Default credentials

A vulnerability has been identified in Solid Edge SE2020 All Versions SE2020MP12, Solid Edge SE2021 All Versions SE2021MP2. Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in a out of bounds write past the end of an allocated structure...

Stack overflow

A vulnerability has been identified in JT2Go All versions V13.1.0.1, Solid Edge SE2020 All Versions SE2020MP12, Solid Edge SE2021 All Versions SE2021MP2, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing of PAR files...

Default credentials

A vulnerability has been identified in Solid Edge SE2020 All Versions SE2020MP12, Solid Edge SE2021 All Versions SE2021MP2. Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds write into uninitialized memory. An attacker...

CVE-2020-28384

A vulnerability has been identified in Solid Edge SE2020 All Versions SE2020MP12, Solid Edge SE2021 All Versions SE2021MP2. Affected applications lack proper validation of user-supplied data when parsing PAR files. This could lead to a stack based buffer overflow. An attacker could leverage this...

CVE-2020-28383

A vulnerability has been identified in JT2Go All versions V13.1.0.1, Solid Edge SE2020 All Versions SE2020MP12, Solid Edge SE2021 All Versions SE2021MP2, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing PAR files. Thi...

CVE-2020-28382

A vulnerability has been identified in Solid Edge SE2020 All Versions SE2020MP12, Solid Edge SE2021 All Versions SE2021MP2. Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in a out of bounds write past the end of an allocated structure...

CVE-2020-28382

Siemens Solid Edge SE2020/SE2021 (all versions prior to SE2020MP12/SE2021MP2) are affected by a PAR-file parsing vulnerability that can cause an out-of-bounds write, enabling code execution in the context of the affected process. The issue spans Solid Edge SE products and the Solid Edge Viewer, w...

CVE-2020-28381

Siemens Solid Edge PAR file parsing contains an out-of-bounds write due to insufficient input validation, enabling possible remote code execution in the current process. Affected products include Solid Edge SE2020 (< SE2020MP12) and SE2021 (

CVE-2020-26989

A vulnerability has been identified in JT2Go All versions V13.1.0.1, Solid Edge SE2020 All Versions SE2020MP12, Solid Edge SE2021 All Versions SE2021MP2, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing of PAR files...

CVE-2020-26989

CVE-2020-26989 affects Siemens JT2Go (all versions

CVE-2020-26988

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in an out of bounds write past the end of an allocated structure. An...

PT-2021-11508 · Siemens · Solid Edge +2

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V13.1.0.1 Solid Edge SE2020 versions prior to SE2020MP12 Solid Edge SE2021 versions prior to SE2021MP2 Teamcenter Visualization versions prior to V13.1.0.1 Description: A vulnerability has been identified in the affect...

DEBIAN-CVE-2019-18397

A buffer overflow in the fribidigetparembeddinglevelsex function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrary code by delivering crafted text content to a user, when this content is then rendered by an application...

fribidi Buffer Overflow Vulnerability

fribidi is an open source implementation of a bi-directional Unicode algorithm. A buffer overflow vulnerability exists in the 'fribidigetparembeddinglevelsex' function in the lib/fribidi-bidi.c file in fribidi versions 1.0.0 through 1.0.7, which can be exploited by an attacker to to cause a buffe...

PT-2019-6284 · Nlnet +8 · Unbound +8

Name of the Vulnerable Software and Affected Versions: Unbound versions prior to 1.9.5 Description: The issue is related to an out-of-bounds write in the sldns bget token par function. However, the vendor disputes that this is a vulnerability, stating that although the code may be vulnerable, a...

HPE 3PAR Service Processor Local Privileged Information Disclosure Vulnerability

HPE 3PAR Service Processor SP is a suite of virtual service processors deployed on the VMware vSphere hypervisor from Hewlett Packard Enterprise HPE, USA. A security vulnerability exists in versions prior to HPE 3PAR SP SP-4.4.0.GA-110 MU7. A remote attacker could exploit the vulnerability to...

CVE-2018-7096

A security vulnerability was identified in 3PAR Service Processor SP prior to SP-4.4.0.GA-110MU7. The vulnerability may be exploited remotely to allow code execution...

Design/Logic Flaw

Unquoted Windows search path vulnerability in the guest service in Unisys s-Par before 4.4.20 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe...

CVE-2017-5873

Unquoted Windows search path vulnerability in the guest service in Unisys s-Par before 4.4.20 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe...

CVE-2017-5873

Affected product: Unisys s-Par (guest service). Vulnerability: Unquoted Windows search path in the guest service before 4.4.20 can allow local privilege escalation via a Trojan horse executable in %SYSTEMDRIVE% (e.g., program.exe). Exploitation status: not detailed in the provided documents; Open...