OESA-2024-1481 llvm security update

LLVM is a compiler infrastructure designed for compile-time, link-time, runtime, and idle-time optimization of programs from arbitrary programming languages. Security Fixes: LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata function via a crafted pdflatex.fmt file or perhaps a...

The vulnerability of Dell Alienware Command Center’s search mechanism, which involves an uncontrolled search element, allows a intruder to execute arbitrary code.

The vulnerability of Dell Alienware Command Center is related to an uncontrolled element in the search path. Exploiting this vulnerability allows a perpetrator to execute arbitrary code by introducing specially crafted files into the search path...

Adobe Animate Buffer Overflow Vulnerability (CNVD-2024-19000)

Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate suffers from a buffer overflow vulnerability that stems from the application's susceptibility to out-of-bounds reads when parsing carefully crafted files, which may read beyond the end of an...

OESA-2024-1410 stb security update

Single-file public domain libraries for C/C++. Security Fixes: stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in f-vendorlen = char'\0';. The root cause is that if the len read in startdecoder is -1 and len + 1 becom...

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation, related to the manipulation of the zero indicator, allows a perpetrator to trigger a service failure.

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation lies in the handling of the zero pointer. Exploiting this vulnerability can allow attackers to trigger a service failure using specially created SPP files...

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation, related to the manipulation of the zero indicator, allows a perpetrator to trigger a service failure.

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation relates to the manipulation of the zero indicator. Exploiting this vulnerability can allow attackers to trigger a maintenance failure using specially created SPP files...

The vulnerability of Parasolid’s 3D geometric modeling tool, related to the swapping of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of Parasolid’s 3D geometric modeling tool is related to the manipulation of the zero pointer. Exploiting this vulnerability can allow attackers to trigger a service failure using specially created XT files...

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation, related to the manipulation of the zero indicator, allows a perpetrator to trigger a service failure.

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation relates to the manipulation of the zero indicator. Exploiting this vulnerability can allow attackers to trigger a maintenance failure using specially created SPP files...

PT-2024-2979 · Siemens · Teamcenter Visualization +2

Name of the Vulnerable Software and Affected Versions: Parasolid V35.1 versions prior to V35.1.254 Parasolid V36.0 versions prior to V36.0.207 Parasolid V36.1 versions prior to V36.1.147 JT2Go versions prior to V2312.0004 Teamcenter Visualization V14.2 versions prior to V14.2.0.12 Teamcenter...

The vulnerability of Parasolid’s 3D geometric modeling tool and Siemens Solid Edge’s design and modeling tools relates to the execution of operations beyond the buffer boundaries in memory. This allows attackers to execute arbitrary code.

The vulnerability of Parasolid’s 3D geometric modeling tool and Siemens Solid Edge’s design and modeling tools is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows attackers to execute arbitrary code within the context of the curre...

EUVD-2024-26384

CSV Injection vulnerability in Addactis IBNRS v.3.10.3.107 allows a remote attacker to execute arbitrary code via a crafted .ibnrs file to the Project Description, Identifiers, Custom Triangle Name inside Input Triangles and Yield Curve Name parameters...

Stack Based Buffer Overflow

gtkwave is vulnerable to Stack Based Buffer Overflow. The vulnerability is due to insufficient bounds checking in the fstReaderVarint32WithSkip function. Crafted .fst files, allowing attackers to execute arbitrary code execution when opened by a victim...

Stack Based Buffer Overflow

gtkwave is vulnerable to Stack Based Buffer Overflow. The vulnerability is due to insufficient bounds checking in the fstReaderVarint64 function. Crafted .fst files, allowing attackers to execute arbitrary code execution when opened by a victim...

The software for simulation and automation of discrete events in Arena Simulation is vulnerable due to an operation that goes beyond the buffer in memory, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Arena Simulation software for modeling and automating discrete events arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability can allow a hacker to compromise the confidentiality, integrity, and accessibility of the protected...

Keyence KV STUDIO和Keyence KV REPLAY VIEWER 安全漏洞

Keyence KV STUDIO and Keyence KV REPLAY VIEWER are both products of Keyence Corporation of China.Keyence KV STUDIO is a PLC programming software.Keyence KV REPLAY VIEWER is a computer program. A security vulnerability exists in Keyence KV STUDIO version 11.64 and earlier, and Keyence KV REPLAY...

SANE Backends 安全漏洞

SANE Backends is an application programming interface API and communication protocol for regulating communication between software and digital imaging devices. A security vulnerability exists in SANE Backends version 1.2.1. An attacker can exploit this vulnerability to execute arbitrary code via...

MiniZinc 安全漏洞

MiniZinc is a high-level constraint modeling language for easily expressing and solving discrete optimization problems. A security vulnerability exists in MiniZinc prior to version 2.8.0, which stems from allowing NULL pointer dereferencing via tiexpr in specially crafted .mzn files...

PT-2024-2501 · Wireshark +4 · Wireshark +4

Name of the Vulnerable Software and Affected Versions: Wireshark versions 4.0.0 through 4.0.13 Wireshark versions 4.0.3 through 4.2.0 Description: The issue is related to the T.38 dissector in Wireshark and is caused by improper memory management. Exploitation of this issue may allow an attacker ...

CVE-2024-1848

CVE-2024-1848 covers multiple vulnerabilities in SOLIDWORKS Desktop (Release SOLIDWORKS 2024) affecting the file-reading procedure. The issues include Heap-based and Stack-based Buffer Overflow, Memory Corruption, Out-of-Bounds Read/Write, Type Confusion, Uninitialized Variable, and Use-After-Fre...

Security Bulletin: Security vulnerabilities in Apache Commons Compress affects IBM License Metric Tool v9.

Summary There are vulnerabilities in Apache Commons Compress library that is used by IBM License Metric Tool. Vulnerability Details CVEID:CVE-2024-25710 DESCRIPTION: Apache Commons Compress is vulnerable to a denial of service, caused by an infinite loop flaw. By persuading a victim to open a...