Lucene search
K

2715 matches found

ICS
ICS
added 2022/07/12 12:0 a.m.43 views

Siemens Datalogics File Parsing Vulnerability

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: Teamcenter Visualization and JT2Go Vulnerability: Heap-based buffer Overflow 2. UPDATE This updated advisory is a follow-up to the original advisory titled ICSA-22-195-07 Siemens Datalogics file Parsing...

7.8CVSS8.2AI score0.00421EPSS
Exploits0References11
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.5 views

glance 路径遍历漏洞

glance is a dictionary visualization repository open source by nlpweb. glance 2014-06-27 version and earlier versions have a security vulnerability , the vulnerability stems from Flask's sendfile function call incorrectly leads to absolute path traversal...

9.3CVSS8.3AI score0.01118EPSS
Exploits1References2
CNVD
CNVD
added 2022/07/08 12:0 a.m.30 views

Apache Superset Access Control Error Vulnerability

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. Apache Superset suffers from an Access Control Error vulnerability that stems from improper access restrictions. A remote attacker could exploit the vulnerability to bypass implemented security...

4.3CVSS4.3AI score0.01134EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.5 views

The vulnerability of the CGM_NIST_Loader.dll library, a tool for 3D JT and JT2Go viewing, as well as the Teamcenter Visualization lifecycle management system, allows attackers to execute arbitrary code.

The vulnerability of the CGMNISTLoader.dll library, used by the 3D JT and JT2Go visualization tools, as well as the Teamcenter Visualization lifecycle management system, is related to the re-release of memory during syntax analysis of CGM files. Exploiting this vulnerability could allow attackers...

7.8CVSS7.6AI score0.00727EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.5 views

The vulnerability of the CGM_NIST_Loader.dll library, a tool for 3D JT and JT2Go viewing, as well as the Teamcenter Visualization lifecycle management system, allows attackers to trigger a service failure.

The vulnerability of the CGMNISTLoader.dll library, used by the 3D JT and JT2Go visualization tools, as well as the Teamcenter Visualization lifecycle management system, is related to errors in pointer assignment during CGM file syntax analysis. Exploiting this vulnerability can allow attackers t...

3.3CVSS5.9AI score0.00497EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.6 views

The vulnerability of the Mono_Loader.dll library, used by 3D JT and JT2Go visualization tools, as well as the Teamcenter Visualization lifecycle management system, allows a hacker to trigger a service failure.

The vulnerability of the MonoLoader.dll library, which is used by 3D JT and JT2Go visualization tools, as well as the Teamcenter Visualization lifecycle management system, is related to a numerical overflow issue during syntax analysis of TG4 files. Exploiting this vulnerability can allow attacke...

3.3CVSS5.9AI score0.00497EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.3 views

The vulnerability of the CGM_NIST_Loader.dll library, a tool for 3D JT and JT2Go viewing, as well as the Teamcenter Visualization lifecycle management system, allows attackers to trigger a service failure.

The vulnerability of the CGMNISTLoader.dll library, used by the 3D JT and JT2Go visualization tools, as well as the Teamcenter Visualization lifecycle management system, is related to errors in pointer assignment during CGM file syntax analysis. Exploiting this vulnerability can allow attackers t...

3.3CVSS5.9AI score0.00497EPSS
Exploits0References4Affected Software2
OpenVAS
OpenVAS
added 2022/07/06 12:0 a.m.15 views

Fedora: Security Advisory for golang-github-google-pprof (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.05994EPSS
Exploits4References2
GithubExploit
GithubExploit
added 2022/07/04 1:55 p.m.470 views

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 Visualization, Fuzzing, Exploit and Patch...

7.8CVSS8.3AI score0.99305EPSS
Exploits81
Fedora
Fedora
added 2022/07/04 1:35 a.m.24 views

[SECURITY] Fedora 36 Update: golang-github-google-pprof-0-16.20210802gitc50bf4f.fc36

Pprof is a tool for visualization and analysis of profiling data. Pprof reads a collection of profiling samples in profile.proto format and generates reports to visualize and help analyze the data. It can generate both text and graphical reports through the use of the dot visualization package...

9.3CVSS8.8AI score0.05994EPSS
Exploits4
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.5 views

The vulnerability of the Tiff_Loader.dll library, a tool for 3D JT JT2Go viewing and Teamcenter Visualization lifecycle management system, allows a hacker to trigger a service failure.

The vulnerability of the TiffLoader.dll library, used by 3D JT and JT2Go visualization tools, as well as the Teamcenter Visualization lifecycle management system, stems from a cycle that requires an unavailable exit condition during syntax analysis of TIFF files. Exploiting this vulnerability can...

3.3CVSS5.9AI score0.00497EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.6 views

The vulnerability of the UI & Visualization component of the Oracle Hyperion BI+ service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the UI & visualization component of the Oracle Hyperion BI+ service exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information using the HTTP protocol...

4.3CVSS5.9AI score0.01093EPSS
Exploits0References3Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:11 p.m.5 views

Malicious code in visualization-raphael-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 880e10929215a420f57b8d378c3a98fdc1c514607a5c32cc7a19262ed887c6a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2022/06/20 8:11 p.m.7 views

MAL-2022-6946 Malicious code in visualization-raphael-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 880e10929215a420f57b8d378c3a98fdc1c514607a5c32cc7a19262ed887c6a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Chainguard
Chainguard
added 2022/06/16 11:13 p.m.7 views

GHSA-Q874-G24W-4Q9G vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

7.3AI score
Exploits0
Chainguard
Chainguard
added 2022/06/14 9:15 p.m.48 views

CVE-2022-29241 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

9CVSS8.8AI score0.00826EPSS
Exploits0
Wolfi
Wolfi
added 2022/06/14 9:15 p.m.9 views

CVE-2022-29241 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

9CVSS7.1AI score0.00826EPSS
Exploits0
CNVD
CNVD
added 2022/06/09 12:0 a.m.22 views

Barco Control Room Cross-Site Scripting Vulnerability

Barco Control Room is a visualization and collaboration solution from Barco Belgium. Used to build control rooms, the Barco Control Room Management Suite web application version 3.14 previously contained a cross-site scripting vulnerability that could be exploited by attackers to execute JavaScri...

6.1CVSS3.7AI score0.00525EPSS
Exploits0References1
CNVD
CNVD
added 2022/06/09 12:0 a.m.24 views

Barco Control Room Cross-Site Scripting Vulnerability

Barco Control Room is a visualization and collaboration solution from Barco Belgium. Used to build control rooms, a cross-site scripting vulnerability exists in the Barco Control Room Management Suite web application prior to version 3.14. The vulnerability stems from the URL parameter of the...

6.1CVSS2AI score0.00525EPSS
Exploits0References1
CNVD
CNVD
added 2022/06/09 12:0 a.m.17 views

Barco Control Room Cross-Site Scripting Vulnerability (CNVD-2022-61398)

Barco Control Room is a visualization and collaboration solution from Barco Belgium. Used to build control rooms, a cross-site scripting vulnerability exists in Barco Control Room prior to version 3.14. The vulnerability stems from the osusername parameter of the /checklogin.jsp endpoint not bein...

6.1CVSS2.7AI score0.00525EPSS
Exploits0References1
Rows per page
Query Builder