Siemens Solid Edge Countable Loss of Significance Code Execution

The vulnerability of Siemens Solid Edge’s design and simulation tools is related to a countable amount of significance loss during the processing of PAR format files. Exploiting this vulnerability can allow attackers to execute arbitrary code...

Siemens Solid Edge Buffer Overflow

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory when processing PAR format files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PDF viewing and editing memory management Code Execution

The vulnerability of PDF viewing and editing programs like Acrobat Document Cloud, Adobe Reader Document Cloud, Adobe Reader, and Adobe Acrobat is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially create...

CVE-2024-12670

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-12191

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2024-12178

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

Autodesk Navisworks security vulnerabilities

Autodesk Navisworks is a 3D model review software for architecture, engineering and construction from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk Navisworks that originates from an out-of-bounds write that can be enforced when parsing a maliciously crafted DWF...

Autodesk Navisworks security vulnerabilities

Autodesk Navisworks is a 3D model review software for architecture, engineering and construction from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk Navisworks, which can be exploited to cause a crash, data corruption, or execution of arbitrary code in the...

Autodesk Navisworks security vulnerabilities

Autodesk Navisworks is a 3D model review software for architecture, engineering and construction from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk Navisworks version 2025, which originates from a maliciously crafted DWF file that can cause an out-of-bounds writ...

Autodesk Navisworks security vulnerabilities

Autodesk Navisworks is a 3D model review software for architecture, engineering and construction from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk Navisworks version 2025, which originates from a maliciously crafted DWFX file that triggers an out-of-bounds writ...

Siemens Tecnomatix Plant Simulation Teamcenter Visualization Buffer Overflow

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation and Teamcenter Visualization’s Product Lifecycle Management system lies in the execution of operations beyond the buffer in memory when processing WRL format files. Exploiting this vulnerability can allow attacke...

PT-2024-9972 · Autodesk · Autodesk Navisworks Manage +2

Name of the Vulnerable Software and Affected Versions: Autodesk Navisworks Freedom affected versions not specified Autodesk Navisworks Simulate affected versions not specified Autodesk Navisworks Manage affected versions not specified Description: A maliciously crafted DWF file, when parsed throu...

PT-2024-9974 · Autodesk · Autodesk Navisworks Manage +2

Name of the Vulnerable Software and Affected Versions: Autodesk Navisworks Freedom affected versions not specified Autodesk Navisworks Simulate affected versions not specified Autodesk Navisworks Manage affected versions not specified Description: A maliciously crafted DWFX file, when parsed...

Autodesk Navisworks buffer error vulnerability

Autodesk Navisworks is a 3D model review software for architecture, engineering, and construction from Autodesk, Inc. A buffer error vulnerability exists in Autodesk Navisworks, which originates from parsing a maliciously crafted DWF file can be used to cause a heap overflow, which can be exploit...

Siemens Tecnomatix Plant Simulation Teamcenter Visualization Buffer Overflow

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation and Teamcenter Visualization’s Product Lifecycle Management system lies in the execution of operations beyond the buffer in memory when processing WRL-formatted files. Exploiting this vulnerability can allow...

openbabel:fuzz_convert: Stack-buffer-overflow in OpenBabel::MCDLFormat::getMCDL

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=6549020696182784 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzconvert Job Type: libfuzzerasanopenbabel Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address...

SUSE CVE-2024-47600

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the formatchannelmask function in gst-discoverer.c. The vulnerability affects the local array position, which is defined with a fixed size of 64 elements. However, the...

SAP NetWeaver AS for Java Information Disclosure

The vulnerability of the SAP NetWeaver AS for Java software platform is related to the leakage of information about files and directories. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions by using specially created PDF files...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-49895)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49895 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds...

org.http4k:http4k (4.3.4.1) potentially affected by CVE-2024-55875 via org.http4k:http4k-format-xml (4.3.4.1)

org.http4k:http4k-format-xml MAVEN version 4.3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-format-xml and may be impacted: - org.http4k:http4k 4.3.4.1 Source cves: CVE-2024-55875 Source advisory: OSV:GHSA-7MJ5-HJJJ-8RGW...