PT-2022-21171 · Sap · Sap 3D Visual Enterprise Viewer

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer affected versions not specified Description: The issue occurs when a user opens manipulated Jupiter Tesselation .jt, JTReader.x3d files from untrusted sources in the viewer, causing the application to crash and...

PT-2022-21169 · Sap · Sap 3D Visual Enterprise Viewer

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer affected versions not specified Description: The issue occurs when a user opens manipulated JPEG 2000 .jp2, jp2k.x3d files received from untrusted sources in SAP 3D Visual Enterprise Viewer. This causes the...

CVE-2022-32235: Improper Input Validation

When a user opens manipulated AutoCAD .dwg, TeighaTranslator.exe files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2022-30308

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection...

CVE-2022-30309: Incorrect Authorization

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection...

CVE-2022-30308: Incorrect Authorization

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection...

CVE-2019-25062

A vulnerability was found in Sricam IP CCTV Camera and classified as critical. This issue affects some unknown processing of the component Device Viewer. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be us...

CVE-2019-25063

A vulnerability was found in Sricam IP CCTV Camera. It has been classified as critical. Affected is an unknown function of the component Device Viewer. The manipulation leads to memory corruption. Local access is required to approach this attack...

Memory corruption

A vulnerability was found in Sricam IP CCTV Camera. It has been classified as critical. Affected is an unknown function of the component Device Viewer. The manipulation leads to memory corruption. Local access is required to approach this attack...

Memory corruption

A vulnerability was found in Sricam IP CCTV Camera and classified as critical. This issue affects some unknown processing of the component Device Viewer. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be us...

Malicious code in tangerine-state-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83cabb2630e510d0c9b63f6c164c5825dd5325a370fd8db846ead2bb3ed782a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6415 Malicious code in tangerine-state-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83cabb2630e510d0c9b63f6c164c5825dd5325a370fd8db846ead2bb3ed782a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-30309

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection...

Sricam IP CCTV Camera 缓冲区错误漏洞

Sricam IP CCTV Camera is a network camera from Sricam China.An out-of-bounds write vulnerability exists in Sricam Device Viewer. An attacker can exploit this vulnerability to cause memory corruption...

Sricam IP CCTV Camera 缓冲区错误漏洞

Sricam IP CCTV Camera is a network camera from Sricam China.An out-of-bounds write vulnerability exists in Sricam Device Viewer. An attacker can exploit this vulnerability to cause memory corruption...

Debian: Security Advisory (DLA-3045-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3045-1] php-horde-mime-viewer security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3045-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb June 06, 2022 https://wiki.debian.org/LTS -...

Debian DLA-3045-1 : php-horde-mime-viewer - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-3045 advisory. - lib/Horde/Mime/Viewer/Ooo.php in Horde MimeViewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This...

DLA-3045-1 php-horde-mime-viewer - security update

Bulletin has no description...

CVE-2019-25062 Sricam IP CCTV Camera Device Viewer stack-based overflow

A vulnerability was found in Sricam IP CCTV Camera and classified as critical. This issue affects some unknown processing of the component Device Viewer. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be us...