Lucene search
K

413 matches found

CNVD
CNVD
added 2023/10/11 12:0 a.m.18 views

Siemens Parasolid Stack Buffer Overflow Vulnerability

Siemens Parasolid is a 3D geometric modeling tool that supports a variety of techniques including solid modeling, direct editing and free-form surface/drawing modeling. A stack buffer overflow vulnerability exists in Siemens Parasolid due to a stack overflow vulnerability contained in an affected...

7.8CVSS7.7AI score0.00228EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/10/03 12:0 a.m.5 views

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to the execution of operations beyond the buffer boundaries in memory, allowing a perpetrator to execute arbitrary code.

The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00252EPSS
Exploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:0 a.m.2 views

The vulnerability of Parasolid’s 3D geometric modeling tool, related to data writing to a buffer, allows a malicious actor to execute arbitrary code.

The vulnerability of Parasolid’s 3D geometric modeling tool lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute malicious code...

7.8CVSS7.7AI score0.00206EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/22 12:0 a.m.4 views

The vulnerability of Parasolid’s 3D geometric modeling tool and the Teamcenter Visualization product lifecycle management system allows a hacker to execute arbitrary code.

The vulnerability of Parasolid’s 3D geometric modeling tool and the Teamcenter Visualization product lifecycle management system lies in the reading of data outside the buffer in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code...

7.8CVSS7.7AI score0.00195EPSS
Exploits0References2Affected Software2
OpenVAS
OpenVAS
added 2023/09/16 12:0 a.m.8 views

Fedora: Security Advisory for rubygem-activemodel (FEDORA-2023-4f0bb4ff5e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
Fedora
Fedora
added 2023/09/15 7:4 p.m.12 views

[SECURITY] Fedora 39 Update: rubygem-activemodel-7.0.7.2-1.fc39

A toolkit for building modeling frameworks like Active Record. Rich support for attributes, callbacks, validations, serialization, internationalization, and testing...

7.1AI score
Exploits0
CNVD
CNVD
added 2023/09/15 12:0 a.m.14 views

Siemens Spectrum Power 7 Local Elevation of Privilege Vulnerability

Spectrum Power 7 provides the essential components of SCADA, communications and data modeling for control and monitoring systems. Application suites can be added to optimize network and generation management in all areas of energy management. A local elevation of privilege vulnerability exists in...

8.2CVSS7.3AI score0.0015EPSS
Exploits0References1
CNVD
CNVD
added 2023/09/14 12:0 a.m.25 views

Siemens Parasolid Out-of-Bounds Write Vulnerability (CNVD-2023-69813)

Siemens Parasolid is a 3D geometric modeling tool that supports a variety of techniques including solid modeling, direct editing and free-form surface/drawing modeling. An out-of-bounds write vulnerability exists in Siemens Parasolid, which can be exploited by an attacker to execute code in the...

7.8CVSS7.2AI score0.00226EPSS
Exploits0References1
CNVD
CNVD
added 2023/09/14 12:0 a.m.17 views

Siemens Parasolid Out-of-Bounds Write Vulnerability (CNVD-2023-69812)

Siemens Parasolid is a 3D geometric modeling tool that supports a variety of techniques including solid modeling, direct editing and free-form surface/drawing modeling. An out-of-bounds write vulnerability exists in Siemens Parasolid, which can be exploited by an attacker to execute code in the...

7.8CVSS7.2AI score0.00206EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/09/12 12:0 a.m.4 views

Siemens Parasolid 缓冲区错误漏洞

Siemens Parasolid is a 3D geometric modeling tool that supports a variety of techniques including solid modeling, direct editing and free-form surface/drawing modeling. An out-of-bounds write vulnerability exists in Siemens Parasolid, which can be exploited by an attacker to execute code in the...

7.8CVSS7.5AI score0.00226EPSS
Exploits0References4
Imperva Blog
Imperva Blog
added 2023/09/11 10:47 p.m.13 views

How to Predict Customer Churn Using SQL Pattern Detection

Introduction to SQLs MATCHRECOGNIZE Clause SQL is a great way to perform analysis on your data. It is very common and supported by many database engines including big data solutions. SQL is used in many cases to analyze data in our data lake. However, when it comes to pattern detection, SQL...

