Lucene search
+L

6528 matches found

CVE
CVE
•added 2022/10/11 12:00 a.m.•71 views

CVE-2022-41179

SAP 3D Visual Enterprise Author (v9) is affected by CVE-2022-41179 due to a parsing flaw in JT files (.jt, JtTranslator.exe). The issue can trigger remote code execution via a crafted JT payload that causes a write past the end of an allocated buffer (out-of-bounds write) or a reuse of a dangling...

7.8CVSS7.8AI score0.0054EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/10/11 12:00 a.m.•77 views

CVE-2022-41181

CVE-2022-41181 affects SAP 3D Visual Enterprise Author (v9); the issue stems from PDFPublishing.dll parsing, enabling an out-of-bounds condition in manipulated PDF files that can cause the application to crash or disclose information. ZDI documents remote information-disclosure exploitation requi...

5.5CVSS5.4AI score0.00205EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/10/11 12:00 a.m.•54 views

CVE-2022-41170

Due to lack of proper memory management, when a victim opens a manipulated CATIA4 Part .model, CatiaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based...

8.2AI score0.0054EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/10/11 12:00 a.m.•15 views

SAP 3D Visual Enterprise Author 缓冲区错误漏洞

SAP 3D Visual Enterprise Author is a desktop application from SAP Germany for managing 2D, 3D, animation, video and audio assets. SAP 3D Visual Enterprise Author suffers from a buffer overflow vulnerability that stems from a lack of proper memory management and can be exploited by attackers to Th...

5.5CVSS7.1AI score0.00253EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2022/10/11 12:00 a.m.•49 views

CVE-2022-41172

Due to lack of proper memory management, when a victim opens a manipulated AutoCAD .dxf, TeighaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflo...

8.2AI score0.0054EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/10/11 12:00 a.m.•19 views

PT-2022-25001 · Sap · Sap 3D Visual Enterprise Author

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to improper memory management. When a victim opens a manipulated SolidWorks Part .sldprt file in SAP 3D Visual Enterprise Author, it can trigger Remote Code Execution...

7.8CVSS7.8AI score0.00556EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2022/10/11 12:00 a.m.•50 views

CVE-2022-41166

Due to lack of proper memory management, when a victim opens manipulated Wavefront Object .obj, ObjTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

5.8AI score0.00253EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/10/11 12:00 a.m.•15 views

SAP 3D Visual Enterprise Author 缓冲区错误漏洞

SAP 3D Visual Enterprise Author is a desktop application for managing 2D, 3D, animation, video and audio assets from SAP. A buffer overflow vulnerability exists in SAP 3D Visual Enterprise Author version 9, which stems from a lack of proper memory management and can be exploited by an attacker to...

7.8CVSS7.8AI score0.00905EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/10/11 12:00 a.m.•58 views

CVE-2022-41175

Due to lack of proper memory management, when a victim opens a manipulated Enhanced Metafile .emf, emf.x3d file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow o...

8.2AI score0.00905EPSS
SaveExploits0References2
CVE
CVE
•added 2022/10/11 12:00 a.m.•75 views

CVE-2022-41182

SAP 3D Visual Enterprise Author (v9) is affected by a memory-management issue in parsing Parasolid X_B files, particularly in CoreCadTranslator.exe, which can cause the application to crash and become temporarily unavailable (local issue). Some connected advisories also describe related informati...

5.5CVSS5.4AI score0.00253EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/10/11 12:00 a.m.•74 views

CVE-2022-39807

CVE-2022-39807 affects SAP 3D Visual Enterprise Author v9. The vulnerability is a memory-management/ buffer-overflow issue in parsing SolidWorks Drawing (.sldasm) files via CoreCadTranslator.exe, potentially crashing the app and rendering it unavailable until restart. Impact is Availability (High...

5.5CVSS5.4AI score0.00213EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/10/11 12:00 a.m.•81 views

CVE-2022-39808

CVE-2022-39808 concerns SAP 3D Visual Enterprise Author v9. It stems from improper memory management while parsing Wavefront OBJ files (ObjTranslator.exe), allowing Remote Code Execution via a payload that triggers a stack-based overflow or reuse of a dangling pointer to overwritten memory space....

7.8CVSS7.9AI score0.00372EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/10/11 12:00 a.m.•14 views

PT-2022-25003 · Sap +1 · Sap 3D Visual Enterprise Author +1

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to improper memory management. When a victim opens a manipulated SolidWorks Drawing .slddrw file in SAP 3D Visual Enterprise Author, it can trigger a Remote Code...

7.8CVSS7.9AI score0.00561EPSS
SaveExploits0References5
CVE
CVE
•added 2022/10/11 12:00 a.m.•67 views

CVE-2022-39803

CVE-2022-39803 concerns SAP 3D Visual Enterprise Author. The issue is in the parsing of SAT files (e.g., CoreCadTranslator.exe) and is tied to improper validation leading to memory corruption, including stack-based/heap-based write conditions. Descriptions from ZDI advisories indicate that crafte...

7.8CVSS7.8AI score0.00556EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/10/11 12:00 a.m.•43 views

CVE-2022-41171

Due to lack of proper memory management, when a victim opens manipulated CATIA4 Part .model, CatiaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

5.8AI score0.00253EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/10/11 12:00 a.m.•16 views

PT-2022-25700 · Sap · Sap 3D Visual Enterprise Author

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to improper memory management when handling manipulated Iges Part and Assembly files. This can lead to a Remote Code Execution when a payload forces a stack-based...

7.8CVSS7.9AI score0.0054EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2022/10/11 12:00 a.m.•16 views

PT-2022-25695 · Autodesk +1 · Autocad +1

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to improper memory management. When a manipulated AutoCAD .dxf file from untrusted sources is opened, it can trigger a Remote Code Execution. This occurs when the...

7.8CVSS7.7AI score0.0054EPSS
SaveExploits0References8
Packet Storm
Packet Storm
•added 2022/09/29 12:00 a.m.•238 views

Online Examination System 1.0 Cross Site Scripting

Exploit Title: Online Examination System - Cross site scripting Reflected Google Dork: N/A Date: 2022-9-29 Exploit Author: yousef alraddadi - https://twitter.com/y0usef11 Vendor Homepage: https://projectworlds.in/free-projects/php-projects/online-examination/ Software Link:...

7.4AI score
SaveExploits0
zdt
zdt
•added 2022/09/29 12:00 a.m.•220 views

Online Examination System 1.0 Cross Site Scripting Vulnerability

Exploit Title: Online Examination System - Cross site scripting Reflected Exploit Author: yousef alraddadi - https://twitter.com/y0usef11 Vendor Homepage: https://projectworlds.in/free-projects/php-projects/online-examination/ Software Link:...

7.1AI score
SaveExploits0
OSV
OSV
•added 2022/09/26 1:15 p.m.•15 views

CVE-2022-1755

The SVG Support WordPress plugin before 2.5 does not properly handle SVG added via an URL, which could allow users with a role as low as author to perform Cross-Site Scripting attacks...

5.4CVSS5.8AI score0.00638EPSS
SaveExploits1References1
Rows per page
Query Builder