Microsoft 3D Viewer code injection vulnerability

A code injection vulnerability exists in Microsoft 3D Viewer, a simplified and fast graphics editing application from Microsoft Corporation USA. The vulnerability stems from the process of constructing code segments from external input data that is not properly filtered by the network system or...

Microsoft 3D Viewer Multiple Vulnerabilities (November 2021)

The version of the Microsoft 3D Viewer app installed on the remote host is prior to 7.2107.7012.0. It is, therefore, affected by multiple remote code execution vulnerabilities. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

KLA12340 RCE vulnerabilities in Microsoft Apps

Remote code execution vulnerabilities were found in Microsoft Apps. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-43208 CVE-2021-43209 Exploitation CVE list CVE-2021-43208 unknown CVE-2021-43209 unknown Solution Install necessary updates fr...

Fedora: Security Advisory for CuraEngine (FEDORA-2021-16d848834d)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for CuraEngine (FEDORA-2021-8ea648186c)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: CuraEngine-4.11.0-2.fc35

CuraEngine is a C++ console application for 3D printing G-code generation. It has been made as a better and faster alternative to the old Skeinforge engine. This is just a console application for G-code generation. For a full graphical application look at cura with is the graphical frontend for...

[SECURITY] Fedora 34 Update: CuraEngine-4.11.0-2.fc34

CuraEngine is a C++ console application for 3D printing G-code generation. It has been made as a better and faster alternative to the old Skeinforge engine. This is just a console application for G-code generation. For a full graphical application look at cura with is the graphical frontend for...

CVE-2021-24732

The PDF Flipbook, 3D Flipbook WordPress – DearFlip WordPress plugin before 1.7.10 does not escape the class attribute of its shortcode before outputting it back in an attribute, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks...

CVE-2021-24732 Dflip Lite < 1.7.10 - Contributor+ Stored Cross-Site Scripting

The PDF Flipbook, 3D Flipbook WordPress – DearFlip WordPress plugin before 1.7.10 does not escape the class attribute of its shortcode before outputting it back in an attribute, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks...

CVE-2021-24732

The CVE concerns the DearFlip (Dflip Lite) WordPress plugin, prior to version 1.7.10. The vulnerability arises from not escaping the class attribute of the plugin’s shortcode before outputting it in an attribute, enabling Stored Cross-Site Scripting by users with as low as Contributor privileges....

3d-kit (0.1.1), 4cdl (>=1.0.1, <=1.0.7) +1701 more potentially affected by CVE-2021-39184 via electron (>=0.1.2, <=11.4.9)

electron NPM version =0.1.2, =1.0.1, =0.0.10, =0.1.0, =3.0.5, =0.1.0, =1.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.3, =1.0.1, =0.0.1, =0.0.3 and more Source cves: CVE-2021-39184 Source advisory: MEND:CVE-2021-39184...

3D Print Lite < 1.9.1.6 - Reflected Cross-Site Scripting

Description The plugin does not sanitise and escape some user input before outputting it back in attributes, leading to Reflected Cross-Site Scripting issues PoC https://example.com/wp-admin/admin.php?page=p3dlitematerialstext=" https://example.com/wp-admin/admin.php?page=p3dliteprinterstext="...

3D Print Lite < 1.9.1.6 - Reflected Cross-Site Scripting

Description The plugin does not sanitise and escape some user input before outputting it back in attributes, leading to Reflected Cross-Site Scripting issues https://example.com/wp-admin/admin.php?page=p3dlitematerials&materialtext="alert/XSS/...

Siemens Solid Edge Post-release Reuse Vulnerability (CNVD-2021-75894)

Siemens Solid Edge, a 3D CAD, parametric feature and synchronous technology solid modeling software, is vulnerable to a post-release reuse vulnerability when parsing OBJ files in versions prior to Siemens Solid Edge SE2021MP8. An attacker could exploit this vulnerability to execute code in the...

Siemens Solid Edge

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: Solid Edge, 3D CAD and solid modeling software Vulnerabilities: Use After Free, Out-of-bounds Read, Access of Uninitialized Pointer 2. RISK EVALUATION Successful exploitation of these vulnerabilities...

Sql injection

The Add new scene functionality in the Responsive 3D Slider WordPress plugin through 1.2 uses an id parameter which is not sanitised, escaped or validated before being inserted to a SQL statement, leading to SQL injection. This is a time based SQLI and in the same function vulnerable parameter is...

PT-2021-15931

Name of the Vulnerable Software and Affected Versions Responsive 3D Slider WordPress plugin versions 1.2 and earlier Description The Add new scene functionality in the Responsive 3D Slider WordPress plugin uses an id parameter which is not sanitised, escaped or validated before being inserted to ...

WordPress SQL injection vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the Responsive 3D Slider WordPress plugin 1.2 and prior...

CVE-2021-24398: Improper Neutralization of Special Elements used in an SQL Command

The Add new scene functionality in the Responsive 3D Slider WordPress plugin through 1.2 uses an id parameter which is not sanitised, escaped or validated before being inserted to a SQL statement, leading to SQL injection. This is a time based SQLI and in the same function vulnerable parameter is...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-33133)

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces.SAP 3D Visual Enterprise Viewer 9.0 is vulnerable ...