Lucene search
+L

27 matches found

BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.10 views

The vulnerability of the JT Utilities and JT Open Toolkit (JTTK) application development tools, related to data writing beyond the buffer limit, allows a perpetrator to execute arbitrary code.

The vulnerability of the JT Utilities and JT Open Toolkit JTTK application development tools is related to data writing outside of the buffer during JT file syntax analysis. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.00814EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.7 views

The vulnerability of the dynamically linked library ugeom2d.dll, a set of tools for design and simulation in Siemens Solid Edge, allows a hacker to execute arbitrary code.

The vulnerability of the dynamically linked library ugeom2d.dll, which is part of Siemens Solid Edge’s design and modeling tools, relates to the writing beyond buffer boundaries in memory during DFT file syntax analysis. Exploiting this vulnerability could allow an attacker to execute arbitrary...

7.8CVSS7.8AI score0.02505EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.7 views

The vulnerability of the dynamically linked library jutil.dll, a set of tools for design and simulation in Siemens Solid Edge, allows a perpetrator to execute arbitrary code.

The vulnerability of the dynamically linked library jutil.dll, which is part of the Siemens Solid Edge design and simulation tools, relates to writing beyond buffer boundaries in memory during DFT file syntax analysis. Exploiting this vulnerability could allow an attacker to execute arbitrary cod...

7.8CVSS7.8AI score0.02505EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2020/10/01 6:15 p.m.7 views

CVE-2020-15228

In the @actions/core npm module before version 1.2.6,addPath and exportVariable functions communicate with the Actions Runner over stdout by generating a string in a specific format. Workflows that log untrusted data to stdout may invoke these commands, resulting in the path or environment...

5CVSS5.9AI score0.01501EPSS
SaveExploits2References2
Prion
Prion
added 2020/10/01 6:15 p.m.21 views

Design/Logic Flaw

In the @actions/core npm module before version 1.2.6,addPath and exportVariable functions communicate with the Actions Runner over stdout by generating a string in a specific format. Workflows that log untrusted data to stdout may invoke these commands, resulting in the path or environment...

4CVSS5.3AI score0.01501EPSS
SaveExploits2References2Affected Software1
Github Security Blog
Github Security Blog
added 2020/10/01 5:16 p.m.50 views

Environment Variable Injection in GitHub Actions

Impact The @actions/core npm module addPath and exportVariable functions communicate with the Actions Runner over stdout by generating a string in a specific format. Workflows that log untrusted data to stdout may invoke these commands, resulting in the path or environment variables being modifie...

5CVSS3.7AI score0.01501EPSS
SaveExploits2References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:0 a.m.30 views

openSUSE Security Update : nss-201112 (openSUSE-SU-2012:0030-1) (BEAST)

The Mozilla NSS libraries were updated to version 3.13.1 to fix various bugs and security problems. Following security issues were fixed : - SSL 2.0 is disabled by default - A defense against the SSL 3.0 and TLS 1.0 CBC chosen plaintext attack demonstrated by Rizzo and Duong CVE-2011-3389 is...

7.1CVSS6.9AI score0.73327EPSS
SaveExploits5References5
Rows per page
Query Builder