Altair HyperView Player H3D File Parsing Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Altair HyperView Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

PT-2022-19661 · Altair · Altair Hyperview Player

Name of the Vulnerable Software and Affected Versions: Altair HyperView Player versions 2021.1.0.27 and prior Description: The issue is related to the use of uninitialized memory during the parsing of H3D files. A DWORD is extracted from an uninitialized buffer, and after sign extension, it is us...

PT-2022-19635 · Altair · Altair Hyperview Player

Name of the Vulnerable Software and Affected Versions: Altair HyperView Player versions 2021.1.0.27 and prior Description: The issue arises from operations on a memory buffer that can read from or write to a memory location outside of the intended boundary of the buffer, initially hitting as a re...

PT-2022-19655 · Altair · Altair Hyperview Player

Name of the Vulnerable Software and Affected Versions: Altair HyperView Player versions 2021.1.0.27 and prior Description: The issue is related to the use of uninitialized memory during the parsing of H3D files. A DWORD is extracted from an uninitialized buffer, and after sign extension, it is us...

Altair HyperView Player H3D File Parsing Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Altair HyperView Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

PT-2022-19667 · Altair · Altair Hyperview Player

Name of the Vulnerable Software and Affected Versions: Altair HyperView Player versions 2021.1.0.27 and prior Description: The issue arises from improper validation of array index during the processing of H3D files. A DWORD value extracted from a file is used as an index to write to a buffer,...

Altair HyperView Player 输入验证错误漏洞

Altair HyperView Player is a standalone 3D viewer from Altair Japan. It is used to share CAE models and simulation results. An input validation error vulnerability exists in Altair HyperView Player that originates from improper validation of an array indexing vulnerability that results in memory...

Altair HyperView Player

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Altair Equipment: HyperView Player Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Use of Uninitialized Resource, Improper Validation of Array Index 2. RISK EVALUATION Successful...

Altair HyperView Player 安全漏洞

Altair HyperView Player is a standalone 3D viewer from Altair Japan. It is used to share CAE models and simulation results. A security vulnerability exists in Altair HyperView Player that originates from uninitialized memory...

Altair HyperView Player 安全漏洞

Altair HyperView Player is a standalone 3D viewer from Altair Japan. It is used to share CAE models and simulation results. A security vulnerability exists in Altair HyperView Player that originates from uninitialized memory...

Altair HyperView Player 缓冲区错误漏洞

Altair HyperView Player is a standalone 3D viewer from Altair Japan. It is used to share CAE models and simulation results. A buffer error vulnerability exists in Altair HyperView Player that originates from allowing memory locations outside of the expected boundaries of the buffer to be read or...

The vulnerability of the “id” parameter in the “team.php”, “player.php”, and “club.php” scripts of the KandNconcepts Club CMS allows a hacker to perform XSS attacks.

The vulnerability of the “id” parameter in the “team.php”, “player.php”, and “club.php” scripts of the KandNconcepts Club CMS exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

CVE-2022-30579

The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows a low privileged attacker with network access to execute blind Server Side Request Forgery SSRF on the affect...

CVE-2022-30579

The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows a low privileged attacker with network access to execute blind Server Side Request Forgery SSRF on the affect...

PT-2022-7418 · Mplayer +3 · Mplayer +3

Name of the Vulnerable Software and Affected Versions: MPlayer versions prior to SVN-r38374-13.0.1 Description: The issue is related to a Divide By Zero vulnerability via the config function of llibmpcodecs/vf scale.c and the demux open avi function. This vulnerability may allow an attacker to...

Denial Of Service (DoS)

minetest is vulnerable to Denial Of Service DoS. An attacker can crash the application by providing a malicious script as the library sets the global setting that controls the luna script while in single player mode...

DEBIAN-CVE-2022-35978

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

CVE-2022-35978

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

Design/Logic Flaw

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

UBUNTU-CVE-2022-35978

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...