CVE Vulnerability Catalog

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7) that involves an out of bounds read past the end of an allocated structure while parsing specially crafted PSM files. This could allow an attacker to execute code in the context of the current process.

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7) that involves an out of bounds read past the end of an allocated structure while parsing specially crafted PSM files. This could allow an attacker to execute code in the context of the current process.

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted DFT files.

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted PAR file, which could allow an attacker to execute code in the context of the current process.

A vulnerability has been identified in JT2Go and Teamcenter Visualization applications, affecting versions prior to V14.2.0.5 for JT2Go and V13.2.0.14, V14.1.0.10, and V14.2.0.5 for Teamcenter Visualization. The issue involves an out of bounds write past the end of an allocated buffer while parsing a specially crafted TIFF file.

A vulnerability has been identified in JT2Go and Teamcenter Visualization applications that may read data out of bounds while parsing specially crafted TIFF files. This could allow an attacker to execute code in the context of the current process.

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted IGS file, which could allow an attacker to execute code in the context of the current process.

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file, which could allow an attacker to execute code in the context of the current process.

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file, which could allow an attacker to execute code in the context of the current process.

A vulnerability in SICAM TOOLBOX II (versions prior to V07.10) causes the database service to run with `NT AUTHORITY\SYSTEM` privileges. A local attacker could exploit this to execute operating system commands with elevated privileges.

A vulnerability has been identified in various versions of Parasolid and Teamcenter Visualization, which involves an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.

A vulnerability has been identified in Parasolid and Teamcenter Visualization applications, affecting versions prior to V34.1.258, V35.0.254, V35.1.171, and the corresponding Teamcenter Visualization versions. The issue involves an out of bounds read while parsing specially crafted X_T files.

A vulnerability has been identified in various versions of Parasolid and Teamcenter Visualization, which involves an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.

A vulnerability has been identified in various versions of Parasolid and Teamcenter Visualization, which involves an out of bounds write past the end of an allocated buffer while parsing a specially crafted X_T file. This could allow an attacker to execute code in the context of the current process.

A vulnerability has been identified in Parasolid and Teamcenter Visualization applications, which involves an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.

A vulnerability has been identified in Parasolid and Teamcenter Visualization applications, affecting versions earlier than V34.1.258, V35.0.254, V35.1.171, and V14.1.0.11, V14.2.0.6, V14.3.0.3. The issue involves an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files.

A vulnerability has been identified in Parasolid and Teamcenter Visualization, affecting versions earlier than V34.1.258, V35.0.254, V35.1.171, and Teamcenter Visualization versions earlier than V14.1.0.11, V14.2.0.6, V14.3.0.3. The issue involves an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files.

In MongoDB Ops Manager v5.0 prior to 5.0.22 and v6.0 prior to 6.0.17, an authenticated user with project owner or project user admin access can generate an API key with the privileges of org owner, resulting in privilege escalation.

CVE-2023-37570 vulnerability exists in ESDS Emagic Data Center Management Suit due to non-expiry of session cookie. A remote attacker could gain unauthorized access to the targeted system by reusing the stolen cookie.

CVE-2023-37569 exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component. A remote authenticated attacker could exploit this by injecting OS commands on the targeted system.