Lucene search
+L

360 matches found

Zero Day Initiative
Zero Day Initiative
•added 2024/02/12 12:00 a.m.•19 views

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ST...

7.8CVSS7.3AI score0.00515EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2024/02/12 12:00 a.m.•39 views

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ST...

7.8CVSS7.3AI score0.00515EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2024/02/12 12:00 a.m.•16 views

Autodesk AutoCAD STP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ST...

7.8CVSS7.2AI score0.00554EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/12 12:00 a.m.•9 views

PT-2024-19681

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description A maliciously crafted STP file, when parsed in ASMIMPORT229A.dll, ASMKERN228A.dll, ASMkern229A.dll, or ASMDATAX228A.dll through Autodesk applications, can lead to a memory corruption...

7.8CVSS6.2AI score0.00515EPSS
SaveExploits0References38
osv_cve
osv_cve
•added 2023/11/23 4:15 a.m.•17 views

CVE-2023-41139

A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

7.8CVSS6.2AI score0.00275EPSS
SaveExploits0References1
NVD
NVD
•added 2023/11/23 4:15 a.m.•37 views

CVE-2023-41139

A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

7.8CVSS0.00275EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/23 4:15 a.m.•30 views

Null pointer dereference

A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

4.3CVSS7.5AI score0.00275EPSS
SaveExploits0References1Affected Software10
CVE
CVE
•added 2023/11/23 3:53 a.m.•80 views

CVE-2023-41139

CVE-2023-41139 affects Autodesk AutoCAD 2023 and 2024, where parsing a malicious STP file can dereference an untrusted pointer, potentially causing code execution in the current process. The vulnerability is tied to the STP parsing path and has been reinforced by multiple advisories and vendor re...

7.8CVSS7.7AI score0.00275EPSS
SaveExploits0References1Affected Software10
Cvelist
Cvelist
•added 2023/11/23 3:53 a.m.•45 views

CVE-2023-41139

A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

8.5AI score0.00275EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/23 12:00 a.m.•5 views

CVE-2023-41139: Untrusted Pointer Dereference

A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

7.8CVSS7.6AI score0.00275EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
•added 2023/10/19 12:00 a.m.•28 views

Siemens Tecnomatix Plant Simulation STP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.8AI score0.00229EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/10/19 12:00 a.m.•25 views

Siemens Tecnomatix Plant Simulation STP File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.8AI score0.00226EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/12 11:15 p.m.•43 views

Input validation

An Improper Validation of Specified Quantity in Input vulnerability in the Layer-2 control protocols daemon l2cpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker who sends specific LLDP packets to cause a Denial of ServiceDoS. This issue occurs when...

3.3CVSS6.5AI score0.00303EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
•added 2023/10/12 10:56 p.m.•23 views

CVE-2023-36839 Junos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are received

An Improper Validation of Specified Quantity in Input vulnerability in the Layer-2 control protocols daemon l2cpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker who sends specific LLDP packets to cause a Denial of ServiceDoS. This issue occurs when...

6.5CVSS7AI score0.00303EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/10/12 10:56 p.m.•45 views

CVE-2023-36839 Junos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are received

An Improper Validation of Specified Quantity in Input vulnerability in the Layer-2 control protocols daemon l2cpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker who sends specific LLDP packets to cause a Denial of ServiceDoS. This issue occurs when...

6.5CVSS6.7AI score0.00303EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/19 12:00 a.m.•38 views

Autodesk AutoCAD STP File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ST...

7.8CVSS6.8AI score0.00275EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/04 12:00 a.m.•35 views

Siemens Solid Edge Viewer STP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00226EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/07/14 6:15 p.m.•19 views

CVE-2023-36849

An Improper Check or Handling of Exceptional Conditions vulnerability in the Layer-2 control protocols daemon l2cpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a Denial of Service DoS. When a malformed LLDP packet is received, l2cpd will...

6.5CVSS5.8AI score0.00303EPSS
SaveExploits0References1
NVD
NVD
•added 2023/07/14 6:15 p.m.•46 views

CVE-2023-36849

An Improper Check or Handling of Exceptional Conditions vulnerability in the Layer-2 control protocols daemon l2cpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a Denial of Service DoS. When a malformed LLDP packet is received, l2cpd will...

6.5CVSS0.00303EPSS
SaveExploits0References1
Prion
Prion
•added 2023/07/14 6:15 p.m.•48 views

Input validation

An Improper Check or Handling of Exceptional Conditions vulnerability in the Layer-2 control protocols daemon l2cpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a Denial of Service DoS. When a malformed LLDP packet is received, l2cpd will...

3.3CVSS6.5AI score0.00303EPSS
SaveExploits0References1Affected Software2
Rows per page
Query Builder