5903 matches found
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Design/Logic Flaw
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...
CVE-2020-27008
A vulnerability has been identified in JT2Go All versions V13.1.0.1, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing of PLT files. This could result in a memory access past the end of an allocated buffer. An attacker...
Design/Logic Flaw
A vulnerability has been identified in JT2Go All versions V13.1.0.2, Teamcenter Visualization All versions V13.1.0.2. Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a memory access past the end of an allocated buffer. An attacker...
Stack overflow
A vulnerability has been identified in JT2Go All versions V13.1.0.2, Teamcenter Visualization All versions V13.1.0.2. Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a stack based buffer overflow. An attacker could leverage this...
Design/Logic Flaw
A vulnerability has been identified in JT2Go All versions V13.1.0.1, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing of HPG files. This could result in a memory access past the end of an allocated buffer. An attacker...
CVE-2021-22663
CVE-2021-22663 affects Horner Automation Cscape (all versions prior to 9.90 SP3.5). The vulnerability stems from improper validation of user-supplied data when parsing project files, causing an out-of-bounds read and enabling code execution in the context of the affected process. Affected version...
CVE-2021-22663
Cscape All versions prior to 9.90 SP3.5 lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute code in the context of the current process...
CVE-2020-17429
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...
CVE-2020-17419
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2020-27008
A vulnerability has been identified in JT2Go All versions V13.1.0.1, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing of PLT files. This could result in a memory access past the end of an allocated buffer. An attacker...
CVE-2020-27007
CVE-2020-27007 affects Siemens JT2Go and Teamcenter Visualization (all versions before v13.1.0.1). The issue is an out-of-bounds read when parsing HPG files due to insufficient validation of user-supplied data, which can disclose data in the context of the current process. ZDI advisories describe...
CVE-2020-28394
Siemens JT2Go and Teamcenter Visualization are affected by CVE-2020-28394 (RAS file parsing) where improper validation can cause an out-of-bounds read, potentially exposing data in the current process. Affected versions are JT2Go and Teamcenter Visualization prior to v13.1.0.1. The issue allows i...
CVE-2020-27008
CVE-2020-27008 affects Siemens JT2Go and Teamcenter Visualization: all versions before 13.1.0.1 fail to validate user-supplied data when parsing PLT files, resulting in an out-of-bounds read/past-the-end memory access in the current process context. Public disclosures characterize it as an inform...
CVE-2020-27005
Siemens JT2Go and Teamcenter Visualization (
CVE-2020-27002
Siemens JT2Go and Teamcenter Visualization are affected by CVE-2020-27002 via PAR-file parsing: out-of-bounds read that could disclose data or, per related advisories, enable code execution in the current process. Affected versions are JT2Go and Teamcenter Visualization before 13.1.0.2. Mitigatio...
CVE-2020-27006
Siemens JT2Go (before 13.1.0.1) and Teamcenter Visualization (before 13.1.0.1) are affected by CVE-2020-27006 due to improper validation while parsing PCT files, causing a memory corruption condition that could allow code execution in the context of the current process. Connected advisories confi...
CVE-2020-26999
Siemens JT2Go and Teamcenter Visualization (JT2Go: all versions before 13.1.0.2; Teamcenter Visualization: all versions before 13.1.0.2) are affected by a PAR file parsing vulnerability. The issue arises from improper validation of user-supplied PAR data, which can cause memory access beyond allo...
