Lucene search
+L

206 matches found

Zero Day Initiative
Zero Day Initiative
•added 2021/05/12 12:00 a.m.•58 views

(0Day) Siemens Solid Edge Viewer PRT File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.1AI score0.02029EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/05/12 12:00 a.m.•3 views

PT-2021-17479

Name of the Vulnerable Software and Affected Versions KeyShot versions prior to v10.1 Datakit Software libraries CatiaV5 3dRead, CatiaV6 3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot versions v10.1 and prior Description The issue arises from the lack of proper validation of...

7.8CVSS0.02029EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2019/05/08 12:00 a.m.•13 views

Panasonic FPG-PRT-S Communications Adapter Detection

Binary data 755255.prm...

7.3AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/05/23 12:00 a.m.•8 views

CVE-2017-8913: Improper Restriction of XML External Entity Reference

The Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity XXE attacks via a crafted XML document in a request to irj/servlet/prt/portal/prtroot/com.sap.visualcomposer.BIKit.default, aka SAP Security Note 2386873...

8.8CVSS7.9AI score0.01393EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/05/23 12:00 a.m.•2 views

PT-2017-18618

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS JAVA version 7.5 Description The issue allows remote authenticated users to conduct XML External Entity XXE attacks. This is achieved by sending a crafted XML document in a request to the...

8.8CVSS0.01393EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/04/07 12:00 a.m.•10 views

CVE-2016-3975: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to inject arbitrary web script or HTML via the navigationTarget parameter to irj/servlet/prt/portal/prteventname/XXX/prtroot/com.sapportals.navigation.testComponent.NavigationURLTester, aka SAP...

6.1CVSS6.4AI score0.01611EPSS
SaveExploits2References2
Rows per page
Query Builder