745 matches found
JT2Go and Teamcenter Visualization File Parsing Vulnerability (CNVD-2021-100358)
JT2Go, a 3D JT viewing tool, and Teamcenter Visualization software enable companies to enhance their Product Lifecycle Management PLM environments with a comprehensive family of visualization solutions. The software allows business users to access documents, 2D drawings and 3D models in a single...
CVE-2021-41744
All versions of yongyou PLM are affected by a command injection issue. UFIDA PLM Product Life Cycle Management is a strategic management method. It applies a series of enterprise application systems to support the entire process from conceptual design to the end of product life, and the...
Command injection
All versions of yongyou PLM are affected by a command injection issue. UFIDA PLM Product Life Cycle Management is a strategic management method. It applies a series of enterprise application systems to support the entire process from conceptual design to the end of product life, and the...
CVE-2021-41744
All versions of yongyou PLM are affected by a command injection issue. UFIDA PLM Product Life Cycle Management is a strategic management method. It applies a series of enterprise application systems to support the entire process from conceptual design to the end of product life, and the...
CVE-2021-41744
The CVE-2021-41744 entry affects yongyou_PL M (UFIDA PLM). A command injection vulnerability in Yonyou PLM (default uses JBoss) can allow an attacker to access management interfaces without authorization and potentially gain server permissions. Connected sources corroborate the issue across RH Re...
CVE-2021-41744
All versions of yongyou PLM are affected by a command injection issue. UFIDA PLM Product Life Cycle Management is a strategic management method. It applies a series of enterprise application systems to support the entire process from conceptual design to the end of product life, and the...
yongyou PLM 命令注入漏洞
Yonyou yongyou PLM is a data management platform from CN UFIDA Network Technology Yonyou. A security vulnerability exists in yongyou PLM, which can be exploited by attackers to gain server privileges...
Siemens Teamcenter Active Workspace
1. EXECUTIVE SUMMARY CVSS v3 4.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Teamcenter Active Workspace Vulnerability: Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could lead to access control violations. 3. TECHNICAL...
Security update for libopenmpt (moderate)
openSUSE Security Update: Security update for libopenmpt Announcement ID: openSUSE-SU-2021:1914-1 Rating: moderate References: 1186663 Affected Products: openSUSE Leap 15.3 An update that contains security fixes can now be installed. Description: This update for libopenmpt fixes the following...
The vulnerability of the database update module of the Engineering Data and Product Lifecycle Management System LOCMAN:PLM, related to unlimited loading of dangerous type files, allows a perpetrator to execute arbitrary code.
The vulnerability of the Active Business Process Automation Module of LOCsMAN WorkFlow Audit Service is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow attackers to execute arbitrary code by replacing the dll library e.g., msimg32.dll in the...
The vulnerability of the database update module of the Engineering Data and Product Lifecycle Management System LOCMAN:PLM, related to unlimited loading of dangerous type files, allows a perpetrator to execute arbitrary code.
The vulnerability of the database update module of the LOCsman:PLM engineering data and product lifecycle management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow attackers to execute arbitrary code by replacing the wsock32.dll library with...
The vulnerability of the “LOCMAN Configurator” module of the engineering data and product lifecycle management system LOCMAN:PLM, which is related to the unlimited loading of dangerous type files, allows a perpetrator to execute arbitrary code.
The vulnerability of the “LOZMAN Configurator” module of the engineering data and product lifecycle management system LOZMAN involves unlimited loading of dangerous files. Exploiting this vulnerability can allow attackers to execute arbitrary code by replacing the dll libraries such as...
The vulnerability of the development module for construction route planning in the “LOCMAN Construction Planner” tool of the Engineering Data Management and Product Lifecycle management system LOCMAN:PLM lies in its ability to load files of a dangerous type indefinitely, allowing attackers to execute arbitrary codes.
The vulnerability of the development module for manufacturing route planning in the “LOCMAN Rascex” product, within the engineering data management and product lifecycle management system LOCMAN:PLM, relates to the unlimited loading of dangerous files. Exploiting this vulnerability could allow...
The vulnerability of the grouping module for control devices used to manage servers, databases, reference manuals, and other components of the “Center for Complex Management” system of engineering data and product life cycle management (LOCMan:PLM) allows unauthorized users to load files of a dangerous type indefinitely, enabling them to execute arbitrary code.
The vulnerability of the grouping module for control devices used to manage servers, databases, reference manuals, and other components of the “Center for Control System” in the engineering data and product lifecycle management system LOCsMAN:PLM is related to the unlimited loading of dangerous...
Command Execution Vulnerability in UFIDA PLM
UFIDA PLM Product Lifecycle Management is a strategic management approach. It applies a series of enterprise applications to support the collaborative creation, distribution, application and management of product information across organizations from conceptual design to the end-of-life of the...
Exploit for Injection in Oracle Agile_Plm
Oracle-WLS-Weblogic-RCE CVE-2019-2725 Oracle WLSWeblogic R...
CVE-2020-3140
Cisco Prime License Manager (PLM) suffers a privilege-escalation vulnerability in its web management interface due to insufficient validation of user input. An unauthenticated, remote attacker could submit a crafted request and gain administrative privileges, given a valid username. Impact is hig...
CVE-2020-2920
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Security. Supported versions that are affected are 9.3.3, 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attac...
CVE-2020-2920
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Security. Supported versions that are affected are 9.3.3, 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attac...
CVE-2020-2920
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Security. Supported versions that are affected are 9.3.3, 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attac...