319 matches found
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on affected installations of IronCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of STP files...
CVE-2022-43609
This vulnerability allows remote attackers to execute arbitrary code on affected installations of IronCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of STP files...
CVE-2022-43609
This vulnerability allows remote attackers to execute arbitrary code on affected installations of IronCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of STP files...
CVE-2022-43609
CVE-2022-43609 affects IronCAD. The vulnerability stems from parsing STP files where, when handling the VECTOR element, a pointer is not properly initialized before access, enabling remote code execution with user interaction (visiting a malicious page or opening a malicious file). Descriptions f...
Siemens Solid Edge Viewer STP File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
K39604784: BIG-IP system incorrectly forwards VLAN-tagged frames with STP at Pass Through mode
Security Advisory Description The BIG-IP system incorrectly forwards VLAN-tagged frames, even if the VLAN is not defined on the ingress interface, when Spanning Tree Protocol STP is set to Pass Through mode. Note : The following BIG-IP platforms are not affected: BIG-IP 2000s/2200s BIG-IP...
Siemens Solid Edge Memory Misreference Vulnerability (CNVD-2023-15421)
Siemens Solid Edge is a 3D CAD software from Siemens Germany. The software can be used for part design, assembly design, sheet metal design, welding design and other industries. A memory misreference vulnerability exists in Siemens Solid Edge. An attacker can exploit this vulnerability by parsing...
SUSE CVE-2018-6611
soundlib/Loadstp.cpp in OpenMPT through 1.27.04.00, and libopenmpt before 0.3.6, has an out-of-bounds read via a malformed STP file...
CVE-2023-24581
A vulnerability has been identified in Solid Edge SE2022 All versions V222.0MP12, Solid Edge SE2022 All versions, Solid Edge SE2023 All versions V223.0Update2. The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted STP files. An...
Design/Logic Flaw
A vulnerability has been identified in Solid Edge SE2022 All versions V222.0MP12, Solid Edge SE2022 All versions, Solid Edge SE2023 All versions V223.0Update2. The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted STP files. An...
CVE-2023-24581
CVE-2023-24581 affects Siemens Solid Edge SE2022/SE2023. A use‑after‑free vulnerability can be triggered while parsing specially crafted STP files, enabling code execution in the current process. Affected: Solid Edge SE2022 < V222.0MP12 and SE2023
CVE-2023-24581
A vulnerability has been identified in Solid Edge SE2022 All versions V222.0MP12, Solid Edge SE2022 All versions, Solid Edge SE2023 All versions V223.0Update2. The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted STP files. An...
CVE-2023-24581
A vulnerability has been identified in Solid Edge SE2022 All versions V222.0MP12, Solid Edge SE2022 All versions, Solid Edge SE2023 All versions V223.0Update2. The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted STP files. An...
Siemens Solid Edge 资源管理错误漏洞
Siemens Solid Edge is a 3D CAD software from Siemens Germany. The software can be used for part design, assembly design, sheet metal design, welding design and other industries. A memory misreference vulnerability exists in Siemens Solid Edge. An attacker can exploit this vulnerability by parsing...
stp-woodflooring.com Cross Site Scripting vulnerability OBB-3080056
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2022-6626 · Siemens · Solid Edge
Name of the Vulnerable Software and Affected Versions: Solid Edge SE2023 versions prior to V223.0 Update 3 Description: A memory corruption issue has been identified in the affected application while parsing specially crafted STP files. This could allow an attacker to execute code in the context ...
(0Day) IronCAD STP File Parsing Uninitialized Pointer Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of IronCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of STP files...
PT-2022-5805 · Ironcad · Ironcad
Name of the Vulnerable Software and Affected Versions: IronCAD affected versions not specified Description: The issue is related to the parsing of STP files, where an uninitialized pointer is used, allowing remote attackers to execute arbitrary code on affected installations. User interaction is...
stp-sv.de Cross Site Scripting vulnerability OBB-2717632
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GSD-2022-1000538 scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
scsi: pm8001: Fix use-after-free for aborted SSP/STP sastask This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.11 by commit...