458 matches found
PT-2026-22573
The vulnerability enables an attacker to fully bypass authentication in CGM CLININET and gain access to any active user account by supplying only the username, without requiring a password or any other credentials. Obtaining a session ID is sufficient for session takeover and grants access to the...
PT-2026-22577
The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorization checks. By modifying the parameter in the GET request, an attacker can access messages and attachments belonging to other users...
Siemens NX
SUMMARY Siemens NX is affected by multiple file parsing vulnerabilities that could be triggered when the application reads files in CGM format. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to...
CVE-2021-31514
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2024-34086
A vulnerability has been identified in JT2Go All versions V2312.0001, Teamcenter Visualization V14.1 All versions V14.1.0.13, Teamcenter Visualization V14.2 All versions V14.2.0.10, Teamcenter Visualization V14.3 All versions V14.3.0.7, Teamcenter Visualization V2312 All versions V2312.0001. The...
CVE-2025-48981
An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers within the intranet to eavesdrop and manipulate data on the protocol because encryption is optional for this connection...
CVE-2025-48981
CVE-2025-48981 affects CGM MEDICO; an insecure implementation of the DNET protocol allows intranet attackers to eavesdrop and manipulate data because encryption for this connection is optional. Descriptions from NVD/Red Hat confirm the same impact; CVSS shows NETWORK with high confidentiality imp...
CVE-2025-48981
An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers within the intranet to eavesdrop and manipulate data on the protocol because encryption is optional for this connection...
CVE-2025-48981
An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers within the intranet to eavesdrop and manipulate data on the protocol because encryption is optional for this connection...
PT-2025-41207
Name of the Vulnerable Software and Affected Versions CGM MEDICO affected versions not specified Description An insecure implementation of the proprietary protocol DNET allows attackers within the intranet to eavesdrop and manipulate data. This is due to encryption being optional for connections...
EUVD-2020-27525
Malware in sbrugna...
EUVD-2020-27478
Malware in sbrugna...
EUVD-2021-20358
Malware in sbrugna...
EUVD-2021-18407
Malware in sbrugna...
EUVD-2020-19506
Malware in sbrugna...
EUVD-2021-18414
Malware in sbrugna...
EUVD-2024-33856
Malicious code in bioql PyPI...
EUVD-2025-9446
Malicious code in bioql PyPI...