Lucene search
+L

1152 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:00 a.m.14 views

Dassault Systèmes eDrawings JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00338EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:00 a.m.23 views

Dassault Systèmes eDrawings Viewer JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.2AI score0.00338EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:00 a.m.19 views

Dassault Systèmes eDrawings Viewer JT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes SolidWorks eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

7.8CVSS7.2AI score0.00338EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:00 a.m.17 views

Dassault Systèmes eDrawings JT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00338EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:00 a.m.24 views

Dassault Systèmes eDrawings Viewer JT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes SolidWorks eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

7.8CVSS7.2AI score0.00338EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/08 12:00 a.m.24 views

Dassault Systèmes eDrawings JT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.8AI score0.00338EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/28 6:15 p.m.24 views

CVE-2024-1847

Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024...

7.8CVSS7.9AI score0.00338EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/28 6:15 p.m.30 views

Heap overflow

Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024...

4.4CVSS8.1AI score0.00338EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/02/28 5:34 p.m.40 views

CVE-2024-1847 Multiple vulnerabilities exist in file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024

Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024...

7.8CVSS8.1AI score0.00338EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2023/11/12 10:35 p.m.9 views

jt-direct.de Improper Access Control vulnerability OBB-3778779

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.9AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2023/09/19 8:35 p.m.50 views

Improper Control of Generation of Code ('Code Injection') in jai-ext

Impact Programs using jt-jiffle, and allowing Jiffle script to be provided via network request, are susceptible to a Remote Code Execution as the Jiffle script is compiled into Java code via Janino, and executed. In particular, this affects the downstream GeoServer project. Patches Version 1.2.22...

10CVSS9.5AI score0.98518EPSS
SaveExploits1References5Affected Software2
CNVD
CNVD
added 2023/09/14 12:00 a.m.67 views

Siemens Teamcenter Visualization and JT2Go stack buffer overflow vulnerability (CNVD-2023-69804)

Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios.Siemens JT2GO is a JT file viewer. A stack buffer overflow vulnerability exists in Siemens Teamcenter Visualization and JT2Go, which can be exploited by an attacker to execute code...

7.8CVSS7.5AI score0.00293EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/09/12 12:00 a.m.9 views

Siemens JT2GO 安全漏洞

Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios.Siemens JT2GO is a JT file viewer. A type confusion vulnerability exists in Siemens Teamcenter Visualization and JT2Go, which can be exploited by an attacker to execute code in the...

7.8CVSS7.2AI score0.00313EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/09/12 12:00 a.m.10 views

Siemens JT2GO 缓冲区错误漏洞

Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios.Siemens JT2GO is a JT file viewer. A heap buffer overflow vulnerability exists in Siemens Teamcenter Visualization and JT2Go, which can be exploited by an attacker to execute code ...

7.8CVSS7.6AI score0.00294EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/09/11 12:00 a.m.12 views

The vulnerability of the JT Utilities and JT Open Toolkit (JTTK) application development tools, as well as the 3D geometric modeling tool Parasolid, stems from the ability to read data beyond the buffer limit in memory. This vulnerability allows attackers to execute arbitrary code.

The vulnerabilities of the JT Utilities and JT Open Toolkit JTTK application development tools, as well as the 3D geometric modeling tool Parasolid, are related to the ability to read data beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow attackers to execute...

7.8CVSS7.8AI score0.00218EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/08/21 12:00 a.m.12 views

The vulnerability of the JT Utilities and JT Open Toolkit (JTTK) application development tools, related to the ability to read data beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the JT Utilities and JT Open Toolkit JTTK application development tools is related to the ability to read data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00217EPSS
SaveExploits0References2Affected Software2
CNVD
CNVD
added 2023/08/09 12:00 a.m.18 views

Siemens JT Open, JT Utilities and Parasolid Out-of-Bounds Read Vulnerabilities

JT Open Toolkit is an Application Programming Interface API for software developers who support JT, a publicly available data format developed by Siemens Digital Industry Software for a wide range of communication, visualization, numerical modeling, and a variety of other purposes.Parasolid is a ...

7.8CVSS7AI score0.00218EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/08/09 12:00 a.m.5 views

Siemens JT Open and JT Utilities Out-of-Bounds Read Vulnerability

The JT Open Toolkit is an application programming interface API for software developers who support JT, a publicly available data format developed by Siemens Digital Industry Software for use in a wide range of communication, visualization, numerical modeling and various other purposes. An...

7.3AI score
SaveExploits0References1
OSV
OSV
added 2023/08/08 10:15 a.m.8 views

CVE-2023-30796

A vulnerability has been identified in JT Open All versions V11.4, JT Utilities All versions V13.4. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context ...

7.8CVSS5.9AI score0.00217EPSS
SaveExploits0References1
NVD
NVD
added 2023/08/08 10:15 a.m.32 views

CVE-2023-30796

A vulnerability has been identified in JT Open All versions V11.4, JT Utilities All versions V13.4. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context ...

7.8CVSS7.6AI score0.00217EPSS
SaveExploits0References1
Rows per page
Query Builder