36 matches found
CVE-2023-49122
A vulnerability has been identified in Solid Edge SE2023 All versions V223.0 Update 10. The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process...
PT-2024-1041 · Siemens · Solid Edge
Name of the Vulnerable Software and Affected Versions: Solid Edge SE2023 versions prior to V223.0 Update 10 Description: The issue is related to a heap-based buffer overflow in memory when parsing specially crafted PAR files. This could allow an attacker to execute arbitrary code in the context o...
PT-2024-1052 · Siemens · Solid Edge
Name of the Vulnerable Software and Affected Versions: Solid Edge SE2023 versions prior to V223.0 Update 10 Description: A vulnerability has been identified in the affected application, which is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker coul...
PT-2023-6955 · Crushftp · Crushftp
Name of the Vulnerable Software and Affected Versions: CrushFTP versions prior to 10.5.1 Description: The issue is related to errors in handling input data in the Object Attribute Handler component of the CrushFTP cross-platform FTP server. Exploitation of this issue may allow a remote attacker t...
SUSE CVE-2010-0886
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...
PT-2023-9268 · Glpi +2 · Glpi +2
Name of the Vulnerable Software and Affected Versions: GLPI versions 10.0.0 through 10.0.5 Description: The issue is related to Cross-site Scripting, where an administrator can store malicious code in help links. This can be exploited by a remote attacker to save arbitrary code in the help links...
Microsoft Exchange Server Tampering Security Bypass Vulnerability
Microsoft Exchange Server 2016 is a suite of email service programs from Microsoft USA, which provides email access, storage, forwarding, voicemail, email filtering and screening, and other features. A tamper security bypass vulnerability exists in Microsoft Exchange Server 2016 Cumulative Update...
CVE-2016-0030
Cross-site scripting XSS vulnerability in Outlook Web Access OWA in Microsoft Exchange Server 2013 PS1, 2013 Cumulative Update 10, and 2016 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Exchange Spoofing Vulnerability."...
PT-2014-2050 · Adobe · Reader +1
Name of the Vulnerable Software and Affected Versions: Adobe Reader and Acrobat versions 10.x through 10.1.8 Adobe Reader and Acrobat versions 11.x through 11.0.05 Description: The issue is related to resource management errors in Adobe Acrobat and Adobe Reader. It allows a remote attacker to cau...
JDK unspecified vulnerability in Deployment component
Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 10 through 6 Update 23 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related t...
VulnCheck KEV: CVE-2010-0886
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...
Java Web Start BasicService displays local files in the browser
Unspecified vulnerability in the BasicService for Java Web Start JWS and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows untrusted downloaded applications to cause local files to be displayed in the brows...
OpenJDK Denial-Of-Service in kerberos authentication (6588160)
Unspecified vulnerability in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service OS resource consumption via...
OpenJDK UTF-8 decoder accepts non-shortest form sequences (4486841)
Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for other applications...
Security Vulnerability with JRE fonts processing may allow Elevation of Privileges (6450319)
Buffer overflow in Sun Java Runtime Environment JRE in JDK and JRE 5.0 before Update 10, SDK and JRE 1.4.x before 1.4.218, and SDK and JRE 1.3.x before 1.3.123 allows context-dependent attackers to gain privileges via unspecified vectors related to font processing...
