SCS Library Client 安全漏洞

SCS Library Client is a Golang client for Singularity Container Services SCS. A security vulnerability exists in SCS Library Client. An attacker can exploit the vulnerability to perform a multi-part concurrent download...

PT-2023-1179 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge versions prior to V2023 MP1 Description: A memory corruption issue has been identified in the DOCMGMT.DLL of Solid Edge. This issue can be triggered while parsing files in different formats such as PAR, ASM, and DFT, potentially...

CVE-2020-36645 square squalor sql injection

A vulnerability, which was classified as critical, was found in square squalor. This affects an unknown part. The manipulation leads to sql injection. Upgrading to version v0.0.0 is able to address this issue. The patch is named f6f0a47cc344711042eb0970cb423e6950ba3f93. It is recommended to upgra...

Part-DB Project Unrestricted File Upload (CVE-2022-0848)

An unrestricted file upload vulnerability exists in Part-DB Project. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

expat: Integer overflow in nextScaffoldPart in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...

kernel: veth: Ensure eth header is in skb's linear part

In the Linux kernel, the following vulnerability has been resolved: veth: Ensure eth header is in skb's linear part After feeding a decapsulated packet to a veth device with actmirred, skbheadlen may be 0. But vethxmit calls devforwardskb, which expects at least ETHHLEN byte of linear data as...

Description of the security update for SharePoint Foundation 2013: September 13, 2022 (KB5002267)

Description of the security update for SharePoint Foundation 2013: September 13, 2022 KB5002267 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability and Microsoft SharePoint remote code execution vulnerability. To learn more about the...

Description of the security update for SharePoint Enterprise Server 2016: September 13, 2022 (KB5002269)

None None...

Description of the security update for SharePoint Server 2019: September 13, 2022 (KB5002258)

None None...

SICK SIM Series 访问控制错误漏洞

SICK SIM Series is a series of sensor integrators from SICK, Germany. An access control error vulnerability exists in SICK SIM Series FX Partnumber versions 1097816 and 1097817 firmware versions prior to 1.6.0, which stems from a vulnerability that allows an unprivileged, remote attacker to acces...

PT-2022-18508 · Sick · Sick Sim1004

Name of the Vulnerable Software and Affected Versions: SICK SIM1004 Partnumber 1098148 versions prior to 2.0.0 Description: A password recovery issue allows an unprivileged remote attacker to invoke the password recovery mechanism method, gaining access to the user level defined as...

SICK SIM Series 访问控制错误漏洞

SICK SIM Series is a series of sensor integrators from SICK, Germany. An access control error vulnerability exists in SICK SIM Series Partnumber versions 2086502 and 1080579, which stems from a vulnerability that allows an unprivileged, remote attacker to access a user level defined as...

PT-2022-18504 · Sick · Sick Sim4000

Name of the Vulnerable Software and Affected Versions: SICK SIM4000 PPC Partnumber 1078787 versions =1.10.1 Description: A password recovery issue allows an unprivileged remote attacker to invoke the password recovery mechanism method, gaining access to the user level defined as...

CVE-2022-41178

Due to lack of proper memory management, when a victim opens manipulated Iges Part and Assembly .igs, .iges, CoreCadTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable t...

CVE-2022-41177

Due to lack of proper memory management, when a victim opens a manipulated Iges Part and Assembly .igs, .iges, CoreCadTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload force...

CVE-2022-41171

Due to lack of proper memory management, when a victim opens manipulated CATIA4 Part .model, CatiaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

CVE-2022-41171

Due to lack of proper memory management, when a victim opens manipulated CATIA4 Part .model, CatiaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

CVE-2022-41170

Due to lack of proper memory management, when a victim opens a manipulated CATIA4 Part .model, CatiaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based...

CVE-2022-41171

Due to lack of proper memory management, when a victim opens manipulated CATIA4 Part .model, CatiaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

CVE-2022-41169

Due to lack of proper memory management, when a victim opens manipulated CATIA5 Part .catpart, CatiaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...