27735 matches found
CVE-2024-12191
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...
CVE-2024-12178
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...
Autodesk Navisworks security vulnerabilities
Autodesk Navisworks is a 3D model review software for architecture, engineering and construction from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk Navisworks version 2025, which originates from a maliciously crafted DWFX file that triggers an out-of-bounds writ...
Autodesk Navisworks security vulnerabilities
Autodesk Navisworks is a 3D model review software for architecture, engineering and construction from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk Navisworks version 2025, which originates from a maliciously crafted DWF file that can cause an out-of-bounds writ...
Autodesk Navisworks security vulnerabilities
Autodesk Navisworks is a 3D model review software for architecture, engineering and construction from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk Navisworks that originates from an out-of-bounds write that can be enforced when parsing a maliciously crafted DWF...
PT-2024-9972 · Autodesk · Autodesk Navisworks Manage +2
Name of the Vulnerable Software and Affected Versions: Autodesk Navisworks Freedom affected versions not specified Autodesk Navisworks Simulate affected versions not specified Autodesk Navisworks Manage affected versions not specified Description: A maliciously crafted DWF file, when parsed throu...
Autodesk Navisworks security vulnerabilities
Autodesk Navisworks is a 3D model review software for architecture, engineering and construction from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk Navisworks, which can be exploited to cause a crash, data corruption, or execution of arbitrary code in the...
PT-2024-9974 · Autodesk · Autodesk Navisworks Manage +2
Name of the Vulnerable Software and Affected Versions: Autodesk Navisworks Freedom affected versions not specified Autodesk Navisworks Simulate affected versions not specified Autodesk Navisworks Manage affected versions not specified Description: A maliciously crafted DWFX file, when parsed...
Siemens Tecnomatix Plant Simulation Teamcenter Visualization Buffer Overflow
The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation and Teamcenter Visualization’s Product Lifecycle Management system lies in the execution of operations beyond the buffer in memory when processing WRL-formatted files. Exploiting this vulnerability can allow...
Siemens Tecnomatix Plant Simulation Teamcenter Visualization Buffer Overflow
The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation and Teamcenter Visualization’s Product Lifecycle Management system lies in the execution of operations beyond the buffer in memory when processing WRL format files. Exploiting this vulnerability can allow attacke...
Autodesk Navisworks buffer error vulnerability
Autodesk Navisworks is a 3D model review software for architecture, engineering, and construction from Autodesk, Inc. A buffer error vulnerability exists in Autodesk Navisworks, which originates from parsing a maliciously crafted DWF file can be used to cause a heap overflow, which can be exploit...
openbabel:fuzz_convert: Stack-buffer-overflow in OpenBabel::MCDLFormat::getMCDL
Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=6549020696182784 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzconvert Job Type: libfuzzerasanopenbabel Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address...
SUSE CVE-2024-47600
GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the formatchannelmask function in gst-discoverer.c. The vulnerability affects the local array position, which is defined with a fixed size of 64 elements. However, the...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-49895)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49895 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds...
SAP NetWeaver AS for Java Information Disclosure
The vulnerability of the SAP NetWeaver AS for Java software platform is related to the leakage of information about files and directories. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions by using specially created PDF files...
org.http4k:http4k (4.3.4.1) potentially affected by CVE-2024-55875 via org.http4k:http4k-format-xml (4.3.4.1)
org.http4k:http4k-format-xml MAVEN version 4.3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-format-xml and may be impacted: - org.http4k:http4k 4.3.4.1 Source cves: CVE-2024-55875 Source advisory: OSV:GHSA-7MJ5-HJJJ-8RGW...
org.http4k:http4k (4.3.4.0) potentially affected by CVE-2024-55875 via org.http4k:http4k-format-xml (4.3.4.0)
org.http4k:http4k-format-xml MAVEN version 4.3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-format-xml and may be impacted: - org.http4k:http4k 4.3.4.0 Source cves: CVE-2024-55875 Source advisory: OSV:GHSA-7MJ5-HJJJ-8RGW...
org.http4k:http4k (4.3.3.0) potentially affected by CVE-2024-55875 via org.http4k:http4k-format-xml (4.3.3.0)
org.http4k:http4k-format-xml MAVEN version 4.3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-format-xml and may be impacted: - org.http4k:http4k 4.3.3.0 Source cves: CVE-2024-55875 Source advisory: OSV:GHSA-7MJ5-HJJJ-8RGW...
org.http4k:http4k (>=4.3.3.0, <=4.3.4.1) potentially affected by CVE-2024-55875 via org.http4k:http4k-format-xml (>=4.3.3.0, <=4.3.4.1)
org.http4k:http4k-format-xml MAVEN version =4.3.3.0, =4.3.3.0, =4.3.4.1 Source cves: CVE-2024-55875 Source advisory: MEND:CVE-2024-55875...
