Lucene search
K

10 matches found

CNVD
CNVD
added 2024/02/21 12:0 a.m.15 views

Siemens Parasolid Null Pointer Dereference Vulnerability

Parasolid is a 3D geometry modeling tool that supports a variety of techniques including solid modeling, direct editing and free-form surface/table modeling. Siemens Parasolid null pointer dereference vulnerability can be exploited by an attacker to crash an application, resulting in a denial of...

5.5CVSS6.8AI score0.0004EPSS
Exploits0References1
CNVD
CNVD
added 2023/08/09 12:0 a.m.16 views

Siemens Parasolid and Teamcenter Visualization Out-of-Bounds Read Vulnerability (CNVD-2023-62049)

Parasolid is a 3D geometric modeling tool that supports a variety of techniques including solid modeling, direct editing, and free-form surface/table modeling.Teamcenter Visualization enables organizations to enhance their product lifecycle management PLM environments with a range of comprehensiv...

7.8CVSS7AI score0.0012EPSS
Exploits0References1
CNVD
CNVD
added 2022/11/09 12:0 a.m.20 views

Siemens Parasolid out-of-bounds write vulnerability

Parasolid is a 3D geometric modeling tool that supports multiple techniques, including solid modeling, direct editing, and free-form surface/table modeling.An out-of-bounds write vulnerability exists in Siemens Parasolid, which can be exploited by attackers to execute code in the context of the...

7.8CVSS4.3AI score0.00128EPSS
Exploits0References1
CNVD
CNVD
added 2022/09/14 12:0 a.m.21 views

Siemens Simcenter Femap and Parasolid Uninitialized Pointer Access Vulnerability

Parasolid is a 3D geometric modeling tool that supports a variety of techniques, including solid modeling, direct editing, and free-form/sheet modeling.Simcenter Femap is an advanced simulation application for creating, editing, and examining finite element models of complex products or...

7.8CVSS3.2AI score0.00062EPSS
Exploits0References1
CNVD
CNVD
added 2022/09/14 12:0 a.m.24 views

Siemens Simcenter Femap and Parasolid Out-of-Bounds Writing Vulnerability

Parasolid is a 3D geometric modeling tool that supports a variety of techniques, including solid modeling, direct editing, and free-form/sheet modeling.Simcenter Femap is an advanced simulation application for creating, editing, and examining finite element models of complex products or...

7.8CVSS2.2AI score0.00062EPSS
Exploits0References1
CNVD
CNVD
added 2022/09/14 12:0 a.m.21 views

Siemens Simcenter Femap and Parasolid Out-of-Bounds Writing Vulnerability (CNVD-2022-62983)

Parasolid is a 3D geometric modeling tool that supports a variety of techniques, including solid modeling, direct editing, and free-form/sheet modeling.Simcenter Femap is an advanced simulation application for creating, editing, and examining finite element models of complex products or...

7.8CVSS2.2AI score0.00062EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/09/11 9:19 p.m.11 views

Cross-Site Scripting in diagram-js-direct-editing

Versions of diagram-js-direct-editing prior to 1.4.3 are vulnerable to Cross-Site Scripting. The package fails to sanitize input from the clipboard, allowing attackers to execute arbitrary JavaScript in the victim's browser. Recommendation Upgrade to version 1.4.3 or later...

5.2AI score
Exploits0References3Affected Software1
OSV
OSV
added 2020/09/11 9:19 p.m.7 views

GHSA-J8R2-2X94-2Q67 Cross-Site Scripting in diagram-js-direct-editing

Versions of diagram-js-direct-editing prior to 1.4.3 are vulnerable to Cross-Site Scripting. The package fails to sanitize input from the clipboard, allowing attackers to execute arbitrary JavaScript in the victim's browser. Recommendation Upgrade to version 1.4.3 or later...

7.5AI score
Exploits0References2
Veracode
Veracode
added 2019/06/21 7:22 a.m.7 views

Cross-Site Scripting (XSS)

diagram-js-direct-editing is vulnerable to cross-site scripting. The vulnerability exists due to lack of sanitization when pasting HTML code from user's clipboard into the edit box which allows remote attackers to inject and execute arbitrary javascript...

6.9AI score
Exploits0
Node.js
Node.js
added 2019/06/17 9:49 p.m.18 views

Cross-Site Scripting

Overview Versions of diagram-js-direct-editing prior to 1.4.3 are vulnerable to Cross-Site Scripting. The package fails to sanitize input from the clipboard, allowing attackers to execute arbitrary JavaScript in the victim's browser. Recommendation Upgrade to version 1.4.3 or later. References -...

7.3AI score
Exploits0Affected Software1
Rows per page
Query Builder