CVE-2022-29032

The CVE-2022-29032 entry applies to Siemens JT2Go and Teamcenter Visualization (versions before 13.3.0.3/14.0.0.1). The CGM_NIST_Loader.dll contains a double-free flaw when parsing specially crafted CGM files, which could allow code execution in the current process. Affected products: JT2GO (all ...

CVE-2022-29032

A vulnerability has been identified in JT2Go All versions V13.3.0.3, Teamcenter Visualization V13.3 All versions V13.3.0.3, Teamcenter Visualization V14.0 All versions V14.0.0.1. The CGMNISTLoader.dll library contains a double free vulnerability while parsing specially crafted CGM files. An...

CVE-2022-29031

CVE-2022-29031 affects Siemens JT2Go and Teamcenter Visualization. The CGM_NIST_Loader.dll contains a null pointer dereference when parsing specially crafted CGM files, which can crash the application and cause a denial-of-service. Affected: JT2Go (all versions < 13.3.0.3); Teamcenter Visualiz...

CVE-2022-29031

A vulnerability has been identified in JT2Go All versions V13.3.0.3, Teamcenter Visualization V13.3 All versions V13.3.0.3, Teamcenter Visualization V14.0 All versions V14.0.0.1. The CGMNISTLoader.dll contains a null pointer dereference vulnerability while parsing specially crafted CGM files. An...

CVE-2022-29030

The CVE-2022-29030 entry affects Siemens JT2Go and Teamcenter Visualization: specifically JT2Go all versions before 13.3.0.3, Teamcenter Visualization v13.3 before 13.3.0.3, and v14.0 before 14.0.0.1. The root cause is an integer overflow in Mono_Loader.dll while parsing specially crafted TG4 fil...

CVE-2022-29030

A vulnerability has been identified in JT2Go All versions V13.3.0.3, Teamcenter Visualization V13.3 All versions V13.3.0.3, Teamcenter Visualization V14.0 All versions V14.0.0.1. The MonoLoader.dll library is vulnerable to integer overflow condition while parsing specially crafted TG4 files. An...

CVE-2022-29029

CVE-2022-29029 affects Siemens JT2Go and Teamcenter Visualization (JT2Go all versions before 13.3.0.3; Teamcenter Visualization v13.3 before 13.3.0.3; v14.0 before 14.0.0.1). The CGM_NIST_Loader.dll contains a null pointer dereference while parsing specially crafted CGM files, enabling a denial-o...

CVE-2022-29029

A vulnerability has been identified in JT2Go All versions V13.3.0.3, Teamcenter Visualization V13.3 All versions V13.3.0.3, Teamcenter Visualization V14.0 All versions V14.0.0.1. The CGMNISTLoader.dll contains a null pointer dereference vulnerability while parsing specially crafted CGM files. An...

CVE-2022-29028

CVE-2022-29028 affects Siemens JT2Go and Teamcenter Visualization: the Tiff_Loader.dll can enter an infinite loop while parsing specially crafted TIFF files, potentially crashing the application and causing denial of service. Affected products/versions are JT2GO all versions before 13.3.0.3, Team...

CVE-2022-29033: Access of Uninitialized Pointer

A vulnerability has been identified in JT2Go All versions V13.3.0.3, Teamcenter Visualization V13.3 All versions V13.3.0.3, Teamcenter Visualization V14.0 All versions V14.0.0.1. The CGMNISTLoader.dll library is vulnerable to uninitialized pointer free while parsing specially crafted CGM files. A...

CVE-2022-29032: Double Free

A vulnerability has been identified in JT2Go All versions V13.3.0.3, Teamcenter Visualization V13.3 All versions V13.3.0.3, Teamcenter Visualization V14.0 All versions V14.0.0.1. The CGMNISTLoader.dll library contains a double free vulnerability while parsing specially crafted CGM files. An...

CVE-2022-29031: NULL Pointer Dereference

A vulnerability has been identified in JT2Go All versions V13.3.0.3, Teamcenter Visualization V13.3 All versions V13.3.0.3, Teamcenter Visualization V14.0 All versions V14.0.0.1. The CGMNISTLoader.dll contains a null pointer dereference vulnerability while parsing specially crafted CGM files. An...

CVE-2022-29030: Integer Overflow to Buffer Overflow

A vulnerability has been identified in JT2Go All versions V13.3.0.3, Teamcenter Visualization V13.3 All versions V13.3.0.3, Teamcenter Visualization V14.0 All versions V14.0.0.1. The MonoLoader.dll library is vulnerable to integer overflow condition while parsing specially crafted TG4 files. An...

CVE-2022-29029: NULL Pointer Dereference

A vulnerability has been identified in JT2Go All versions V13.3.0.3, Teamcenter Visualization V13.3 All versions V13.3.0.3, Teamcenter Visualization V14.0 All versions V14.0.0.1. The CGMNISTLoader.dll contains a null pointer dereference vulnerability while parsing specially crafted CGM files. An...

CVE-2022-29028: Loop with Unreachable Exit Condition

A vulnerability has been identified in JT2Go All versions V13.3.0.3, Teamcenter Visualization V13.3 All versions V13.3.0.3, Teamcenter Visualization V14.0 All versions V14.0.0.1. The TiffLoader.dll is vulnerable to infinite loop condition while parsing specially crafted TIFF files. An attacker...

Siemens JT2GO and Teamcenter Visualization

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: JT2GO, Teamcenter Visualization Vulnerabilities: Infinite Loop, Null Pointer Dereference, Integer Overflow to Buffer Overflow, Double Free, Access of Uninitialized Pointer 2. RISK EVALUATION Successful...

Path Traversal in scout-browser

Scout is a Variant Call Format VCF visualization interface. The Pypi package scout-browser is vulnerable to path traversal due to sendfile call in versions prior to 4.52...

GHSA-694V-63FQ-FMR4 Path Traversal in scout-browser

Scout is a Variant Call Format VCF visualization interface. The Pypi package scout-browser is vulnerable to path traversal due to sendfile call in versions prior to 4.52...

Kibana Information Disclosure

The vulnerability of the Kibana data visualization service is related to the exposure of information. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

Microsoft Power BI Spoofing Vulnerability

Microsoft Power BI is an interactive data visualization software from Microsoft USA that focuses on business intelligence. It is part of the Microsoft Power Platform. A spoofing vulnerability exists in Microsoft Power BI. An attacker can exploit this vulnerability to conduct spoofing attacks...