Lucene search
+L

311 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/10/19 12:0 a.m.18 views

Siemens Tecnomatix Plant Simulation STP File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.8AI score0.00226EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/12 11:15 p.m.32 views

Input validation

An Improper Validation of Specified Quantity in Input vulnerability in the Layer-2 control protocols daemon l2cpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker who sends specific LLDP packets to cause a Denial of ServiceDoS. This issue occurs when...

3.3CVSS6.5AI score0.0027EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2023/10/12 10:56 p.m.33 views

CVE-2023-36839 Junos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are received

An Improper Validation of Specified Quantity in Input vulnerability in the Layer-2 control protocols daemon l2cpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker who sends specific LLDP packets to cause a Denial of ServiceDoS. This issue occurs when...

6.5CVSS6.7AI score0.0027EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/10/12 10:56 p.m.21 views

CVE-2023-36839 Junos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are received

An Improper Validation of Specified Quantity in Input vulnerability in the Layer-2 control protocols daemon l2cpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker who sends specific LLDP packets to cause a Denial of ServiceDoS. This issue occurs when...

6.5CVSS7AI score0.0027EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/19 12:0 a.m.31 views

Autodesk AutoCAD STP File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ST...

7.8CVSS6.8AI score0.00254EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/08/04 12:0 a.m.22 views

Siemens Solid Edge Viewer STP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00226EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/14 6:15 p.m.11 views

CVE-2023-36849

An Improper Check or Handling of Exceptional Conditions vulnerability in the Layer-2 control protocols daemon l2cpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a Denial of Service DoS. When a malformed LLDP packet is received, l2cpd will...

6.5CVSS5.8AI score0.00303EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/14 6:15 p.m.34 views

CVE-2023-36849

An Improper Check or Handling of Exceptional Conditions vulnerability in the Layer-2 control protocols daemon l2cpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a Denial of Service DoS. When a malformed LLDP packet is received, l2cpd will...

6.5CVSS0.00303EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/14 6:15 p.m.33 views

Input validation

An Improper Check or Handling of Exceptional Conditions vulnerability in the Layer-2 control protocols daemon l2cpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a Denial of Service DoS. When a malformed LLDP packet is received, l2cpd will...

3.3CVSS6.5AI score0.00303EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2023/07/14 5:58 p.m.15 views

CVE-2023-36849 Junos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is received

An Improper Check or Handling of Exceptional Conditions vulnerability in the Layer-2 control protocols daemon l2cpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a Denial of Service DoS. When a malformed LLDP packet is received, l2cpd will...

6.5CVSS7.2AI score0.00303EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/07/14 5:58 p.m.41 views

CVE-2023-36849 Junos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is received

An Improper Check or Handling of Exceptional Conditions vulnerability in the Layer-2 control protocols daemon l2cpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a Denial of Service DoS. When a malformed LLDP packet is received, l2cpd will...

6.5CVSS6.7AI score0.00303EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/11 10:15 a.m.30 views

CVE-2023-37376

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0008, Tecnomatix Plant Simulation V2302 All versions V2302.0002. The affected application contains a type confusion vulnerability while parsing STP files. This could allow an attacker to execute code in th...

7.8CVSS7.6AI score0.00226EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/11 10:15 a.m.35 views

CVE-2023-37374

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0008, Tecnomatix Plant Simulation V2302 All versions V2302.0002. The affected application is vulnerable to stack-based buffer overflow while parsing specially crafted STP files. This could allow an attacke...

7.8CVSS7.8AI score0.00229EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/11 10:15 a.m.29 views

Stack overflow

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0008, Tecnomatix Plant Simulation V2302 All versions V2302.0002. The affected application is vulnerable to stack-based buffer overflow while parsing specially crafted STP files. This could allow an attacke...

4.4CVSS7.8AI score0.00229EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/07/11 10:15 a.m.27 views

Type confusion

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0008, Tecnomatix Plant Simulation V2302 All versions V2302.0002. The affected application contains a type confusion vulnerability while parsing STP files. This could allow an attacker to execute code in th...

4.4CVSS7.6AI score0.00226EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/07/11 9:7 a.m.35 views

CVE-2023-37376

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0008, Tecnomatix Plant Simulation V2302 All versions V2302.0002. The affected application contains a type confusion vulnerability while parsing STP files. This could allow an attacker to execute code in th...

7.8CVSS7.8AI score0.00226EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/11 9:7 a.m.58 views

CVE-2023-37376

Tecnomatix Plant Simulation is affected by a type confusion vulnerability while parsing STP files in V2201 prior to 0008 and V2302 prior to 0002. The issue could allow code execution in the process context. Mitigations: upgrade to V2201.0008+ or V2302.0002+; temporary workaround is to restrict ac...

7.8CVSS7.5AI score0.00226EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/11 9:7 a.m.13 views

CVE-2023-37374

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0008, Tecnomatix Plant Simulation V2302 All versions V2302.0002. The affected application is vulnerable to stack-based buffer overflow while parsing specially crafted STP files. This could allow an attacke...

7.8CVSS7.4AI score0.00229EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/11 9:7 a.m.65 views

CVE-2023-37374

Summary of CVE-2023-37374 (Tecnomatix Plant Simulation): A stack-based buffer overflow occurs when parsing specially crafted STP files in Tecnomatix Plant Simulation. Affected products/versions are Tecnomatix Plant Simulation V2201 (all versions < V2201.0008) and V2302 (all versions

7.8CVSS7.8AI score0.00229EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/07/11 9:7 a.m.37 views

CVE-2023-37374

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0008, Tecnomatix Plant Simulation V2302 All versions V2302.0002. The affected application is vulnerable to stack-based buffer overflow while parsing specially crafted STP files. This could allow an attacke...

7.8CVSS8AI score0.00229EPSS
SaveExploits0References1
Rows per page
Query Builder