7.3AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2023/09/11 12:0 a.m.2 views

The vulnerability of Parasolid’s 3D geometric modeling tool and the Teamcenter Visualization product lifecycle management system allows a hacker to execute arbitrary code.

The vulnerability of Parasolid’s 3D geometric modeling tool and the Teamcenter Visualization product lifecycle management system lies in the handling of the zero pointer. Exploiting this vulnerability could allow attackers to execute arbitrary code...

7.8CVSS7.5AI score0.00189EPSS
Exploits0References2Affected Software2
Talos Blog
Talos Blog
added 2023/09/07 12:0 p.m.19 views

Cybercriminals target graphic designers with GPU miners

Cybercriminals are abusing Advanced Installer, a legitimate Windows tool used for creating software packages, to drop cryptocurrency-mining malware on infected machines. This activity has been ongoing since at least November 2021. The attacker uses Advanced Installer to package other legitimate...

7.9AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2023/09/04 12:0 a.m.2 views

The vulnerability of Parasolid’s 3D geometric modeling tool and Teamcenter Visualization’s product lifecycle management system lies in their ability to distribute resources indefinitely, allowing attackers to trigger service failures.

The vulnerability of Parasolid’s 3D geometric modeling tool and the Teamcenter Visualization product lifecycle management system lies in the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.6CVSS5.9AI score0.0018EPSS
Exploits0References4Affected Software2
Positive Technologies
Positive Technologies
added 2023/08/14 12:0 a.m.4 views

PT-2023-5922 · Sap · Sap Powerdesigner Client

Name of the Vulnerable Software and Affected Versions: SAP PowerDesigner Client version 16.7 Description: The issue is related to the import function of BPMN files in the Business Process Modeling BPM module of the SAP PowerDesigner enterprise architecture modeling tool. It does not sufficiently...

7.8CVSS7.3AI score0.008EPSS
Exploits0References8
CNVD
CNVD
added 2023/08/14 12:0 a.m.20 views

Buffer Overflow Vulnerability in Multiple Siemens Products (CNVD-2024-13810)

Siemens JT Open Toolkit Siemens JTTK is a C++ Application Programming Interface API from Siemens, Germany, providing support for 64-bit application development on Microsoft Windows, Linux and MacOS. It provides support for 64-bit application development on Microsoft Windows, Linux, and MacOS.JT i...

7.8CVSS7.5AI score0.00202EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/08/11 12:0 a.m.6 views

The vulnerability of Cobalt Ashlar-Vellum’s software for parametric automated design and 3D modeling lies in the ability to write data beyond the buffer memory limit, allowing an attacker to execute arbitrary code.

The vulnerability of the Cobalt Ashlar-Vellum software for parametric automated design and 3D modeling lies in the storage of data beyond the buffer limits in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.00401EPSS
Exploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/08/10 11:15 p.m.3 views

CVE-2023-40235

An NTLM Hash Disclosure was discovered in ArchiMate Archi before 5.1.0. When parsing the XMLNS value of an ArchiMate project file, if the namespace does not match the expected ArchiMate URL, the parser will access the provided resource. If the provided resource is a UNC path pointing to a share...

6.5CVSS5.8AI score0.00702EPSS
Exploits1References5
NVD
NVD
added 2023/08/10 11:15 p.m.21 views

CVE-2023-40235

An NTLM Hash Disclosure was discovered in ArchiMate Archi before 5.1.0. When parsing the XMLNS value of an ArchiMate project file, if the namespace does not match the expected ArchiMate URL, the parser will access the provided resource. If the provided resource is a UNC path pointing to a share...

6.5CVSS6.5AI score0.00702EPSS
Exploits1References4
OSV
OSV
added 2023/08/10 11:15 p.m.13 views

CVE-2023-40235

An NTLM Hash Disclosure was discovered in ArchiMate Archi before 5.1.0. When parsing the XMLNS value of an ArchiMate project file, if the namespace does not match the expected ArchiMate URL, the parser will access the provided resource. If the provided resource is a UNC path pointing to a share...

6.5CVSS7AI score
Exploits0References4
Rows per page
Query Builder