CVE-2026-8594

Text::LineFold versions through 2019.001 for Perl duplicate the output based on the number of special break characters. Text::LineFold splits the input string by specific line break characters such as VT, FF and others into segments, but applies the break function to the entire string, not just t...

Microsoft SQL Server Security Vulnerability

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...

Hengan Weighing Management Information Query Platform 安全漏洞

Hengan Weighing Management Information Query Platform is a weighing management information query platform of China Hengan Hengan Company. A security vulnerability exists in Hengan Weighing Management Information Query Platform version 2019-2021 53.25, which was discovered to contain an SQL...

Dassault Systèmes DELMIA Apriso Log Information Disclosure Vulnerability

Dassault Systèmes DELMIA Apriso is an interactive manufacturing application for digital enterprises from Dassault Systèmes France. A log information disclosure vulnerability exists in Dassault Systèmes DELMIA Apriso versions 2019 through 2024, which stems from the presence of a sensitive...

PT-2024-15920 · Dassault Systèmes · Delmia Apriso

Name of the Vulnerable Software and Affected Versions: DELMIA Apriso versions Release 2019 through Release 2024 Description: An issue is affecting the software where sensitive information is inserted into log files. Recommendations: For DELMIA Apriso versions Release 2019 through Release 2024, at...

CVE-2022-25797

A maliciously crafted PDF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to dereference for a write beyond the allocated buffer while parsing PDF files. The vulnerability exists because the application fails to handle a crafted PDF file, which causes an unhandled exception...

PT-2022-11194 · Autodesk · Autodesk Inventor

Name of the Vulnerable Software and Affected Versions: Autodesk Inventor versions 2019 through 2022 Description: The issue is related to an Information Disclosure vulnerability when parsing JT files, which, in conjunction with other vulnerabilities, may lead to code execution through maliciously...

afterburn (=4.1.0), aoaddons (>=0.1.1 <=0.1.6) +50 more potentially affected by CVE-2019-25054 via pnet (>=0.12.0 <=0.26.0)

pnet CARGO version =0.12.0, =0.1.1, =0.0.2, =0.6.0, =0.1.0, =1.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.3.1, =0.4.0 and more Source cves: CVE-2019-25054 Source advisory: OSV:GHSA-24G6-5RX7-58WJ...

Microsoft System Center Operations Manager 信息泄露漏洞

Microsoft System Center Operations Manager is a large-scale monitoring and management software for corporate environments from Microsoft. Formerly known as MOM Microsoft Operations Manager, the software is primarily used to monitor IT systems and provide monitoring support for distributed...

CVE-2021-40697 Adobe FrameMaker PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Framemaker versions 2019 Update 8 and earlier and 2020 Release Update 2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this...

CVE-2021-39829 Adobe FrameMaker PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Framemaker versions 2019 Update 8 and earlier and 2020 Release Update 2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mu...

CVE-2021-39832

CVE-2021-39832 affects Adobe FrameMaker 2019 Update 8 and earlier and 2020 Release Update 2 and earlier. The vulnerability is a memory corruption issue triggered by processing a malicious PDF file, enabling arbitrary code execution in the user’s context when opened (requires user interaction). Se...

Autodesk Navisworks 缓冲区错误漏洞

Autodesk Navisworks, a 3D model review software for architecture, engineering and construction, is vulnerable to an out-of-bounds read vulnerability in Autodesk Navisworks versions 2019, 2020, 2021, 2022. An attacker can exploit the vulnerability to execute arbitrary code via specially crafted PD...

PT-2021-11174 · Acronis · Acronis True Image

Name of the Vulnerable Software and Affected Versions: Acronis True Image versions 2019 update 1 through 2021 update 1 Description: The issue allows local privilege escalation due to an insecure XPC service configuration. Recommendations: For Acronis True Image versions 2019 update 1 through 2021...

CVE-2020-7083

An intager overflow vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to denial of service of the application...

CVE-2020-3785

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2020-3784

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2020-3744

Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

ffjpeg null pointer dereference vulnerability (CNVD-2020-04084)

ffjpeg is a JPEG encoder/decoder. A null pointer dereference vulnerability exists in bitstrtell in the bitstr.c file in ffjpeg 2019-08-21 and earlier versions. The vulnerability stems from an improper design or implementation during code development for a networked system or product. An attacker...

PT-2019-16923 · Ibm · Ibm Cloud Private

Name of the Vulnerable Software and Affected Versions: IBM Cloud Private versions 2.1.0, 3.1.0, 3.1.1, 3.1.2 Description: The issue allows an attacker to execute malicious and unauthorized actions by exploiting cross-site request forgery. This could be done by transmitting malicious actions from ...