CVE-2022-41285

A vulnerability has been identified in JT2Go All versions V14.1.0.6, Teamcenter Visualization V13.2 All versions V13.2.0.12, Teamcenter Visualization V13.3 All versions V13.3.0.8, Teamcenter Visualization V14.0 All versions V14.0.0.4, Teamcenter Visualization V14.1 All versions V14.1.0.6. The...

Siemens部分产品 缓冲区错误漏洞

Siemens Teamcenter Visualization is a team collaboration software for designing 2D and 3D scenes. Siemens JT2GO is a JT file viewer. Siemens Teamcenter Visualization and JT2Go are vulnerable to an out-of-bounds read vulnerability that can be exploited by attackers to execute code in the context o...

CVE-2022-45484

Siemens VT/JT2Go vulnerability CVE-2022-45484 involves an out-of-bounds read in CCITT_G4Decode.dll when parsing RAS files. Affects JT2Go (all versions before 14.1.0.6) and Teamcenter Visualization: V13.2 before 13.2.0.12, V13.3 before 13.3.0.8/note updates exist for 13.3.0.8+), V14.0 before 14.0....

Siemens部分产品 安全漏洞

Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. Siemens JT2GO is a JT file viewer. Siemens Teamcenter Visualization and JT2Go contain a security vulnerability that can be exploited by attackers to The vulnerability can b...

CVE-2022-41281

CVE-2022-41281 affects Siemens JT2Go and Teamcenter Visualization (multiple versions). The vulnerability is an out-of-bounds read in CGM_NIST_Loader.dll when parsing CGM files, which can allow code execution in the current process. Affected products include JT2Go ≤14.1.0.6, Teamcenter Visualizati...

Siemens Teamcenter Visualization and JT2Go

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

PT-2022-25789 · Siemens · Jt2Go +1

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to 14.1.0.6 Teamcenter Visualization V13.2 versions prior to 13.2.0.12 Teamcenter Visualization V13.3 versions prior to 13.3.0.8 Teamcenter Visualization V14.0 versions prior to 14.0.0.4 Teamcenter Visualization V14.1...

CVE-2022-41282

A vulnerability has been identified in JT2Go All versions V14.1.0.6, Teamcenter Visualization V13.2 All versions V13.2.0.12, Teamcenter Visualization V13.3 All versions V13.3.0.8, Teamcenter Visualization V14.0 All versions V14.0.0.4, Teamcenter Visualization V14.1 All versions V14.1.0.6. The...

CVE-2022-45484

A vulnerability has been identified in JT2Go All versions V14.1.0.6, Teamcenter Visualization V13.2 All versions V13.2.0.12, Teamcenter Visualization V13.3 All versions V13.3.0.9, Teamcenter Visualization V13.3 All versions V13.3.0.8, Teamcenter Visualization V14.0 All versions V14.0.0.5,...

CVE-2022-41288

A vulnerability has been identified in JT2Go All versions V14.1.0.6, Teamcenter Visualization V13.2 All versions V13.2.0.12, Teamcenter Visualization V13.3 All versions V13.3.0.8, Teamcenter Visualization V14.0 All versions V14.0.0.4, Teamcenter Visualization V14.1 All versions V14.1.0.6. The...

PT-2022-25791 · Siemens · Teamcenter Visualization +1

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to 14.1.0.6 Teamcenter Visualization V13.2 versions prior to 13.2.0.12 Teamcenter Visualization V13.3 versions prior to 13.3.0.8 Teamcenter Visualization V14.0 versions prior to 14.0.0.4 Teamcenter Visualization V14.1...

PT-2022-25793 · Siemens · Jt2Go +1

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to 14.1.0.6 Teamcenter Visualization V13.2 versions prior to 13.2.0.12 Teamcenter Visualization V13.3 versions prior to 13.3.0.8 Teamcenter Visualization V14.0 versions prior to 14.0.0.4 Teamcenter Visualization V14.1...

PT-2022-6394 · Siemens · Teamcenter Visualization +1

Name of the Vulnerable Software and Affected Versions: APDFL.dll affected versions not specified Description: The issue is related to an out-of-bounds write past a fixed-length heap-based buffer in the APDFL.dll while parsing specially crafted PDF files. This could allow an attacker to execute co...

CVE-2022-41282

CVE-2022-41282 is an out-of-bounds read vulnerability in the CGM_NIST_Loader.dll used by Siemens JT2Go and Teamcenter Visualization. When parsing CGM files, an out-of-bounds read can allow code execution in the current process. Affected products and versions include JT2Go all versions before 14.1...

CVE-2022-41285

CVE-2022-41285 concerns a use-after-free vulnerability in the CGM_NIST_Loader.dll across Siemens JT2Go and Teamcenter Visualization versions (JT2Go < 14.1.0.6; Teamcenter Visualization V13.2 < 13.2.0.12; V13.3 < 13.3.0.8; V14.0 < 14.0.0.4; V14.1

CVE-2022-41283

CVE-2022-41283 affects Siemens JT2Go and Teamcenter Visualization: the CGM_NIST_Loader.dll contains an out-of-bounds write when parsing CGM files, allowing code execution in the current process. Affected versions include JT2Go all versions before 14.1.0.6 and Teamcenter Visualization 13.2 before ...

CVE-2022-41279

Summary (CVE-2022-41279) A null pointer dereference in CGM_NIST_Loader.dll occurs while parsing specially crafted CGM files, leading to a crash/denial of service for affected Siemens JT2Go and Teamcenter Visualization products. Affected versions include JT2Go < 14.1.0.6 and Teamcenter Visualiz...

CVE-2022-41947

CVE-2022-41947 describes a cross-site scripting (XSS) vulnerability in DHIS 2 core where an authenticated user can upload a file containing embedded JavaScript, which could be triggered when another authenticated user opens the file in a browser. Affected versions are DHIS 2 prior to 2.36.12.1, 2...

CVE-2022-41947 Cross-site Scripting with user-uploaded files in dhis2-core

DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. Through various features of DHIS2, an authenticated user may be able to upload a file which includes embedded javascript. The user could then potentially trick another authenticated...

CVE-2022-41949

CVE-2022-41949 affects DHIS 2 core. An authenticated DHIS2 user can craft a request that makes the server fetch external resources, enabling a semi‑blind Server-Side Request Forgery (SSRF) in the dhis2-core component. This can allow an attacker to identify vulnerable services not publicly exposed...