The vulnerability of the development module for construction route planning in the “LOCMAN Construction Planner” tool of the Engineering Data Management and Product Lifecycle management system LOCMAN:PLM lies in its ability to load files of a dangerous type indefinitely, allowing attackers to execute arbitrary codes.

The vulnerability of the development module for manufacturing route planning in the “LOCMAN Rascex” product, within the engineering data management and product lifecycle management system LOCMAN:PLM, relates to the unlimited loading of dangerous files. Exploiting this vulnerability could allow...

The vulnerability of the module for creating, editing, and saving diagrams of typical and business processes, determining process properties, creating lists of associated objects “LOCMAN WorkFlow Designer” of the engineering data management system, and the product lifecycle management system LOCMAN:PLM. This vulnerability is related to the unlimited loading of dangerous type files, allowing attackers to execute arbitrary code.

The vulnerability of the module responsible for creating, editing, and saving diagrams of typical and working business processes, as well as defining properties of these processes, and creating lists of associated objects in the “LOZMAN Workflow Designer” system for managing engineering data and...

The vulnerability of the KOMPAS 3D automated design system lies in its uncontrolled mechanism for checking the path of dynamically attached libraries. This allows a perpetrator to execute arbitrary code.

The vulnerability of the KOMPAS-3D three-dimensional modeling system is related to an uncontrolled mechanism for checking the path of dynamically attached libraries. Exploiting this vulnerability could allow a attacker to execute arbitrary code by replacing the DLL library...

Palo Alto Networks Cortex XDR Agent 代码问题漏洞

Palo Alto Networks Cortex XDR Agent is a client software from Palo Alto Networks Malaysia used to check the security of client devices. A code issue vulnerability exists in Cortex XDR Agent that originates from the application loading DLL libraries in an insecure manner. A local user, with the...

The vulnerability of the k2ddoc.dll library in the KOMPAS-3D three-dimensional modeling system, related to the execution of operations outside the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the k2ddoc.dll library in the KOMPAS-3D three-dimensional modeling system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially crafted CDW format file...

The vulnerability of the ksys2.dll library in the KOMPAS-3D 3D modeling system, which is related to the execution of operations outside the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the ksys2.dll library in the KOMPAS-3D three-dimensional modeling system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially crafted CDW format file...

The vulnerability of the module for creating and saving structured information about company departments in the “LOCMAN Reference Guide for Structural Departments” system, which manages engineering data and the product lifecycle of LOCMAN:PLM, arises from the possibility of unlimited loading of dangerous files. This vulnerability allows attackers to execute arbitrary code.

The vulnerability of the module responsible for creating and saving structured information about company departments in the “LOCZMAN Reference Guide for Structural Departments” system, which manages engineering data and the product lifecycle of LOCZMAN:PLM, relates to the unlimited loading of...

The vulnerability of the data exchange module related to the “LOCMAN WorkFlow” subsystem between various databases of the “LOCMAN WorkFlow Import-Export” system for engineering data management and the product lifecycle management system LOCMAN:PLM, allows a perpetrator to execute arbitrary code due to unlimited loading of dangerous files.

The vulnerability of the data exchange module related to the “LOZMAN WorkFlow” subsystem between various databases of the “LOZMAN WorkFlow Import-Export” component of the engineering data management system and the product lifecycle management system LOZMAN:PLM is associated with the unlimited...

SUSE: Security Advisory (SUSE-SU-2017:1737-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the data synchronization module at any time, triggered by user requests or by a special scheduler utility “LOCMAN Master Synchronization” of the engineering data and product lifecycle management system LOCMAN. This vulnerability is related to the unlimited loading of dangerous type files, allowing attackers to execute arbitrary code.

The vulnerability of the data synchronization module at any time, triggered by user requests or by special planning tools like “LOZMAN Master Synchronization” of the Engineering Data and Product Lifecycle management system LOZMAN, is related to the unlimited loading of dangerous files. Exploiting...

SQL Injection in t3/dce

The dce aka Dynamic Content Element extension 2.2.0 through 2.6.x before 2.6.2, and 2.7.x before 2.7.1, for TYPO3 allows SQL Injection via a backend user account...

2021-06 Dynamic Cumulative Update for Windows 10 Version 20H2 for ARM64-based Systems (KB5003637)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

PT-2021-7832 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: Rockwell Automation ISaGRAF Runtime versions 4.x through 5.x Description: The issue is related to the uncontrolled loading of dynamic libraries by Rockwell Automation ISaGRAF Runtime, which could allow a local, unauthenticated attacker to...

ISaGRAF 代码问题漏洞

Rockwell Automation ISaGRAF is an automation software technology for creating integrated automation solutions from Rockwell Automation. It is designed to be scalable and portable and is suitable for the development of small controllers and large distributed automation systems. ISaGRAF suffers fro...

Fedora: Security Advisory for dhcp (FEDORA-2021-8ca8263bde)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

charlotte

It is an offensive tool for Windows. The repository contains a Python script, charlotte.py, which is a fully undetected shellcode launcher. The script uses XOR encryption to encrypt the shellcode and function names. The script is designed to be used with the Metasploit framework, and it can be us...

[SECURITY] Fedora 33 Update: dhcp-4.4.2-9.b1.fc33

DHCP Dynamic Host Configuration Protocol...

CVE-2021-32923

A flaw was found in the HashiCorp Vault and Vault Enterprise. The vault could allow a remote attacker to bypass security restrictions caused by a renewal logic flaw when a token lease or dynamic secret lease was renewed inside the last second of its maximum TTL. By sending a specially crafted...

Security Bulletin: Vulnerability in OpenSSL affects Informix Dynamic Server and CSDK (CVE-2015-1788)

Summary An OpenSSL denial of service vulnerability disclosed by the OpenSSL Project affects GSKit. Informix Dynamic Server uses GSKit and addressed the applicable CVE. Vulnerability Details CVEID: CVE-2015-1788 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an error when...

Security Bulletin: A vulnerability in the GSKit component of Informix Dynamic Server (IDS) (CVE-2016-0201)

Summary A vulnerability has been addressed in the GSKit, component of Informix Dynamic Server IDS . Vulnerability Details CVEID: CVE-2016-0201 DESCRIPTION: IBM GSKit could allow a remote attacker to obtain sensitive information, caused by a MD5 collision. An attacker could exploit this...