CVE-2023-30795

CVE-2023-30795 affects Siemens JT Open (pre-11.4), JT Utilities (pre-13.4), and Parasolid (pre- v34.0.253, v34.1.243, v35.0.177, v35.1.073). The flaw is an out-of-bounds read past the end of an allocated structure while parsing specially crafted JT files, enabling code execution in the process co...

CVE-2023-30795

A vulnerability has been identified in JT Open All versions V11.4, JT Utilities All versions V13.4, Parasolid V34.0 All versions V34.0.253, Parasolid V34.1 All versions V34.1.243, Parasolid V35.0 All versions V35.0.177, Parasolid V35.1 All versions V35.1.073. The affected applications contain an...

CVE-2023-30795

A vulnerability has been identified in JT Open All versions V11.4, JT Utilities All versions V13.4, Parasolid V34.0 All versions V34.0.253, Parasolid V34.1 All versions V34.1.243, Parasolid V35.0 All versions V35.0.177, Parasolid V35.1 All versions V35.1.073. The affected applications contain an...

Siemens 多款产品 缓冲区错误漏洞

JT Open Toolkit is an Application Programming Interface API for software developers who support JT, a publicly available data format developed by Siemens Digital Industry Software for a wide range of communication, visualization, numerical modeling, and a variety of other purposes.Parasolid is a ...

PT-2023-4436 · Jt Open +1 · Jt Open +1

Name of the Vulnerable Software and Affected Versions: JT Open versions prior to V11.4 JT Utilities versions prior to V13.4 Description: A vulnerability has been identified in the affected applications, which contain an out of bounds read past the end of an allocated structure while parsing...

PT-2023-4895 · Siemens · Jt Utilities +2

Name of the Vulnerable Software and Affected Versions: JT Open versions prior to V11.4 JT Utilities versions prior to V13.4 Parasolid V34.0 versions prior to V34.0.253 Parasolid V34.1 versions prior to V34.1.243 Parasolid V35.0 versions prior to V35.0.177 Parasolid V35.1 versions prior to V35.1.0...

CVE-2023-3322 Code Execution through overwriting service executable in utilities directory

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts...

[SECURITY] Fedora 37 Update: ghostscript-9.56.1-8.fc37

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

The vulnerability of the demangle_template function in the cplus-dem.c component of the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the demangletemplate function in the cplus-dem.c component of the GNU Binutils development environment is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

Malicious code in firefly-utilities-helper-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7d1e40a9479f8d7f46dde5d530c7da4a5ac550607ec867806525a3bb749d6e76 The OpenSSF Package Analysis project identified 'firefly-utilities-helper-ts' @ 1.1.14 npm as malicious. It is considered malicious because: - T...

The vulnerability of the Utilities component in Oracle Java SE and Java SE Embedded software platforms allows a attacker to trigger a service failure.

The vulnerability of the Utilities component in Oracle Java SE and Java SE Embedded software platforms is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2023-21250

In gattendoperation of gattutils.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

MULTI#STORM Campaign Sets Sights on India and U.S. with RAT

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The MULTISTORM phishing campaign employs JavaScript files to disseminate RATs throughout compromised systems. This intricate attack utilizes a multi-stage procedure that commences when the victim engages...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that originates in ForegroundUtils in ForegroundUtils.java, where due to a logic error in the code, the application can read NFC tag data while in the background, which could lead to...

The vulnerability in the set of Sysinternals system utilities for Windows operating systems allows a hacker to trigger a service failure.

The vulnerability in the Sysinternals system utilities for Windows operating systems is related to the improper release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

@backstage/plugin-scaffolder-backend (>=0.0.0-nightly-2021712211 <=0.15.24-next.0), @backstage/plugin-scaffolder-backend-module-confluence-to-markdown (>=0.0.0-nightly-20230325022054 <=0.0.0-nightly-20230801022410) +8 more potentially affected by CVE-2023-35926 via @backstage/plugin-scaffolder-backend (>=0.0.0-nightly-20220708025041 <=0.18.0)

@backstage/plugin-scaffolder-backend NPM version =0.0.0-nightly-20220708025041, =0.0.0-nightly-2021712211, =0.0.0-nightly-20230325022054, =0.0.0-nightly-2022122206, =0.0.0-nightly-2022122206, =0.0.0-nightly-20230112022659, =0.0.0-nightly-2022122206, =1.0.8, =1.0.0, =1.0.0, =2.2.0 -...

Malicious code in mfe-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 976982bf72cee0087094ae0b3d8c7b6bfd8e5efd18fb3efa3f192b175f6df360 The OpenSSF Package Analysis project identified 'mfe-test-utils' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

Rogue Android Apps Target Pakistani Individuals in Sophisticated Espionage Campaign

Individuals in the Pakistan region have been targeted using two rogue Android apps available on the Google Play Store as part of a new targeted campaign. Cybersecurity firm Cyfirma attributed the campaign with moderate confidence to a threat actor known as DoNot Team, which is also tracked as...

Fedora: Security Advisory for mariadb (FEDORA-2023-b4ff407364)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-8971

Name of the Vulnerable Software and Affected Versions shadow-utils affected versions not specified Description A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the...