118 matches found
CVE-2023-44438: Uncontrolled Search Path Element
Ashlar-Vellum Argon Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Argon. User interaction is required to exploit this vulnerability in that the target must visit...
Ashlar Vellum Argon security vulnerability
Ashlar Vellum Argon is a CAD and 3D modeling software for Mac and Windows from Ashlar, Inc. A security vulnerability exists in Ashlar Vellum Argon that stems from the presence of an uncontrolled search path element remote code execution vulnerability that could allow a remote attacker to execute...
November 14, 2023—KB5032196 (OS Build 17763.5122) - EXPIRED
November 14, 2023—KB5032196 OS Build 17763.5122 - EXPIRED Applies To Win 10 Ent LTSC 2019 Win 10 IoT Ent LTSC 2019 Windows 10 IoT Core LTSC Windows Server 2019 Note EXPIRATION NOTICE IMPORTANT As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other...
Cobalt Graphite Xenon Argon Lithium Ashlar-Vellum Buffer Overflow
The vulnerability of Cobalt, Graphite, Xenon, Argon, and Lithium Ashlar-Vellum software for parametric automated design and 3D modeling involves reading data beyond the buffer limit in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by introducing specially...
Argon Ashlar-Vellum Code Execution
The vulnerability of the 3D modeling software Argon Ashlar-Vellum is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a hacker to execute arbitrary code...
PT-2023-7085 · Ashlar Vellum · Ashlar-Vellum Argon
Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Argon affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Argon. User interaction is required, as the target must visit a malicious...
Ashlar-Vellum Argon Uncontrolled Search Path Element Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Argon. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
CVE-2023-39427
In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v12 SP0 Build 1204.77, the affected applications lack proper validation of user-supplied data when parsing XE files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code ...
Design/Logic Flaw
In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v12 SP0 Build 1204.77, the affected applications lack proper validation of user-supplied data when parsing XE files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code ...
CVE-2023-39427: Out-of-bounds Write
In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v12 SP0 Build 1204.77, the affected applications lack proper validation of user-supplied data when parsing XE files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code ...
PT-2023-26946 · Ashlar Vellum · Ashlar-Vellum Cobalt +4
Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share version 12 SP0 Build 1204.77 Description: The affected applications lack proper validation of user-supplied data when parsing XE files, which could lead to an out-of-bounds write. ...
Ashlar Incorporated Ashlar-Vellum Buffer Error Vulnerability
Ashlar Incorporated Ashlar-Vellum is the development platform for Ashlar Incorporated's computer-aided design CAD and 3D modeling software. A security vulnerability exists in Ashlar Incorporated Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v12, which stems from a lack of proper...
Argon Dashboard 2 SQL Injection
==================================================================================================================================== | Title : Argon Dashboard 2 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 109.064-bit | |...
Tofino Xenon Security Appliance Cryptographic Bypass
The vulnerability of the Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino lies in bypassing the cryptographic signature verification on a USB drive. Exploiting this vulnerability allows a malicious actor to download any arbitrary image of the embedded software...
Tofino Xenon Security Appliance Buffer Overflow DoS
The vulnerability of the Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures using specially created OPC packets...
Tofino Xenon Security Appliance SSH Code Execution
The vulnerability of the SSH network protocol implementation in the Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino devices is related to the use of strictly encrypted login credentials. Exploiting this vulnerability allows a malicious actor to execute...
MODBUS Protocol Bypass
The vulnerability of the MODBUS protocol implementation in Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino lies in security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions using specially...
Tofino Xenon Security Appliance Code Execution
The vulnerability of the Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by connecting a USB drive containing a specially crafted...
OPC Classic Network Security Bypass
The vulnerability of OPC Classic standard implementations in network interfaces of Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to circumvent existing...
PT-2022-5723
Name of the Vulnerable Software and Affected Versions Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 versions prior to 03.23 Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F20/21 Belden Tofino Xenon Security Appliance affected versions not specified EAGLE 20 Tofino affected...