Lucene search
K

840 matches found

CNNVD
CNNVD
added 2026/04/11 12:0 a.m.1 views

Labcenter Electronics Proteus 缓冲区错误漏洞

Labcenter Electronics Proteus is an electronic engineering software developed by the British company Labcenter, used for circuit design and embedded system simulation. Labcenter Electronics Proteus has a buffer error vulnerability, which stems from insufficient validation of the data provided by...

7.8CVSS7.5AI score0.00069EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/04/06 12:0 a.m.3 views

(0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Labcenter Electronics Proteus. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.2AI score0.00069EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.2 views

PT-2026-30671

Name of the Vulnerable Software and Affected Versions Labcenter Electronics Proteus affected versions not specified Description A flaw exists in the parsing of PDSPRJ files, potentially leading to an out-of-bounds write, which could result in remote code execution. The issue was discovered by...

7.8CVSS7.4AI score0.00069EPSS
Exploits0References8
Zero Day Initiative
Zero Day Initiative
added 2026/04/06 12:0 a.m.3 views

(0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Labcenter Electronics Proteus. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.2AI score0.00069EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.4 views

PT-2026-30672

Name of the Vulnerable Software and Affected Versions Labcenter Proteus affected versions not specified Description A crafted PDSPRJ file can trigger an out-of-bounds write in Labcenter Proteus file processing, potentially leading to memory corruption and remote code execution. The vendor has...

7.8CVSS7.5AI score0.00069EPSS
Exploits0References7
Zero Day Initiative
Zero Day Initiative
added 2026/04/06 12:0 a.m.2 views

(0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Labcenter Electronics Proteus. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.2AI score0.00055EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.1 views

PT-2026-30670

Name of the Vulnerable Software and Affected Versions Labcenter Electronics Proteus affected versions not specified Description A flaw exists in the parsing of PDSPRJ files, leading to an out-of-bounds write that can result in remote code execution. The issue was discovered by Andrea Micalizzi...

7.8CVSS7.4AI score0.00069EPSS
Exploits0References10
Vulnrichment
Vulnrichment
added 2026/04/02 7:56 p.m.1 views

CVE-2023-7343 Belden Industrial HiVision Arbitrary Code Execution via Malicious Project File

Hirschmann Industrial HiVision versions 05.0.00 through 08.3.01 prior to 08.3.02 contain an arbitrary code execution vulnerability triggered when an administrator opens a maliciously crafted project file. Successful exploitation allows the attacker to execute code in the context of the HiVision...

8.5CVSS6.4AI score0.00002EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/03/26 3:1 p.m.3 views

CVE-2026-1286

CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote code execution on workstation when an admin authenticated user opens a malicious project file...

7CVSS6.5AI score0.00601EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 2:59 p.m.3 views

CVE-2026-2273

CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability exist that could cause execution of untrusted commands on the engineering workstation which could result in a limited compromise of the workstation and a potential loss of Confidentiality, Integrity and Availability of...

7.2CVSS6AI score0.00034EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/18 12:0 a.m.3 views

Openapi to Java Records Mustache Templates 输入验证错误漏洞

Openapi to Java Records Mustache Templates is a record-generation tool developed by Christopher Molin. Versions of Openapi to Java Records Mustache Templates prior to 5.5.1 had a vulnerability related to input validation errors. This vulnerability stemmed from the possibility of the parent POM fi...

2.3CVSS6AI score0.00128EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/03/11 1:19 p.m.2 views

CVE-2026-22614

The encryption mechanism used in Eaton's EasySoft project file was insecure and susceptible to brute force attacks, an attacker with access to this file and the local host machine could potentially read the sensitive information stored and tamper with the project file. This security issue has bee...

6.1CVSS5.8AI score0.0001EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/10 6:31 p.m.2 views

EUVD-2026-10571

CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability exist that could cause execution of untrusted commands on the engineering workstation which could result in a limited compromise of the workstation and a potential loss of Confidentiality, Integrity and Availability of...

7.2CVSS5.9AI score0.00034EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/10 6:31 p.m.3 views

EUVD-2026-10572

CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability exist that could cause execution of untrusted commands on the engineering workstation which could result in a limited compromise of the workstation and a potential loss of Confidentiality, Integrity and Availability of...

7.2CVSS5.9AI score0.00034EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/10 6:31 p.m.1 views

EUVD-2026-10491

The encryption mechanism used in Eaton's EasySoft project file was insecure and susceptible to brute force attacks, an attacker with access to this file and the local host machine could potentially read the sensitive information stored and tamper with the project file. This security issue has bee...

6.1CVSS5.8AI score0.0001EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/10 6:31 p.m.3 views

EUVD-2026-10566

CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote code execution on workstation when an admin authenticated user opens a malicious project file...

7CVSS6.4AI score0.00601EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/10 6:31 p.m.3 views

EUVD-2026-10565

CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote code execution on workstation when an admin authenticated user opens a malicious project file...

7CVSS6.4AI score0.00601EPSS
Exploits0References2
NVD
NVD
added 2026/03/10 6:18 p.m.2 views

CVE-2026-2273

CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability exist that could cause execution of untrusted commands on the engineering workstation which could result in a limited compromise of the workstation and a potential loss of Confidentiality, Integrity and Availability of...

7.2CVSS0.00034EPSS
Exploits0References1
NVD
NVD
added 2026/03/10 6:18 p.m.1 views

CVE-2026-1286

CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote code execution on workstation when an admin authenticated user opens a malicious project file...

7CVSS0.00601EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/10 5:18 p.m.1 views

CVE-2026-2273

CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability exist that could cause execution of untrusted commands on the engineering workstation which could result in a limited compromise of the workstation and a potential loss of Confidentiality, Integrity and Availability of...

7.2CVSS5.9AI score0.00034EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder