CVE-2023-28830

A vulnerability has been identified in JT2Go All versions V14.2.0.5, Solid Edge SE2022 All versions V222.0 Update 13, Solid Edge SE2023 All versions V223.0 Update 4, Teamcenter Visualization V13.2 All versions V13.2.0.15, Teamcenter Visualization V13.3 All versions V13.3.0.11, Teamcenter...

CVE-2023-28830

CVE-2023-28830 affects Siemens JT2Go and related Solid Edge/Teamcenter Visualization products. A use-after-free vulnerability may be triggered while parsing specially crafted ASM files, potentially allowing code execution in the current process. Affected versions: JT2Go <14.2.0.5; Solid Edge S...

CVE-2023-28830: Use After Free

A vulnerability has been identified in JT2Go All versions V14.2.0.5, Solid Edge SE2022 All versions V222.0 Update 13, Solid Edge SE2023 All versions V223.0 Update 4, Teamcenter Visualization V13.2 All versions V13.2.0.15, Teamcenter Visualization V13.3 All versions V13.3.0.11, Teamcenter...

How Attack Surface Management Supports Continuous Threat Exposure Management

According to Forrester, External Attack Surface Management EASM emerged as a market category in 2021 and gained popularity in 2022. In a different report, Gartner concluded that vulnerability management vendors are expanding their offerings to include Attack Surface Management ASM for a suite of...

PT-2023-22641 · Unknown +1 · Bbcode.Asm +2

Name of the Vulnerable Software and Affected Versions: AsmBB version 2.9.1 Description: The issue is related to multiple cross-site scripting XSS vulnerabilities. These vulnerabilities were found in the MiniMag.asm and bbcode.asm libraries. Recommendations: For AsmBB version 2.9.1, consider...

AsmBB 跨站脚本漏洞

AsmBB is johnfound open source a modern web forum engine . AsmBB v2.9.1 version of a security vulnerability , the vulnerability stems from MiniMag.asm and bbcode.asm inventory in the security problem , resulting in cross-site scripting XSS...

AZL-25934 CVE-2022-44370 affecting package nasm for versions less than 2.16-1

NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856...

CVE-2022-44370

NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856...

CVE-2022-44370: Out-of-bounds Write

NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856...

CVE-2022-44370

CVE-2022-44370 affects NASM v2.16, with a heap buffer overflow in the quote_for_pmake() function (asm/nasm.c:856). Connected advisories (Gentoo GLSA-202312-09 and EulerOS-SA entries) reference this vulnerability, and vendor advisories suggest upgrading NASM to a fixed release (Gentoo: >=nasm-2...

K30425568: Overview of F5 vulnerabilities (October 2022)

Security Advisory Description On October 19, 2022, F5 announced the following security issues. This document is intended to serve as an overview of these vulnerabilities and security exposures to help determine the impact to your F5 devices. You can find the details of each issue in the associate...

K22843911: F5 Path MTU Discovery vulnerability CVE-2015-7759

Security Advisory Description BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 12.0.0 before HF1, when the TCP profile for a virtual server is configured with Congestion Metrics Cache enabled, allow remote attackers to cause a denial of service Traffic Management Microkernel TM...

K29149494: iControl REST vulnerability CVE-2019-6637

Security Advisory Description Application logic abuse of ASM REST endpoints can lead to instability of BIG-IP system. Exploitation of this issue causes excessive memory consumption which results in the Linux kernel triggering OOM killer on arbitrary processes. The attack requires an authenticated...

K04280042: BIG-IP ASM vulnerability CVE-2019-6650

Security Advisory Description F5 BIG-IP ASM may expose sensitive information and allow the system configuration to be modified when using non-default settings. CVE-2019-6650 Impact The vulnerability is only present on multi-bladed systems VIPRION with BIG-IP ASM provisioned, on the following...

K11830089: BIG-IP Advanced WAF and ASM iControl REST vulnerability CVE-2022-41617

Security Advisory Description When the F5 BIG-IP Advanced WAF or BIG-IP ASM module is provisioned, an authenticated remote code execution vulnerability exists in the BIG-IP iControl REST interface. CVE-2022-41617 Impact On systems deployed in Standard or Appliance mode, this vulnerability may all...

K10366: BIND vulnerability - CVE-2009-0696

Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of F5...

K02694732: BIG-IP Advanced WAF and ASM bd vulnerability CVE-2022-41691

Security Advisory Description When an F5 BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. CVE-2022-41691 Impact Traffic is disrupted while the bd process restarts. This vulnerability allows a remote...

K06440657: BIG-IP Advanced WAF and ASM iControl REST vulnerability CVE-2021-23001

Security Advisory Description The upload functionality in BIG-IP Advanced WAF and ASM allows an authenticated user to upload files to the BIG-IP system using a call to an undisclosed iControl REST endpoint. CVE-2021-23001 Impact An authenticated malicious user can upload malicious files to use in...

K80945213: BIG-IP ASM and F5 Advanced WAF attack signature check failure security exposure

Security Advisory Description A BIG-IP ASM and F5 Advanced Web Application Firewall Advanced WAF attack signature check may fail to detect and block certain GET requests when cross-site request forgery CSRF protection is enabled. Impact Attackers may be able to bypass BIG-IP ASM and Advanced WAF...

K18570111: BIG-IP ASM and Advanced WAF WebSocket vulnerability CVE-2021-23010

Security Advisory Description When the BIG-IP ASM/Advanced WAF system processes WebSocket requests with JSON payloads using the default JSON content profile in the ASM security policy, the BIG-IP ASM bd process may produce a core file. CVE-2021-23010 Impact When this vulnerability is exploited, t...