CVE-2022-29265: Improper Restriction of XML External Entity Reference

Multiple components in Apache NiFi 0.0.1 to 1.16.0 do not restrict XML External Entity references in the default configuration. The Standard Content Viewer service attempts to resolve XML External Entity references when viewing formatted XML files. The following Processors attempt to resolve XML...

Sante DICOM Viewer Pro J2K File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

PT-2022-19153 · Sante · Sante Dicom Viewer Pro

Name of the Vulnerable Software and Affected Versions: Sante DICOM Viewer Pro version 11.9.2 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. Th...

The vulnerabilities of PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, Adobe Acrobat Reader 2020 are related to violations of secure design principles. These vulnerabilities allow attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to violations of secure design principles. Exploiting the...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to information disclosure, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to information disclosure. Exploiting these vulnerabiliti...

Cannot start app **** - Issue when Storefront STA's configure as https.

Issue accessing the url of storefront store through Citrix ADC. Users are able to access storefront, but when users try to open any application it gives an error: Cannot start app However, when accessing the storefront url internally using store URL, all the applications open without problems,...

PT-2022-19563 · Rainloop · Rainloop

Name of the Vulnerable Software and Affected Versions: RainLoop versions through 1.6.0 Description: The issue allows for XSS via a crafted email message in the Email Viewer. This can potentially be exploited to steal users' emails. Recommendations: For versions through 1.6.0, update to a version...

CVE-2020-6099

An exploitable code execution vulnerability exists in the file format parsing functionality of Graphisoft BIMx Desktop Viewer 2019.2.2328. A specially crafted file can cause a heap buffer overflow resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerabilit...

CVE-2020-6099

An exploitable code execution vulnerability exists in the file format parsing functionality of Graphisoft BIMx Desktop Viewer 2019.2.2328. A specially crafted file can cause a heap buffer overflow resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerabilit...

Heap overflow

An exploitable code execution vulnerability exists in the file format parsing functionality of Graphisoft BIMx Desktop Viewer 2019.2.2328. A specially crafted file can cause a heap buffer overflow resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerabilit...

CVE-2020-6099

An exploitable code execution vulnerability exists in the file format parsing functionality of Graphisoft BIMx Desktop Viewer 2019.2.2328. A specially crafted file can cause a heap buffer overflow resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerabilit...

CVE-2020-6099

CVE-2020-6099 affects Graphisoft BIMx Desktop Viewer 2019.2.2328. Talos confirms an exploitable heap buffer/overflow in the BIMx file format parsing code, where processing a crafted resource can lead to code execution. The vulnerability is tied to the resource parsing flow in BIMx.exe and, per Ta...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-33126)

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. SAP 3D Visual Enterprise Viewer version 9.0 is vulnerable to an input validation error that could be exploited to crash the application and temporarily disable users until the application is restarted. The application can be...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-33124)

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces.SAP 3D Visual Enterprise Viewer is vulnerable to a...

CVE-2020-6099: Integer Overflow to Buffer Overflow

An exploitable code execution vulnerability exists in the file format parsing functionality of Graphisoft BIMx Desktop Viewer 2019.2.2328. A specially crafted file can cause a heap buffer overflow resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerabilit...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-33125)

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces. SAP 3D Visual Enterprise Viewer is vulnerable to ...

Graphisoft BIMx Desktop Viewer 输入验证错误漏洞

Graphisoft BIMx Desktop Viewer is a shared desktop software from Graphisoft Hungary. This software enables users who own the software to share desktops. An input validation error vulnerability exists in Graphisoft BIMx Desktop Viewer version 2019.2.2328, which stems from an exploitable code...

PT-2022-9049 · Graphisoft · Graphisoft Bimx Desktop Viewer

Name of the Vulnerable Software and Affected Versions: Graphisoft BIMx Desktop Viewer version 2019.2.2328 Description: An exploitable code execution issue exists in the file format parsing functionality. A specially crafted file can cause a heap buffer overflow, resulting in code execution. An...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-33128)

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. SAP 3D Visual Enterprise Viewer - version 9.0 is vulnerable to an input validation error that could be exploited to crash the application and temporarily disable the user until the application is restarted. The application can ...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of memory after it is freed. Exploiting this...