CVE-2024-28761

IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force I...

CVE-2024-22344

IBM TXSeries for Multiplatforms 8.2 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 280191...

CVE-2024-34086

CVE-2024-34086 affects Siemens JT2Go and Teamcenter Visualization (V14.1, V14.2, V14.3, V2312) with all versions prior to specific fixed builds. The vulnerability is an out-of-bounds write while parsing a specially crafted CGM file, enabling code execution in the affected process. Affected versio...

CVE-2024-32635

CVE-2024-32635 affects Siemens JT2Go and Teamcenter Visualization: JT2Go < V2312.0005; Teamcenter Visualization V14.2 < 0.12; V14.3 < 0.10; V2312

CVE-2024-32065

CVE-2024-32065 affects Siemens/Siemens Simcenter Femap (versions prior to V2406). The vulnerability is an out-of-bounds read past the end of an allocated structure while parsing specially crafted IGS files, which could allow code execution in the current process. Affected in Simcenter Femap

CVE-2024-32064

A vulnerability has been identified in Simcenter Femap All versions V2406. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process...

CVE-2024-32064

CVE-2024-32064 affects Simcenter Femap versions prior to V2406, where parsing specially crafted IG S files can cause an out-of-bounds read and potentially allow code execution in the current process. The vulnerability is tied to the IGS parsing path in Simcenter Femap; affected software and versi...

CVE-2024-32062

Simcenter Femap (all versions

CVE-2024-32060

CVE-2024-32060 affects Simcenter Femap (all versions

CVE-2024-32059

A vulnerability has been identified in Simcenter Femap All versions V2406. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process...

CVE-2024-31980

A vulnerability has been identified in Parasolid V35.1 All versions V35.1.256, Parasolid V36.0 All versions V36.0.210, Parasolid V36.1 All versions V36.1.185. The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted XT part fil...

CVE-2024-31980

The CVE-2024-31980 issue affects Siemens Parasolid: V35.1 (all < V35.1.256), V36.0 (all < V36.0.210), and V36.1 (all

CVE-2024-31980

A vulnerability has been identified in Parasolid V35.1 All versions V35.1.256, Parasolid V36.0 All versions V36.0.210, Parasolid V36.1 All versions V36.1.185. The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted XT part fil...

Siemens Parasolid 缓冲区错误漏洞

Parasolild Translators is a single-format translator toolkit for high-speed end-to-end translation between Parasolid and several industry formats such as STEP or IGES. A memory corruption vulnerability exists in the Siemens PS/IGES Parasolid Translator component that can be exploited by an attack...

Microsoft Windows Search Service Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows Search...

Intel® CST Software Advisory

Summary: A potential security vulnerability in some Intel® Context Sensing Technology CST software may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-40155 Description:...

NocoDB Allows Preview of Files with Dangerous Content

Summary --- Attacker can upload a html file with malicious content. If user tries to open that file in browser malicious scripts can be executed leading Stored XSSCross-Site Script attack. PoC --- NocoDB was configured using the Release Binary Noco-macos-arm64, and nocodb version 0.202.9 currentl...

CVE-2023-50717 NocoDB Allows Preview of File with Dangerous Content

NocoDB is software for building databases as spreadsheets. Starting in verson 0.202.6 and prior to version 0.202.10, an attacker can upload a html file with malicious content. If user tries to open that file in browser malicious scripts can be executed leading stored cross-site scripting attack...

CVE-2024-28761

IBM App Connect Enterprise (versions 11.0.0.1–11.0.0.25 and 12.0.1.0–12.0.12.0) is vulnerable to an HTML injection in the Admin API/Dashboard component. The issue arises from inadequate protection of the web page structure, enabling a remote attacker to inject HTML that executes in the victim’s b...

CVE-2024-22344 IBM TXSeries for Multiplatforms information disclosure

IBM TXSeries for Multiplatforms 8.2 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 280191...