Lucene search
+L

1966 matches found

CNVD
CNVD
•added 2022/11/09 12:00 a.m.•78 views

Siemens JT2Go and Teamcenter Visualization Buffer Overflow Vulnerability

JT2Go is a 3D JT viewing tool that allows users to view JT, PDF, Solid Edge, PLM XML, and available JT, VFZ, CGM, and TIF data. teamcenter Visualization enables companies to enhance their product lifecycle management PLM environments with a comprehensive family of visualization solutions. The...

7.8CVSS4.6AI score0.00316EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/10/21 12:00 a.m.•46 views

Siemens Solid Edge Viewer DWG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.9AI score0.00248EPSS
SaveExploits0References2
CNVD
CNVD
•added 2022/10/13 12:00 a.m.•66 views

Siemens Solid Edge Heap Buffer Overflow Vulnerability (CNVD-2022-89764)

Siemens Solid Edge is a 3D CAD software from Siemens Germany. A heap buffer overflow vulnerability exists in previous versions of Siemens Solid Edge SE2022MP9. The vulnerability stems from a boundary error in parsing specially crafted DWG files, which is exploited by an attacker to execute code i...

7.8CVSS5.5AI score0.00248EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/10/11 11:15 a.m.•10 views

CVE-2022-37864

A vulnerability has been identified in Solid Edge All Versions SE2022MP9. The affected application contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted DWG files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS6AI score0.00248EPSS
SaveExploits0References2
NVD
NVD
•added 2022/10/11 11:15 a.m.•37 views

CVE-2022-37864

A vulnerability has been identified in Solid Edge All Versions SE2022MP9. The affected application contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted DWG files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS0.00248EPSS
SaveExploits0References1
OSV
OSV
•added 2022/10/11 11:15 a.m.•16 views

CVE-2022-37864

A vulnerability has been identified in Solid Edge All Versions SE2022MP9. The affected application contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted DWG files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS6.1AI score0.00248EPSS
SaveExploits0References1
Prion
Prion
•added 2022/10/11 11:15 a.m.•26 views

Heap overflow

A vulnerability has been identified in Solid Edge All Versions SE2022MP9. The affected application contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted DWG files. This could allow an attacker to execute code in the context of the current process...

4.4CVSS7.8AI score0.00248EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/10/11 12:00 a.m.•79 views

CVE-2022-37864

Siemens Solid Edge prior to SE2022MP9 is affected by CVE-2022-37864, a heap-based buffer overflow when parsing DWG files. It allows code execution in the current process with local attack vector and user interaction required. Mitigation: update to SE2022MP9 or later or avoid untrusted DWG files; ...

7.8CVSS7.8AI score0.00248EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/10/11 12:00 a.m.•46 views

CVE-2022-37864

A vulnerability has been identified in Solid Edge All Versions SE2022MP9. The affected application contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted DWG files. This could allow an attacker to execute code in the context of the current process...

8AI score0.00248EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/10/11 12:00 a.m.•11 views

PT-2022-24116 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge versions prior to SE2022MP9 Description: A vulnerability has been identified in the affected application, which contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted DWG files. This...

7.8CVSS7.8AI score0.00248EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/10/11 12:00 a.m.•17 views

Siemens Solid Edge 缓冲区错误漏洞

Siemens Solid Edge is a 3D CAD software from Siemens Germany. A heap buffer overflow vulnerability exists in previous versions of Siemens Solid Edge SE2022MP9. The vulnerability stems from a boundary error in parsing specially crafted DWG files, which is exploited by an attacker to execute code i...

7.8CVSS7.6AI score0.00248EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/11 12:00 a.m.•0 views

CVE-2022-37864: Heap-based Buffer Overflow

A vulnerability has been identified in Solid Edge All Versions SE2022MP9. The affected application contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted DWG files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS7.4AI score0.00248EPSS
SaveExploits0References3
ICS
ICS
•added 2022/10/11 12:00 a.m.•37 views

Siemens Solid Edge

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: Solid Edge Vulnerability: Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code in the current process. 3...

7.8CVSS8AI score0.00248EPSS
SaveExploits0References11
OSV
OSV
•added 2022/10/03 3:15 p.m.•16 views

CVE-2022-33886

A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer while parsing through Autodesk AutoCAD 2023, 2022, 2021, 2020, and Maya 2023 and 2022. The vulnerability exists because the application fails to handle crafted MODEL and SLDPRT files, which causes an...

7.8CVSS6.2AI score0.01022EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/09/20 12:00 a.m.•13 views

Intel(R) SSD DC 授权问题漏洞

IntelR SSD DC is an internal solid state drive from Intel Corporation USA. A security vulnerability exists in IntelR SSD DC Products that stems from improper authentication in its firmware that could allow an unauthenticated user to potentially escalate privileges through physical access...

6.8CVSS6.5AI score0.00308EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/09/20 12:00 a.m.•18 views

Intel(R) SSD DC 安全漏洞

IntelR SSD DC is an internal solid state drive from Intel Corporation USA. A security vulnerability exists in IntelR SSD DC Products, which stems from a failure in the firmware protection mechanism that could lead to information disclosure via local access by a privileged user...

4.4CVSS5.1AI score0.00173EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/09/20 12:00 a.m.•19 views

Intel(R) SSD DC 安全漏洞

IntelR SSD DC is an internal solid state drive from Intel Corporation USA. A security vulnerability exists in IntelR SSD DC Products, which stems from a failure in the firmware protection mechanism that could lead to information disclosure via local access by a privileged user...

7.9CVSS5.1AI score0.00195EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/09/20 12:00 a.m.•15 views

PT-2022-10203 · Intel · Intel Ssd Dc Products

Name of the Vulnerable Software and Affected Versions: IntelR SSD DC Products affected versions not specified Description: The issue is related to a protection mechanism failure in the firmware of some IntelR SSD DC Products. This failure may allow a privileged user to potentially enable...

7.9CVSS4.2AI score0.00195EPSS
SaveExploits0References4
vulnersOsv
vulnersOsv
•added 2022/09/16 5:44 p.m.•8 views

@cdoor/core (>=0.0.1, <=0.0.3), @dci-lint/cmd-api-server (>=0.5.0, <=0.6.1) +39 more potentially affected by CVE-2022-36083 via jose (>=3.7.0, <=3.20.3)

jose NPM version =3.7.0, =0.0.1, =0.5.0, =0.5.0, =0.5.0, =0.1.0, =0.1.0, =0.0.3-3.12.3, =1.8.2-feat1608-jose3-915162334-6607-1623076209.0, =1.8.2-feat1608-jose3-915162334-6607-1623076209.0, =1.8.2-feat1608-jose3-915162334-6607-1623076209.0, =1.8.2-feat1608-jose3-915162334-6607-1623076209.0, =8.1....

5.3CVSS6.5AI score0.01536EPSS
SaveExploits1
CNVD
CNVD
•added 2022/09/14 12:00 a.m.•84 views

Siemens Simcenter Femap and Parasolid Uninitialized Pointer Access Vulnerability

Parasolid is a 3D geometric modeling tool that supports a variety of techniques, including solid modeling, direct editing, and free-form/sheet modeling.Simcenter Femap is an advanced simulation application for creating, editing, and examining finite element models of complex products or...

7.8CVSS3.2AI score0.00255EPSS
SaveExploits0References1
Rows per page
Query Builder