CVE-2024-33868

CVE-2024-33868 affects linqi prior to 1.4.0.1 on Windows. The issue is an LDAP injection in the application’s processing. The vulnerability has a high impact risk per the NVD score (CRITICAL: 9.8) with network attack vector, no authentication, and full impact on confidentiality, integrity, and av...

CVE-2024-33867

Summary: CVE-2024-33867 affects linqi before 1.4.0.1 on Windows due to a hardcoded password salt (root cause). Connected documents confirm the affected product/version and vulnerability description, with a CVSS v3.1 base score of 4.8 (Medium), attack vector LOCAL, privileges required HIGH, and us...

CVE-2024-33864

The CVE-2024-33864 entry covers a vulnerability in linqi prior to 1.4.0.1 on Windows that enables SSRF via Document template generation, including the use of remote images during process creation, file inclusion, and PDF document generation through malicious JavaScript. Affected component behavio...

CVE-2024-33863

The CVE-2024-33863 issue affects linqi prior to 1.4.0.1 on Windows, with a local file inclusion vulnerability exposed via the /api/Cdn/GetFile endpoint. The root cause is not explicitly stated in the provided documents, but the impact is high (CVE metrics indicate Confidentiality, Integrity, and ...

CVE-2024-22269

CVE-2024-22269 describes an information-disclosure vulnerability in the vbluetooth device affecting VMware Workstation and Fusion. According to the provided documents, a malicious actor with local administrative privileges inside a virtual machine may read privileged information stored in hypervi...

CVE-2024-22268

CVE-2024-22268 affects VMware Workstation and Fusion. A heap buffer-overflow in the Shader functionality can be exploited by a non-administrative attacker with access to a VM that has 3D graphics enabled to cause a denial of service. Public details from connected sources confirm affected products...

CVE-2024-34086

CVE-2024-34086 affects Siemens JT2Go and Teamcenter Visualization (V14.1, V14.2, V14.3, V2312) with all versions prior to specific fixed builds. The vulnerability is an out-of-bounds write while parsing a specially crafted CGM file, enabling code execution in the affected process. Affected versio...

CVE-2024-33647

CVE-2024-33647 affects Polarion ALM: all versions before V2404.0. The Apache Lucene–based query engine lacks proper access controls, potentially allowing an authenticated user to query items beyond their allowed projects. Public details in connected sources confirm the vulnerability class as impr...

CVE-2024-33577

CVE-2024-33577 affects Siemens/Sicentner Femap: all versions prior to V2406 have a stack-based overflow while parsing certain strings as an argument to a binary, enabling code execution in the current process. Affected product: Simcenter Femap; root cause: buffer/stack overflow in string parsing....

CVE-2024-33499

CVE-2024-33499 affects Siemens SIMATIC RTLS Locating Manager (multiple SKUs: 6GT2780-0DA00/0DA10/0DA20/0DA30/1EA10/1EA20/1EA30) and related components. Reported issue: the应用 assigns incorrect permissions to a user management component, enabling a privileged attacker to escalate from the Administr...

CVE-2024-33497

CVE-2024-33497 concerns the Siemens SIMATIC RTLS Locating Manager family, where the Track Viewer Client fails to properly protect credentials used to authenticate to the server. An authenticated local attacker could extract credentials from the Track Viewer Client and use them to escalate from th...

CVE-2024-33490

Solid Edge vulnerabilities CVE-2024-33490 describe an out-of-bounds read past the end of an allocated structure while parsing specially crafted PAR files, enabling code execution in the current process. Affected: Solid Edge versions prior to V224.0 Update 5. Root cause: out-of-bounds read during ...

CVE-2024-32741

Siemens SIMATIC CN 4100 (all versions

CVE-2024-32639

Tecnomatix Plant Simulation CVE-2024-32639 affects V2302 and older builds with MODEL file parsing. The issue is an out-of-bounds write past the end of an allocated buffer when processing a crafted MODEL file, enabling code execution in the affected process. Public sources identify the flaw as a r...

CVE-2024-32637

CVE-2024-32637 describes a NULL POINTER DEREFERENCE in Siemens JT2Go and Teamcenter Visualization components when parsing X_T files. Affected: JT2Go < v2312.0005; Teamcenter Visualization V14.2 < v14.2.0.12; V14.3 < v14.3.0.10; V2312

CVE-2024-32066

Siemens Simcenter Femap (versions

CVE-2024-32059

CVE-2024-32059 concerns an out-of-bounds read past the end of an allocated structure during parsing of IGS files in Siemens/Simcenter Femap. Affected products are Simcenter Femap versions prior to V2406; the vulnerability can allow code execution in the context of the current process. The issue i...

CVE-2024-32058

Summary (CVE-2024-32058): Siemens/Simcenter Femap prior to V2406 is affected by a memory corruption vulnerability when parsing crafted IGS files, potentially enabling code execution in the current process. The issue is caused by memory corruption in the parser (buffer/memory handling) for IGS inp...

CVE-2024-32057

CVE-2024-32057 affects Siemens/Simcenter Femap, with versions prior to V2406 vulnerable to a type confusion flaw when parsing IGS files, potentially allowing code execution in the current process. The issue is documented across multiple sources, confirming affected product and version range and t...

CVE-2024-32055

CVE-2024-32055 – Simcenter Femap is affected in all versions prior to V2406. The vulnerability is an out-of-bounds read past the end of an allocated structure while parsing specially crafted IGS files, which could allow an attacker to execute code in the context of the current process. Affected p...