microsoft. A code execution vulnerability exists in the Microsoft 3D Builder OBJ handling, which can be exploited by an attacker to submit a special file request that can be tricked into being parsed by the user, which can crash the...

8AI score
SaveExploits0References1
CNVD
CNVD
added 2021/06/21 12:00 a.m.5 views

Microsoft 3D Builder GLB Memory Corruption Vulnerability

Microsoft 3D Builder is a 3D modeling tool developed by Microsoft. An out-of-bounds write vulnerability exists in Microsoft 3D Builder GLB processing, which can be exploited by an attacker to submit a special file request that can be tricked into being parsed by the user, which can crash the...

7.8AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/17 12:00 a.m.39 views

(0Day) Microsoft 3D Builder GLTF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

6.6CVSS5.7AI score
SaveExploits0
Rows per page
Query Builder