CVE-2023-5474

Heap buffer overflow in PDF in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: Medium...

CVE-2023-42138

Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file...

CVE-2023-42138

Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file...

Cross site scripting

Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file...

CVE-2023-42138

Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file...

CVE-2023-42138

Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file...

DIAScreen Buffer Overflow RCE

The vulnerability of the DIAScreen development environment relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

CVE-2023-44081

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0009, Tecnomatix Plant Simulation V2302 All versions V2302.0003. The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. Thi...

Denial Of Service (DoS)

libtiff.so is vulnerable to Denial of Service. The vulnerability exists in the TIFFmemcpy function in tifluv.c because it does not properly handle exceptional conditions, which allows an attacker to send a crafted file into the system, causing an application crash...

Siemens Tecnomatix Plant Simulation Heap Buffer Overflow

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation lies in the writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code with privileges of the current process, using a specially crafted SPP file...

Siemens Tecnomatix Plant Simulation Heap Buffer Overflow

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation lies in the writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code with privileges of the current process, using a specially crafted SPP file...

Siemens Tecnomatix Plant Simulation Buffer Overflow

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation lies in buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code with privileges of the current process, using a specially crafted SPP file...

Microsoft Visual Studio Code Execution

The vulnerability of Microsoft Visual Studio, a software development tool, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

OPC UA Quick Client Code Execution

The vulnerability of the OPC UA Quick Client software for industrial automation by Inductive Automation Ignition lies in the lack of authentication for a critical function. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...

Foxit PDF Reader Use-After-Free

The vulnerability of the PDF document viewing program Foxit PDF Reader lies in the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

Keyence KV STUDIO Buffer Error Vulnerability

Keyence KV STUDIO is a PLC programming software from Keyence Corporation. A security vulnerability exists in Keyence KV STUDIO Ver. 11.62 and earlier, KV REPLAY VIEWER Ver. 2.62 and earlier, which originates from a user opening a specially crafted file that may disclose information or execute...

PT-2023-5984 · Microsoft · Office Click-To-Run

Name of the Vulnerable Software and Affected Versions: Microsoft Office Click-To-Run affected versions not specified Description: The issue is related to insufficient access restrictions in the Click-to-Run C2R component of Microsoft Office and Office 365. Exploitation of this issue may allow an...

Siemens Tecnomatix Plant Simulation buffer error vulnerability

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. Using the function of discrete event simulation for production volume analysis and optimization, and thus improve the manufacturing system performance. Siemens Tecnomatix Plant Simulation suffers from an...

Siemens Tecnomatix Plant Simulation Heap Buffer Overflow

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation lies in the writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code with privileges of the current process, using a specially crafted SPP file...

Fedora 38 : freeimage / mingw-freeimage (2023-604a7d56b0)

The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-604a7d56b0 advisory. Downstream fixes for CVE-2021-40266 CVE-2020-24292 CVE-2020-24293 CVE-2020-24295 CVE-2021-40263 Tenable has extracted the preceding description bloc...