WordPress 3D viewer – Embed 3D Models Plugin < 1.3.4 is vulnerable to Cross Site Scripting (XSS)

Software 3D viewer – Embed 3D Models Type Plugin Vulnerable versions 1.3.4 Fixed in 1.3.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 42920a97a20a Credits Rafie Muhammad...

WordPress Panorama Viewer – 360 Degree Image + Video Viewer Plugin < 1.0.9 is vulnerable to Cross Site Scripting (XSS)

Software Panorama Viewer – 360 Degree Image + Video Viewer Type Plugin Vulnerable versions 1.0.9 Fixed in 1.0.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 90a4b4196c3c Credits...

PT-2023-9084 · Trimble · Trimble Sketchup Viewer

Name of the Vulnerable Software and Affected Versions: Trimble SketchUp Viewer affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this issue, where...

Citrix session disconnects unexpectedly which appears to be a CWA Crash

The users ICA session simply drops after a few seconds of turning grey. The cause seems to be a Workspace App crash, a dump file is created of the wfice32 process and the application crash is logged in event viewer. Error event: Faulting application name: WFICA32.EXE, version: 22.10.0.15, time...

(0Day) Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2023-31405 Log Injection vulnerability in SAP NetWeaver AS for Java (Log Viewer)

SAP NetWeaver AS for Java - versions ENGINEAPI 7.50, SERVERCORE 7.50, J2EE-APPS 7.50, allows an unauthenticated attacker to craft a request over the network which can result in unwarranted modifications to a system log without user interaction. There is no ability to view any information or any...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to reading beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to reading beyond the buffer in memory. Exploiting this...

Blank Windows Display when Open Citrix Workspace APP

When opening Citrix Workspace App, it displays blank. User cannot input store's URL or username&password to login. However, the ICA session can be launched through browser. It shows msedgewebview2.exe crashed because tsafedoc64.dll does not meet the Microsoft signing level requirement in Event...

Siemens Solid Edge Viewer DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

编号撤回

Acd Systems ACDSee Free is a free version of image viewer from Acd Systems, USA. The product features image management, image editing, image browsing and image manipulation. This CVE number has been withdrawn...

Design/Logic Flaw

?All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in memory. An attacker with access to system files could open a file to load the document into memory, including sensitive information associated with document, such as password. The attacker could then obtain...

CVE-2023-3395

​All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in memory. An attacker with access to system files could open a file to load the document into memory, including sensitive information associated with document, such as password. The attacker could then obtain...

CVE-2023-3395

​All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in memory. An attacker with access to system files could open a file to load the document into memory, including sensitive information associated with document, such as password. The attacker could then obtain...

Rotate the Citrix Cloud SAML signing certificate used by ADFS relying party trust

On ADFS server -- Click on Event Viewer -- Applications -- ADFS -- Admin -- search for the error log at the time-stamp you replicated the login. If you see the following error in the ADFS event logs: Error: "Encountered error during federation passive request. Additional Data Protocol Name: Saml...

The vulnerability of the 3D viewing tool JT and JT2Go, as well as the Teamcenter Visualization lifecycle management system, allows a perpetrator to trigger a service failure.

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system lies in the handling of the zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure during the analysis of a specially created CGM file...

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information when analyzing a specially...

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system allows a perpetrator to execute arbitrary code.

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of the current process while...

The vulnerability of the software lies in the ability to increase the effective working time of components and equipment, as well as optimize resource utilization in the SAP 3D Visual Enterprise Viewer. This vulnerability stems from the possibility of writing data beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the software for increasing the effective working time of components and equipment, as well as optimizing resource usage in the SAP 3D Visual Enterprise Viewer, is related to the ability to write data beyond the buffer in memory. Exploiting this vulnerability allows a malicio...

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system allows a perpetrator to execute arbitrary code.

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of the current process while analyzi...

XWiki Platform 安全漏洞

XWiki Platform is a suite of Wiki platforms for creating Web collaboration applications from the XWiki Foundation in France. A security vulnerability exists in XWiki Platform versions 7.3-milestone-1 and earlier, which stems from a vulnerability that allows a user with view privileges to a docume...