CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.09.30)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2023-39183
High

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7) that involves an out of bounds read past the end of an allocated structure while parsing specially crafted PSM files. This could allow an attacker to execute code in the context of the current process.

CVE-2023-39182
High

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted DFT files.

CVE-2023-39181
High

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted PAR file, which could allow an attacker to execute code in the context of the current process.

CVE-2023-38683
High

A vulnerability has been identified in JT2Go and Teamcenter Visualization applications, affecting versions prior to V14.2.0.5 for JT2Go and V13.2.0.14, V14.1.0.10, and V14.2.0.5 for Teamcenter Visualization. The issue involves an out of bounds write past the end of an allocated buffer while parsing a specially crafted TIFF file.

CVE-2023-38682
High

A vulnerability has been identified in JT2Go and Teamcenter Visualization applications that may read data out of bounds while parsing specially crafted TIFF files. This could allow an attacker to execute code in the context of the current process.

CVE-2023-38681
High

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted IGS file, which could allow an attacker to execute code in the context of the current process.

CVE-2023-38680
High

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file, which could allow an attacker to execute code in the context of the current process.

CVE-2023-38679
High

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file, which could allow an attacker to execute code in the context of the current process.

CVE-2023-38641
High

A vulnerability in SICAM TOOLBOX II (versions prior to V07.10) causes the database service to run with `NT AUTHORITY\SYSTEM` privileges. A local attacker could exploit this to execute operating system commands with elevated privileges.

CVE-2023-38532
Low

A vulnerability has been identified in Parasolid and Teamcenter Visualization applications affecting versions prior to specified ones. The issue involves stack exhaustion while parsing a specially crafted X_T file, which could lead to a denial of service condition.

CVE-2023-38531
High

A vulnerability has been identified in various versions of Parasolid and Teamcenter Visualization, which involves an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.

CVE-2023-38530
High

A vulnerability has been identified in Parasolid and Teamcenter Visualization applications, affecting versions prior to V34.1.258, V35.0.254, V35.1.171, and the corresponding Teamcenter Visualization versions. The issue involves an out of bounds read while parsing specially crafted X_T files.

CVE-2023-38529
High

A vulnerability has been identified in various versions of Parasolid and Teamcenter Visualization, which involves an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.

CVE-2023-38528
High

A vulnerability has been identified in various versions of Parasolid and Teamcenter Visualization, which involves an out of bounds write past the end of an allocated buffer while parsing a specially crafted X_T file. This could allow an attacker to execute code in the context of the current process.

CVE-2023-38527
High

A vulnerability has been identified in Parasolid and Teamcenter Visualization applications, which involves an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.

CVE-2023-38526
High

A vulnerability has been identified in Parasolid and Teamcenter Visualization applications, affecting versions earlier than V34.1.258, V35.0.254, V35.1.171, and V14.1.0.11, V14.2.0.6, V14.3.0.3. The issue involves an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files.

CVE-2023-38525
High

A vulnerability has been identified in Parasolid and Teamcenter Visualization, affecting versions earlier than V34.1.258, V35.0.254, V35.1.171, and Teamcenter Visualization versions earlier than V14.1.0.11, V14.2.0.6, V14.3.0.3. The issue involves an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files.

CVE-2023-38524
Low

A vulnerability has been identified in Parasolid and Teamcenter Visualization applications, present in versions earlier than specified. The issue involves null pointer dereference while parsing specially crafted X_T files, which could allow an attacker to execute code in the context of the current process.

CVE-2023-37373
Medium

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications accept unauthenticated file write messages.

CVE-2023-37372
Critical

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4) that is vulnerable to SQL injection. This could allow unauthenticated remote attackers to execute arbitrary SQL queries on the server database.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS