Code injection

In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5.2.16, the local webserver can be used for clickjacking. This includes the settings page...

CVE-2021-34086

CVE-2021-34086 affects Ultimaker S3/S5 and Ultimaker 3 (S-line up to 6.3; 3 through 5.2.16) where the local webserver exposes APIs that are vulnerable to CSRF due to lack of request verification. Root cause: insufficient CSRF protection on the local webserver APIs. Impact: CVSS3.1/AV:N/AC:L/PR:N/...

CVE-2021-34087

In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5.2.16, the local webserver can be used for clickjacking. This includes the settings page...

CVE-2021-34087

The CVE-2021-34087 entry describes a clickjacking vulnerability in the local webserver of Ultimaker printers. Affected products: Ultimaker S3, Ultimaker S5, and Ultimaker 3 family (S-line through firmware 6.3; Ultimaker 3 through 5.2.16). The issue is specifically on the settings page of the loca...

3d-connectx-env (>=1.0.0, <=1.0.1), 3deecelltracker (1.0.0) +3517 more potentially affected by CVE-2021-33430 via numpy (>=1.9.1, <=1.20.3)

numpy PYPI version =1.9.1, =1.0.0, =0.3.7, =0.9.2, =0.5.0, =1.0.2rc1, =0.0.2, =0.5.0, =0.1.1, =0.0.0, =0.8.0, =0.9.3 - absorbing-centrality 0.1.0 and more Source cves: CVE-2021-33430 Source advisory: OSV:GHSA-6P56-WP2H-9HXR...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-33130)

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, a German company. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications, and supports separate installations as standalone executables and ActiveX spaces.An input validation error vulnerability...

Adobe Dimension out-of-bounds read vulnerability (CNVD-2022-02631)

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe, Inc. An out-of-bounds read vulnerability exists in Adobe Dimension, which can be exploited by attackers to cause sensitive memory leaks...

Adobe Dimension out-of-bounds write vulnerability

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe Dimension, which can be exploited by attackers to cause arbitrary code to be executed in the context of the current user...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-33132)

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces. SAP 3D Visual Enterprise Viewer version 9.0 is...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-33131)

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces.SAP 3D Visual Enterprise Viewer version 9.0 is...

Adobe Dimension memory corruption vulnerability

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe, Inc. A memory corruption vulnerability exists in Adobe Dimension, which can be exploited by attackers to cause arbitrary code to be executed in the context of the current user...

SAP 3D Visual Enterprise Viewer JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

111752 (1.1.1), 3d-connectx-env (>=1.0.0, <=1.0.1) +4483 more potentially affected by CVE-2021-34141 via numpy (>=1.8.1, <=1.21.6)

numpy PYPI version =1.8.1, =1.0.0, =0.1.0, =0.3.7, =0.9.2, =0.0.5, =0.5.0, =1.0.2rc1, =0.0.2, =0.5.0, =1.0.2, =0.1.1, =0.1.3 and more Source cves: CVE-2021-34141 Source advisory: OSV:GHSA-FPFV-JQM9-F5JM...

JT2Go and Teamcenter Visualization File Parsing Vulnerability (CNVD-2021-100366)

JT2Go is a 3D JT viewing tool, Teamcenter visualization software enables organizations to enhance their product lifecycle management PLM environments with a comprehensive family of visualization solutions. The software allows business users to access documents, 2D drawings and 3D models in a sing...

JT2Go and Teamcenter Visualization File Parsing Vulnerability (CNVD-2021-100359)

JT2Go, a 3D JT viewing tool, and Teamcenter Visualization software enable companies to enhance their Product Lifecycle Management PLM environments with a comprehensive family of visualization solutions. The software allows business users to access documents, 2D drawings and 3D models in a single...

JT2Go and Teamcenter Visualization File Parsing Vulnerability (CNVD-2021-100356)

JT2Go, a 3D JT viewing tool, and Teamcenter Visualization software enable companies to enhance their Product Lifecycle Management PLM environments with a comprehensive family of visualization solutions. The software allows business users to access documents, 2D drawings and 3D models in a single...

JT2Go and Teamcenter Visualization File Parsing Vulnerability (CNVD-2021-100358)

JT2Go, a 3D JT viewing tool, and Teamcenter Visualization software enable companies to enhance their Product Lifecycle Management PLM environments with a comprehensive family of visualization solutions. The software allows business users to access documents, 2D drawings and 3D models in a single...

JT2Go and Teamcenter Visualization File Parsing Vulnerability (CNVD-2021-100357)

JT2Go, a 3D JT viewing tool, and Teamcenter Visualization software enable companies to enhance their Product Lifecycle Management PLM environments with a comprehensive family of visualization solutions. The software allows business users to access documents, 2D drawings and 3D models in a single...

JT2Go and Teamcenter Visualization File Parsing Vulnerability (CNVD-2021-100360)

JT2Go, a 3D JT viewing tool, and Teamcenter Visualization software enable companies to enhance their Product Lifecycle Management PLM environments with a comprehensive family of visualization solutions. The software allows business users to access documents, 2D drawings and 3D models in a single...

JT2Go and Teamcenter Visualization File Parsing Vulnerability (CNVD-2021-100365)

JT2Go, a 3D JT viewing tool, and Teamcenter Visualization software enable companies to enhance their Product Lifecycle Management PLM environments with a comprehensive family of visualization solutions. The software allows business users to access documents, 2D drawings and 3D models in a single...