Lucene search
K

413 matches found

CNNVD
CNNVD
added 2024/12/10 12:0 a.m.6 views

Siemens Parasolid 缓冲区错误漏洞

Siemens Parasolid is a 3D geometric modeling tool that supports a variety of techniques including solid modeling, direct editing and free-form surface/drawing modeling. An out-of-bounds write vulnerability exists in Siemens Parasolid, which can be exploited by an attacker to execute code in the...

7.8CVSS6AI score0.00176EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:0 a.m.3 views

The vulnerabilities of the 3D viewing tool JTJT2Go, the Product Lifecycle Management system Teamcenter Visualization, and the 3D geometric modeling tool Parasolid allow a perpetrator to execute arbitrary code.

The vulnerability of the 3D viewing tool JT, JT2Go, the product lifecycle management system Teamcenter Visualization, and the 3D geometric modeling tool Parasolid relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code using...

7.8CVSS6.2AI score0.00279EPSS
Exploits0References5Affected Software3
OSV
OSV
added 2024/11/15 3:15 p.m.3 views

CVE-2023-20154

A vulnerability in the external authentication mechanism of Cisco Modeling Labs could allow an unauthenticated, remote attacker to access the web interface with administrative privileges. This vulnerability is due to the improper handling of certain messages that are returned by the associated...

8.1CVSS5.8AI score0.00895EPSS
Exploits0References1
NVD
NVD
added 2024/11/15 3:15 p.m.11 views

CVE-2023-20154

A vulnerability in the external authentication mechanism of Cisco Modeling Labs could allow an unauthenticated, remote attacker to access the web interface with administrative privileges. This vulnerability is due to the improper handling of certain messages that are returned by the associated...

9.1CVSS0.00895EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/15 2:54 p.m.20 views

CVE-2023-20154 Cisco Modeling Labs External Authentication Bypass Vulnerability

A vulnerability in the external authentication mechanism of Cisco Modeling Labs could allow an unauthenticated, remote attacker to access the web interface with administrative privileges. This vulnerability is due to the improper handling of certain messages that are returned by the associated...

9.1CVSS0.00895EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/15 2:54 p.m.11 views

CVE-2023-20154 Cisco Modeling Labs External Authentication Bypass Vulnerability

A vulnerability in the external authentication mechanism of Cisco Modeling Labs could allow an unauthenticated, remote attacker to access the web interface with administrative privileges. This vulnerability is due to the improper handling of certain messages that are returned by the associated...

9.1CVSS7.2AI score0.00895EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/15 12:0 a.m.3 views

Cisco Modeling Labs 安全漏洞

Cisco Modeling Labs is a software application from Cisco, Inc. A local network simulation tool that runs on workstations and servers. A security vulnerability exists in Cisco Modeling Labs that stems from the improper handling of certain messages returned by the associated external authentication...

9.1CVSS7.1AI score0.00895EPSS
Exploits0References1
Wiz blog
Wiz blog
added 2024/10/23 2:0 p.m.25 views

Protect your Okta identities with Wiz

Wiz extends support to Okta with identity modeling on the Wiz Security Graph, visibility, risk assessment, and real-time threat detection for your Okta environment...

7.2AI score
Exploits0
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.273 views

SaltStack Salt Master Server Root Key Disclosure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SaltStack Salt Master Server Root Key Disclosure', 'Description' = %q This module exploits unauthenticated access to the prepauthinfo method in t...

9.8CVSS7.4AI score0.96405EPSS
Exploits25
HackRead
HackRead
added 2024/08/22 11:12 a.m.11 views

Transform Your CAD Workflow with Parametric Modeling

Designers and engineers are always searching for tools to speed up their work and create more complex designs.…...

7.3AI score
Exploits0
CNNVD
CNNVD
added 2024/07/09 12:0 a.m.5 views

KNIME Business Hub Security Vulnerability

KNIME Business Hub is KNIME's enterprise software for data science automation, deployment modeling, team collaboration and management workflows. A security vulnerability exists in KNIME Business Hub versions 1.10.0 and 1.10.1 that stems from vulnerability to denial-of-service attacks, which can...

7.1CVSS6.8AI score0.00544EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/07/04 12:0 a.m.3 views

The vulnerability of the yyparse() function in the syntax analyzer and tools for the YANG modeling language Libyang allows a perpetrator to execute arbitrary code or cause service failures.

The vulnerability of the yyparse function in the syntax analyzer and modeling tool of the YANG Libyang language is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures remotely...

10CVSS8AI score0.0279EPSS
Exploits1References9Affected Software3
OSV
OSV
added 2024/06/25 1:29 p.m.6 views

MAL-2024-4473 Malicious code in DotSpatial.Modeling.Forms.Net (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:29 p.m.4 views

Malicious code in DotSpatial.Modeling.Forms.Net (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
The Hacker News
The Hacker News
added 2024/05/13 2:29 p.m.10 views

MITRE Unveils EMB3D: A Threat-Modeling Framework for Embedded Devices

The MITRE Corporation has officially made available a new threat-modeling framework called EMB3D for makers of embedded devices used in critical infrastructure environments. "The model provides a cultivated knowledge base of cyber threats to embedded devices, providing a common understanding of...

7.4AI score
Exploits0
CNNVD
CNNVD
added 2024/05/03 12:0 a.m.2 views

Ashlar Vellum Cobalt 安全漏洞

Ashlar Vellum Cobalt is a parameter-based computer-aided design and 3D modeling program from Ashlar. A security vulnerability exists in Ashlar Vellum Cobalt that stems from the presence of an uncontrolled search path element remote code execution vulnerability that could allow a remote attacker t...

7.8CVSS8.1AI score0.00366EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/05/03 12:0 a.m.3 views

Ashlar Vellum 安全漏洞

Ashlar Vellum is Ashlar's development platform for computer-aided design CAD and 3D modeling software. A security vulnerability exists in Ashlar Vellum that stems from an out-of-bounds write remote code execution vulnerability that could allow a remote attacker to execute arbitrary code on an...

7.8CVSS8.2AI score0.00407EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/05/03 12:0 a.m.3 views

Ashlar Vellum Cobalt 安全漏洞

Ashlar Vellum Cobalt is a parameter-based computer-aided design and 3D modeling program from Ashlar. A security vulnerability exists in Ashlar Vellum Cobalt that stems from the presence of an out-of-bounds write remote code execution vulnerability that could allow a remote attacker to execute...

8.8CVSS7.6AI score0.00763EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/05/03 12:0 a.m.2 views

Ashlar Vellum 安全漏洞

Ashlar Vellum is Ashlar's development platform for computer-aided design CAD and 3D modeling software. A security vulnerability exists in Ashlar Vellum that stems from an out-of-bounds write remote code execution vulnerability that could allow a remote attacker to execute arbitrary code on an...

7.8CVSS8.2AI score0.00401EPSS
Exploits0References2
CNVD
CNVD
added 2024/04/10 12:0 a.m.16 views

Siemens Parasolid Stack Exhaustion Vulnerability

Siemens Parasolid is a 3D geometric modeling tool that supports a variety of techniques including solid modeling, direct editing and free-form surface/drawing modeling. A stack exhaustion vulnerability exists in Siemens Parasolid, which can be exploited to cause a denial of service...

5.5CVSS6.8AI score0.00225EPSS
Exploits0References1
Rows per page
Query Builder