Siemens Tecnomatix Plant Simulation

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

CVE-2024-21369: Heap-based Buffer Overflow

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

CVE-2024-21354: Heap-based Buffer Overflow

Microsoft Message Queuing MSMQ Elevation of Privilege Vulnerability...

CVE-2024-21361: Heap-based Buffer Overflow

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

CVE-2024-21348: Heap-based Buffer Overflow

Internet Connection Sharing ICS Denial of Service Vulnerability...

CVE-2024-21347: Heap-based Buffer Overflow

Microsoft ODBC Driver Remote Code Execution Vulnerability...

CVE-2024-21341: Heap-based Buffer Overflow

Windows Kernel Remote Code Execution Vulnerability...

CVE-2024-23796: Heap-based Buffer Overflow

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0012, Tecnomatix Plant Simulation V2302 All versions V2302.0006. The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted WRL files. This could allow an attacker...

CVE-2024-21349: Heap-based Buffer Overflow

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability...

Adobe Audition < 23.6.4 / 24.0.0 < 24.2.0 Arbitrary code execution (APSB24-11) (macOS)

The version of Adobe Audition installed on the remote macOS host is prior to 23.6.4, 24.2.0. It is, therefore, affected by a vulnerability as referenced in the APSB24-11 advisory. - Audition versions 24.0.3, 23.6.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could...

CVE-2024-21353: Heap-based Buffer Overflow

Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability...

CVE-2024-21370: Heap-based Buffer Overflow

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

CVE-2024-21359: Heap-based Buffer Overflow

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

Adobe Audition < 23.6.4 / 24.0.0 < 24.2.0 Arbitrary code execution (APSB24-11)

The version of Adobe Audition installed on the remote Windows host is prior to 23.6.4, 24.2.0. It is, therefore, affected by a vulnerability as referenced in the APSB24-11 advisory. - Audition versions 24.0.3, 23.6.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that coul...

CVE-2024-1062: Heap-based Buffer Overflow

A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in logentryattr...

Autodesk AutoCAD MODEL File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2024-1199)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for zlib (EulerOS-SA-2024-1170)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

X.Org Server DisableDevice Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DisableDevice...

EulerOS 2.0 SP9 : libtiff (EulerOS-SA-2024-1179)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffe...